last executing test programs: 3m51.34653745s ago: executing program 4 (id=14152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0x800000}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x17c}}, 0x4000) 3m51.317825348s ago: executing program 4 (id=14153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32=r2], 0x44}}, 0x2000800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x20000044) 3m51.095951566s ago: executing program 4 (id=14155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'hugetlb'}, {0x2b, 'net'}]}, 0xe) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000340)={@remote, @empty, @rand_addr=0x64010102}, 0xc) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) shutdown(r3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000), 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 3m50.951548693s ago: executing program 4 (id=14160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000140)}, 0x20) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000000c0)={0x6, 0x10, [0x86, 0xffffffffffffffc0, 0x0, 0x7f], &(0x7f0000000080)=[0x0, 0x0]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 3m50.823277211s ago: executing program 4 (id=14162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10001}}}}}, 0x0) 3m50.703669998s ago: executing program 4 (id=14166): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r0) (async) close(r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m35.564149024s ago: executing program 32 (id=14166): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r0) (async) close(r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m30.591869297s ago: executing program 1 (id=15404): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x20) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x10a8, 0x30, 0x53b, 0x0, 0x0, {}, [{0x1cc, 0x1, [@m_ct={0x1090, 0x0, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0xa}, @TCA_CT_LABELS={0x14, 0x7, "3edadcd1b38ec5e4d30d9ac4e1dd1bca"}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0xff, 0x6, 0x6, 0x2}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x10a8}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) close(0x3) connect$pptp(r3, &(0x7f0000000440)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x800}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x10, 0x3, 0xd7d, 0x9, 0x40, 0xffff, 0x8000000002e665, 0x4, 0x0, 0x4, 0x5, 0x81, 0x1, 0xffffffff, 0x8]}, &(0x7f0000000240)=0x100) r7 = socket$unix(0x1, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r8, 0x0, 0x0}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r11, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x40000c4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r6}, 0x8) 2m29.693466718s ago: executing program 1 (id=15422): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000000700)=@ethtool_channels={0x3d, 0x7fff, 0x0, 0x1, 0x408, 0x1, 0x9, 0x2, 0x33}}) 2m29.6004813s ago: executing program 1 (id=15424): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) recvmsg$qrtr(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) 2m29.490681076s ago: executing program 1 (id=15427): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m29.06217736s ago: executing program 1 (id=15436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x8c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2900}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb126}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xaa0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x80a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x8c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2900}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb126}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xaa0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async) 2m28.483901725s ago: executing program 1 (id=15439): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffff10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m13.427549348s ago: executing program 33 (id=15439): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffff10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.916889631s ago: executing program 0 (id=18033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80400) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="52391c00000003000000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x891}, 0x40080) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="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"]}]}, 0x114}], 0x1}, 0x0) 1.811352462s ago: executing program 3 (id=18036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf821a33fd0008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4894}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x2b, 0x0, 0xa}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYRESOCT], 0x44}}, 0x0) 1.785560291s ago: executing program 6 (id=18038): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES8=r1, @ANYRES64=r1, @ANYRES8=r2, @ANYRESDEC=r2], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg$alg(r5, &(0x7f0000006180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000006140)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x18, 0x8080}], 0x3, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34a0380b", @ANYRES16=r7, @ANYBLOB="010225bd7000fddbdf25060000002000018008000100", @ANYRES32=r8, @ANYBLOB="1400020077673100"/20], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) 1.727847365s ago: executing program 0 (id=18039): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r5) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x5, 0x3, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x0, 0x95, &(0x7f0000000040), &(0x7f0000000280)=""/149, 0x3, 0x0, 0x0, 0x6a, &(0x7f0000000340), &(0x7f0000000400)="210d6bc2fbcc164b4da94ceec54516d2632087cb49118bf2be49ed8fc48a35bee0eabdf986b735c56402d34b03cb338a0052d81e4c6b275b2cbbce7de3ddbf250163f0e03f5a6560b78c275353d18e5c7921b4d0be630dda5e0bc43158e0ab9de1b8792ffb545a14849e", 0x0, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8000}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0xc010) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f40000000800030020ac0f0005"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.70762661s ago: executing program 3 (id=18040): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='\x00', 0x6408c0, &(0x7f0000000080)={@align=0xd36, {0x5, 0x4, 0x0, 0x3}}, 0x80000001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}, {[0x8, 0x6c3aae8b, 0xf, 0x3]}, 0x9, 0x8a, &(0x7f0000000140)=""/138}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 1.672851923s ago: executing program 3 (id=18041): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r8, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010025bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="9031386c41055d3fc50e82996a060000381a0400"], 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) 1.504623946s ago: executing program 3 (id=18044): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r0, 0x12) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014b700001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) bind$unix(r1, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x3, 0x5, 0x9f7, 0x3ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6cf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9b9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x704}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x151}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r0, 0x12) (async) socket(0x1d, 0x2, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014b700001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) (async) bind$unix(r1, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x3, 0x5, 0x9f7, 0x3ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6cf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9b9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x704}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x151}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000800) (async) 970.459584ms ago: executing program 0 (id=18045): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x41, 0x57, 0x4e24}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffef9500000000000000d6a31bb671d9fce9ad7dc445464b0cb59f48418cb5c422d48300f77499ff6f065fff30944362188fdf0185c972676b41ea017c3b43c072e2d34d0c6d2b988491dd4810b47551868a26c9d1f94556e578ebde1e7f14f67011e1e7ce50d61e77dd5bab60fef362aa7649e4ab8a2a5bafcea68c47"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001640), 0x4) sendmsg$unix(r4, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x40) (async) listen(r5, 0xb2) 970.086672ms ago: executing program 6 (id=18046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)='.'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @fwd={0x1}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000140)=""/167, 0x34, 0xa7, 0x0, 0x7}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) close(r2) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) 969.572998ms ago: executing program 3 (id=18047): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000120001050000000000000000000000000000000000fffffffffffffffe00"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feff"], 0xac}}, 0x4000) 966.970233ms ago: executing program 0 (id=18049): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) (async) r1 = socket$inet6(0xa, 0x80000, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x5, 0xc1, 0x6}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 965.923738ms ago: executing program 6 (id=18050): r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 961.462148ms ago: executing program 6 (id=18052): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd964, 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 958.320294ms ago: executing program 0 (id=18054): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x20c, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x20c, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x21010000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000240)=0x1f, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff0a010101ac1e000100000000000000000000000000000000000000000200808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003e000004d433000000fe80000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300000000000000000000000000000000001700000000000000000000000000020000000000dda2017d19bf52bd889ceaee23fe0000fe0900fffffffbff0000000000000000960700000000000000000000000000022400"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff0a010101ac1e000100000000000000000000000000000000000000000200808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003e000004d433000000fe80000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff0300000000000000000000000000000000001700000000000000000000000000020000000000dda2017d19bf52bd889ceaee23fe0000fe0900fffffffbff0000000000000000960700000000000000000000000000022400"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@local, @empty, 0x0}, &(0x7f0000000380)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r3, 0x15, 0x1, 0x91c20000, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r3, 0x15, 0x1, 0x91c20000, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d7397437", @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800400040004000500040003800400038004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d7397437", @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800400040004000500040003800400038004000100180001801400020073797a5f74756e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r8], 0x38}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, r4, 0x25, 0x10, @val=@netkit={@void, @value=r8, @void, @void, r5}}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x240a12}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]]}, 0x3c}}, 0x8085) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x4, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x4, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 957.925269ms ago: executing program 6 (id=18055): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8000}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f40000000800030020ac0f0005"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 955.149968ms ago: executing program 5 (id=18057): setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 880.058853ms ago: executing program 5 (id=18058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c001300fe80000000000000000000000000002bfe8800000000000000000000000001010000000002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 876.85381ms ago: executing program 6 (id=18059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000000003050001000700000009000200730000000c000780050015000b000000050004000000000011000300686173683a69702c706f727400000000050005000a00000000000000fbb636b963d80c712de5e30883c393a25b08cbee90cae96a49cfbeac5bc9a42848d78fe7b5cfce6bcbdaab412e19e3697b13b1a70c377a42c95896c50d6b9b9ef5de592dda1c38142bb67f228db4c8f04bf3e0691602b96546c609c347f63f8685e063b1c9fe74f4817cdc5fadae1429899caf21c52c31b431c50dbd93797b02928df907ab457f235765baefbc1f2e75d0"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0xc014) r8 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r8, &(0x7f0000000080)={0x67446698, 0x0, 0x1, 0x2, 0x4}, 0x10) recvmmsg(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) r9 = socket(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@union={0xa, 0x6, 0x0, 0x5, 0x0, 0xf61, [{0x4, 0x3, 0x2}, {0xf, 0x1}, {0x7, 0x0, 0x9}, {0x0, 0x1, 0x8a}, {0x6, 0x1, 0xffffffff}, {0x7, 0x0, 0x80}]}, @fwd={0x6}]}, {0x0, [0x5f]}}, &(0x7f0000000640)=""/166, 0x7b, 0xa6, 0x1}, 0x28) ppoll(&(0x7f0000000240)=[{r9, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) recvmsg$can_raw(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x140) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2d, 0x25dfdbff}, 0x20}}, 0x0) 839.530717ms ago: executing program 5 (id=18060): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x80000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000fc3b0690813dd81cc8e52fc0155e9a067ca74d89e568f134cfde6abe94ebbece356c692e538150131c969c283cba95fbd4463932befc1d249c2fc8854bf5124a5315d8cc1ccaca2", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x88044}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x1, 0x10, 0xa14, 0x3, {{0x2b, 0x4, 0x1, 0x3a, 0xac, 0x64, 0x0, 0xe, 0x29, 0x0, @remote, @empty, {[@timestamp={0x44, 0x14, 0xb, 0x0, 0xe, [0xfffffff8, 0x2, 0x80000001, 0xffff2ec3]}, @noop, @timestamp_addr={0x44, 0x3c, 0x74, 0x1, 0x5, [{@multicast2, 0x1b}, {@local, 0x8}, {@multicast1, 0x10001}, {@broadcast, 0x40}, {@broadcast, 0x5}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0x1f, 0x53, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @remote, @remote, @private=0xa010100]}, @rr={0x7, 0x27, 0x3f, [@rand_addr=0x64010102, @loopback, @empty, @local, @broadcast, @local, @rand_addr=0x64010102, @multicast1, @local]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_getaddr={0x34, 0x16, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x10, 0x10, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x150, 0x3, 0x4, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) unshare(0x100000) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0) (async) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x8, 0xeb7, 0xd0, 0x1, 0x2}, 0x50) 767.912166ms ago: executing program 0 (id=18062): r0 = socket(0x2a, 0x2, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) writev(r1, &(0x7f0000001d80)=[{&(0x7f0000000180)="5cfc2b6553", 0x5}, {0x0}, {0x0}], 0x3) recvfrom$packet(r1, &(0x7f0000000a00)=""/236, 0xec, 0x10140, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x5d, 0x4, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x7, 0x10}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xc7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private0, 0x7f, r3}) bind$bt_hci(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x361f, @dev={0xfe, 0x80, '\x00', 0xe}, 0xa}}, 0x4, 0x9}, 0x90) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x200}) 763.707675ms ago: executing program 5 (id=18063): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 603.892119ms ago: executing program 2 (id=18065): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x0, @private}, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYBLOB="390005008ad6ddfdd651bcdd70575ff97ff11b6efb864f49f18c313a8557e6b33a457eba7176591fe3feef001d1c704370131fa4"], 0xd) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x1, 0x1}) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x64048848) 459.699924ms ago: executing program 5 (id=18066): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000000)="056b26a70c910dfd6d522f0e29", &(0x7f0000000040)=""/150}, 0x20) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000180)=0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4448c9125353f357) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.current\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000400)) (async, rerun: 64) recvfrom$llc(r3, &(0x7f0000000440)=""/4096, 0x1000, 0x2, &(0x7f0000001440)={0x1a, 0x30e, 0x5, 0x4, 0x3, 0x4}, 0x10) (async, rerun: 64) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000001480)={r3, 0x0, 0xc3, 0x10de, 0x4, 0x2}) r4 = socket$inet6(0xa, 0xa, 0x7) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000014c0)) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x4c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}}, 0x4010) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x54, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x2004180) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000017c0)={0x27, 0x0, 0x8, 0x3, 0x40, 0x4, 0x7, 0x5, 0x0}, &(0x7f0000001800)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001840)=@assoc_id=r6, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000001880)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000018c0)=0x28) (async) sendmsg$nl_netfilter(r3, &(0x7f0000002a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000001940)={0x10c0, 0x1, 0xa, 0x3, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0xa}, [@generic="5205faed0c3b5207c944d11d6355acbe44a0745ab8d35b10b1ebe089c97927a4af2c53f5d7e48ac8c04574bdadb3a25c0e9647ab4d2a591cc9f4edc4519c056b16d54ad446ee75b6b577852f7b86cae6ff5910501e1864a8e30cf33a0a39de1218162bec4ebab241b60b19b00a5b91ca1c520f3bd9757176e3b153a3f8b2e555e91aadbf6172824064fd04b64628ba3236ecfbb7dbcafc7e2d504041dbdd2c379732c2c1eb991340bbe0", @generic="5c5a43723ae1db3e8510cca716833843ae769a97178b267f01b9a479d387fadd031a82a9d8de24007d362a72a89babd684d06a22fe74a51cc963dfe3df3593c79cf7919cf607e7e20e6772db4b2b3a1177051c22247dd2eeecb9ddb80a3149a6c4eec3188b84dededf3c0df4c739104816180345123e25e41210b6849daa6b0f425cd4ae2c663d65303692ba93752df8aa3109c78487d2021a059437051850142b07e7831dd2b204092898d2ac14cd660d8138569bd8ffcdd76a3837b4b3bc71310b046df59a0d31eda50547d835675fedd9e28d85c70fc805964d8bf855029834458ecb113fe5da5233394215e828e8df488a3d1dafd7735ab4f56ea0497a745c8de1ca9f2e51f174cef30a7bdc7ab89140a0b640a63bb19362a891601548c3bd4d9e53cbe4da5c4542524839f59023fd48f4bdf199ebfabdb56bad29b916c420a7738ac424bbc9d1c6a991b56e6ad9e856a1f932d56002edb233480cc3deec512fef32101b60f3bf957e2423ea440e9cb199c24b8f5007d87ec3a7dfa30e200ca18ef4e65db71bb5e769f0ea157822a2c0aaa75fb63334d2f8dbc9bc90b94ec91abc7957b907af941feda79d437f30c1d659ec7e0adeee5710f2dda3c9772312ccc6d8cbf691d229e71c23173e7c3699d6bb31c0ea71f2bbb5664bbc96e21b0249e778d431143a2121604178bda69e9ea05b6316e686d34f08e8b1c74464aeb2c647e44e6ecdefd803970162da54b3526fa5f7f58c7c0ba4b584fe242be6d5495b5df2c57c80b0220a4659e5030efba91336b8008b464dde85a74f4def3bb9dd307fe0b8a875b6f63ce3bbed6b95f3f1583fa54d860f54dc11828a09ea1ec6342cc9dcda0e13e513b95a4acc45078d62ebc706bd379a62ad630f51ac1dc847281e5a72a16f90ce3e03f06b428b7992f176c48c688b79817f94cb48257ddc1419335da1ae4798429b44d327f5f6a13054e63ce1f629a7f36972d7f8d9e6ea431f85eee5715ce8be2b6504b916b4118e3b1612d917f1daa3e3e06cb9ce834dbf926d84e898fe50a2294e70fac0e98e8c4c0b116c00a7332f40b559655ac8d1d1a586237835c8eb8ffce7da94c695ab7230ea1de3bd4e3ca45a103a4cb51f4c85bf57dc9b9103bd69b0aafd5d338b8bd3af2ce9e2bad544864770953fafe79c434037de48f8e565988018c8bc3875d81b02686d9c908f1bd06aebab830568dff181d222dfd39e788423d01cfe6683a2af07d4e2098315bfa748bc4bba5f1409c4db003f92eb9893e0a4ffab49463c40c6901cdb4b0b8c6a4d83a9b01925594f9a3a640188b023544b48282681b69057c56abb2d8f770e4986f5cf8ddfead4e2f25f43184dfc561d6689e796fbe21df586f4b8473a75c164c13cee0ce45c24d41e30ca0af836cf0c8f8b4cd056ce46a6ef7f3d14e39ecb33229b04182c8a7a3758a7098468260757c84e2d5df6a9d9f992a8ff72a28214b7429fefc57e5d3eb8be3ef7c3e8da4e21658c7634528a3255e55b7a899d8603f5791e16f5b9f316a78d1d97a4be14cf0f65a7a7b10efc56863ae39b9bf42f7eb9b5a169c98f019d248ae14a4cbc0a5e7ff3d302ed0d5e591c326027c9186b50aa1c39a7ce40294d59ec0b64c7a78603c6e2b28e1631be6d10b2d711b93f1d31e572664c4ff93982f61ef60ffd94f48143608967659e84bb4c41f27a0a4e0fc078315dcab22f6bd5568bf13397079e8bf45d3f4f195925f26145de264ad68497b8cac999394219aa641ea44e2ae9aa0590a2c42d5a4e6fd6b6c695f4567383b0508c245794f6d4ab5ac023dcdec32a370dcf666e2c0d222baa8b3fe4eb7b92cefbc13a262636dd931c181896e5e4fe6bd3e2a7a4a8db326fccf3d450d0dadab4f20445f83002d6d8f1e752df63219bd6a61fc78e11b6a282a3f3992e04a56647fe501b000d0cd7cd282bc00714d0bd1a0db69d7cfd9024ac0f5475fe2d0a0b4603d9030e4fa32caadedb893cc25b1b28b95bc6360402ccb5210818f547827dcb890e5247cdc5195ab050e9b55ab12583c9668a2e08886f119df88664ac8d230f51ad4c34eb6a0764acce13155adeed87449b017ac819b20e855e60d33d1a1d5d333c198b0a796e2eb73c451db9356f18785dca75e27f7f5a70f53b809a36761452144b754680a8bf71f12a967d0797d8fc98b44ad84b862b71c57b506c56d274bd029ef34e17e2051e0acf5831e8d2af3585a9d0220854d31910d15fd15aa6622c10d1b38805ff078dfcbddf4807aae7447e51164efe497cc7702467c301eccff84124dfbb9b30dada4afd1d972aadbe0f4d7d78f7b6e5d060d02b33a996e5745dada562fa5bcedd6b4e4b38e707592cac8f4f3760d9d5818f3a5612d9485e11a1d872bcf0f81873423f9fbdb45b518d3031b60456ca1b9f9594ec84a98a2fde386bcf54be0a26939c7e42d321b6eca30325b03a4149c423960df5dd2dc52e98a37e43d0baf2670bfb90c3277bc41ee440e5cb2fbcc8e77ee08e4efe5cd766548adea91a6f1b027578670438158eb7b975dc7bb113cb3cf400646b35e58cc81009596367794420ddb662f912580ae2c6d1fd52b84d7309434afc31192fb67f8a79ff1ee2133bb3b8f1be5ffc497b5f3604f03d2b02f8dcb6cd22f01453ccb8fa7369d5e60c22aaa33ceb4d032bee38fa9e5fb050edddc7db661a2ee99929f9a87f4a73a3afd54a02e978671018a702b85604514e3d2dcb9bd03f9f1c13c1bc4b31f2877f3a37b2c768e219b934751e043169678373937abb67db6da3621aa34fdd4c32c3102d9743cb569b005566a43d95d5e7cde5e3b635e7117d6fdd2cfdef7c0733ffdd6ef3a3ff2049b73849eee8f36ab548d287a8881413860aa9f98fa7f3932d98f4d52398cfca44a9b0825a30bb150db2a2de2c9f6dffcbb0c6399d0966c110671c1a2fe8c31379c513d2130dab0bd32c812c53a53b1636372d76681502eb885d31bca1c080901aea4e9ecff8e844750062939524ae2c3ff932bf8fb24a506683acaab84da7f8b96e1ceaa4b49328b3ae31934e1c69b83cb95afd63f5fd3d52fe67cfe3e5e5357260d16bd82e2d291b95ac03a86313bad8386abe0a2ec827b8da543d3458978e1fe823bda801ca8208d57e83b37a388d4addbb214417465549221ea36d550665f905ce0fd8b39d5ac5297af5fef813f68a44973adb01ea3a38e228b3c02183334a64773658aa7ecc3f94d9b3ef83dd55332300975b90c16527a540eafbeac7b4d03a66fb86c0d9a99783621075b92cbb4fee33df60939c8a6acbbcc871c81eb0d2ec67b2dca12e17fc52b0e03ec6f6b8f0a68b426ab78befdb8e1fe8384e36ff3eb2fb4b5ba8fbce1a4526183a824fcf8f77c1b5f35ad6925ee41c64090d8bb3645488ea78048ec601794fe89fb8b1122d9efae5faae0df6902df35270047e62cb94c33cc334f350f5a07270132ee1174ea11751f6522e4c0b2fd15fbc992272b721b3caf50f1f0553bbd230f3027b88a272b4dbb71b6aa06815f82927f065859075cbf31be376f6a53600e57fd46f354e922ec7b858fd10fe74ffc4f8e8707a07a2ec99f331063b88750ff34e9061234f5d253482899c054c79cb8b7a5866f70f67981f9b8cfa28e89a38bba562c635573354094b630c0b6da8b1fa534010c7bba555d81cf56883574fae73fe59da9b1fb01865a158a86116d9c0a4833de7407029f07a2b5e224137ad15c7714c62bc0ae8ab8bf34e3c28660f1b4ab00a4c93783ff91ce6ae70e44501c34804770d56632b8e25f3dfc69f2d1d947fd163cc2ad841710ef2a6b9e123115946f8ac1bb59af80b2b51c6207bad275c133193bffb019d40e749de96a34d6ec266846ac5626ce9e1437c3f60858900668a7e9afa34f6bf5d58904b431e4e9aa8464590a8a13eea732ee91920c9f50c06e3ca6509e1951ffe07f6e68119a6aa78a7280ba249b27261f7c8bb59be15ddb2434ce61f810b731acd354d0ca5dbcbfd7f05b2e6b1d4ca88dd36e2e1434a073ea610acc8bf3a26432dbde8bed235e79eb0f267379a0b53df30da0730a06680036f95828d240097e771102025e7f5ef8cb02760931a6370c04b0becc349e7779810b1380033f770e3314bccf8d4acc91f9003ddc59c82ac1f59af8238dbaf02c935112327df42cbde6ac722f6c2f1ddfed346c71bbdd16383dcc67e95956f42fa91942fab5a68954366d44d943ac1d43f979580624e72c35233412071f48869d3cb730f1d2ab7f4d45a480a0661ffd9e905432fad28d3f1a457079d41d34b42ec194bc4f3733601273663dc691669677d1912ac7c5883ad70f45925328d48770a34414a7d596b663c5606e8c1ad7ae80ea646c86fc1f3bf4fd2e9a0ed74bad3f4246f6a3777279fbea4c0add886794bedbd7a7fe1165269eefb86baf8bc4634ac969863e23f3df7ecd262e042b916757352fff7a5dd8126cb69fbac257160c17a07098e57a382fc905cd80515ace41f323e73776e58664c7a2e9458d7657c5dc473d113a48141d7843c4f1806902b5e75c88fecbf47905b3180c36f830c9cb28181102d078ce6c2deaf3ae8c0cd4385096bdef6ecb542132136b51175fb4adc1ef0a1e214db8d6cdf39e2b204b6f54cb2d84380668156451ac8390eaa337f9458ba680f5a866944ff97fec07f64e5a588e5c5677a8d6c422d79fd8358173dc57baeacd1a87ef6c395bad3f0c880fc0ade8e9f07adea434caab896666e4bade0728c4140fc65815118df1d2cbe3c0e621a3ab5180c76619acea7bde176cd937f2fb823846177365070e5e108d39f67bfdcd4a13bac94b19eeeb58ebc9f5896c9b9bf391e78b0509cf301b60751013c5e407fbaef3f2c6e0bd9c73eb94860b322c643ea3b37a87ea9793717532a0c4d1a0eb6db09aeafd520085e437fb86c102ecd0b4b1c10bfde77cc41a0e85779fc2963a9e2a3476bfda70de99cfe32a745db96bba4de29e32626456c03aee521c46a6d21cd677e9787adc58fbb1a8db4b8bf82c3fb6a60a84d34afe1ea30d19c117d679e8284cd2ce9ed21c5169455eea7df361c1471c1e223afa902c691be19eb7d5c112f0f201b4149f7d6da44e551e9cfd6519ebc3164de18a6f2c39cc86d2497e5b5bcef68d05726a91f7d5f000a7efb7b66ffa88c437889d0328327f7e035109941649fdde424a744ca0a14961b1772f31d1f1f9517fbeef5f59d50691940a470ff88a8e06c70a06edda1a47b0bd53182b0eaf16666cc2caf9a741740c2aba1e041c2cb528a126da500f2100f7141f9b0a619bd48eba7c1f36a3f8639cfe18481cd02f0fa92e5aae0c7eec55ab83a76306c373a46ca678d03e6efb1aa16c6771909331337902fa155dac5da14627f89dd3f3572e9bf6e0be915a7c1abb8122e8811b0bab1f1047eb473516e3d6d4f93ff78cc8910b3eec89c5caed6619874b04b1413002704f644e65e133b8c08f6096dfef344eaae872182d988dffbda9e9ba719d2043e87a9f8e1e0016ed047027d514ec51675d11556bda7e0fcc4e5af06e141cd7936f885a502cdb5dc3f35a6b0bf46130d1ed3a8b96117bad2949226f5009224cc09d963a5a68b5c0b9c17f9b330b140840e62bd88808b0a60e08a6eef6c37c8f668c8009ad46d7cebe5d442da5903c5234288da82528608c5af77301dcd52e1c652fa8a96768226dfdecf989a44baec7ba14b2ed9ab97ce3fc696167bf5ea5c7666b4d54154429f37115e398dba04456abbb639a9d86c2df0e7617c8d3fb848e422bee0776a2c955f2dbbe6e039d32ec07a90"]}, 0x10c0}, 0x1, 0x0, 0x0, 0x95d3fcd0d3916063}, 0x4000) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002ac0)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x0, 0x240, 0x328, 0x328, 0x328, 0x4, &(0x7f0000002a80), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2, 0x0, {@mac, {[0xff, 0xff, 0x80, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x97, 0xc3a9, 0x3ff, 0x1, 0x5c1, 0x9, 'caif0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0xe1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @empty, 0x1, 0xffffffff}}}, {{@arp={@local, @broadcast, 0x0, 0xffffff00, 0x5, 0x4, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xf7, 0x1ff, 0xfffa, 0xfff8, 0x875, 0x6, 'bridge_slave_1\x00', 'macvlan1\x00', {}, {}, 0x0, 0x316}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0xa3, 0x1, 0x0, "33d4a972cba4212ecbc176b1219037082f303108bceab660b97b5041f38f0ae81f6ea7f3d2a5bada51702fa49a6b29c1ae1bd5ba8b35d0f3d6448cddcdb5f258"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000002f80)=0x4) (async) ioctl$FIBMAP(r8, 0x1, &(0x7f0000002fc0)=0x2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000003000)={r6, 0x0, 0xc8, "ed4467ab82d76a1a09ec45d00d12c1e971f9b72c5bb5861cf660d0d8c58d82cbc528d32287d70bb2a5fefc52f2a12fd993edac2643436a8701ef73d928be8d51789ab4613eef51605c67270fb23cff32dc6e2fae0c15e279ad9b4e51199a34ba9efb6ce3d931e65bd402c0477539a1d8194abee61ab601885ddfb14072f6ed2d1cfef629ff5b748c937761f5219251b1cc93a853ae9406048906b6ea63414c8bfa320d982f55d23b925b82a6d6b80b426914cb197a5ca5e1a0b0491025deaf9a0d87cc81599917b3"}, 0xd0) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003100)={0x0}, &(0x7f0000003140)=0xc) (rerun: 64) syz_open_procfs$namespace(r9, &(0x7f0000003180)='ns/mnt\x00') (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000031c0)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x30, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x21}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 408.098378ms ago: executing program 3 (id=18067): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x80, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, @in6={0xa, 0x4e23, 0x80000000, @empty, 0x7f}, @in6={0xa, 0x4e20, 0xb, @loopback, 0xb}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}]}, &(0x7f0000000180)=0x10) r2 = epoll_create1(0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000004c0)="05032200d1fd140000004788031c09102c1e542e24bda9b7c02589e6c724d68f238dacca76e660e3", 0x28, 0x4, &(0x7f0000000180)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)={0xa000000d}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r14 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r14) 407.732531ms ago: executing program 5 (id=18068): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0x1000000, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'lo\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x19, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0xfffffc01, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x1, 0x2, 0x2, 0x6, 0x6], 0x3, 0x5}, {0xffffffffffffffff, [0x6, 0x2, 0x3, 0x2], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3e0) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) 349.579974ms ago: executing program 2 (id=18069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x5}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) connect$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2b, 0x80801, 0x1) bind$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r11, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8000}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0xc010) r12 = socket(0x400000000010, 0x3, 0x0) write(r12, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="6000508011000a004abee339084eeef16f162471f40000000800030020ac0f0005"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 175.790811ms ago: executing program 2 (id=18070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c80)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f80)="314a03337667286271f12e39c4634f42640a10d36b8c64fc9926b76028f443d8d23112a8f8110b3906bbe26961accb312aad87d60efc07ebd23ce31d66f1846a42df214d0b6f399f8da3e0ef756804ebf97db1e55f54e00710b97f81602ff0a5f3d0201c51a295b2000000000001000042ad47c0a218e608329691a5cff80ba3e886e81a3ff53e3dc7d644ebd9e0bfbf90607e4ed11214f77d2ff2e0e38a0aff20181a982034bb530acfc6ec343de6cf613d8ebf1ed8c5c0c5a9747b8b161d77b4aee1393359866cbe421373c4f8e375b2c06770f16a97eb6f12a8d6d6a7f09443fa91abf9c6a8509540b9cf3c353ed279698d56023938597e2c59124970257675c5", 0xfdef}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x300, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r7, @ANYBLOB="080002000000000008000500"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 147.627263ms ago: executing program 2 (id=18071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 74.823237ms ago: executing program 2 (id=18072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 0s ago: executing program 2 (id=18073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000900)=0xe1d, 0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) recvmsg(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r7, &(0x7f0000000240)}, 0x20) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000100)=0xf7fffffd, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r13}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340), 0x1000000}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r14, {0x0, 0x2}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x4000010) kernel console output (not intermixed with test programs): slave: invalid value (18446744073709551615) [ 1162.084845][T26086] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1162.098374][T26086] bond6 (unregistering): Released all slaves [ 1162.185336][T26087] syzkaller0: entered promiscuous mode [ 1162.197203][T26087] syzkaller0: entered allmulticast mode [ 1162.274229][T26099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.427645][T26111] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1162.572133][T26124] __nla_validate_parse: 20 callbacks suppressed [ 1162.572151][T26124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16651'. [ 1162.589892][T26124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16651'. [ 1162.682302][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16653'. [ 1162.706140][T15241] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1162.985127][T26151] syzkaller0: entered promiscuous mode [ 1163.020251][T26151] syzkaller0: entered allmulticast mode [ 1163.071480][T26166] netlink: 'syz.6.16662': attribute type 1 has an invalid length. [ 1163.090995][T26167] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.16659'. [ 1163.189353][T26173] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1163.249047][T26159] macsec1: entered promiscuous mode [ 1163.305776][T26150] macsec1: entered promiscuous mode [ 1163.568106][T26191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16669'. [ 1163.579666][T26193] netlink: 'syz.3.16670': attribute type 1 has an invalid length. [ 1163.579953][T26182] syzkaller0: entered promiscuous mode [ 1163.593223][T26193] netlink: 'syz.3.16670': attribute type 2 has an invalid length. [ 1163.604585][T26182] syzkaller0: entered allmulticast mode [ 1163.620431][T26184] pimreg: entered allmulticast mode [ 1163.637326][T26182] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1163.778094][T26198] netlink: 'syz.6.16671': attribute type 15 has an invalid length. [ 1163.837087][T18331] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1163.900534][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16674'. [ 1163.951830][T26205] netlink: 'syz.2.16674': attribute type 1 has an invalid length. [ 1163.961818][T26205] nbd: error processing sock list [ 1164.001506][T26218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16678'. [ 1164.169819][T24515] net_ratelimit: 36 callbacks suppressed [ 1164.169835][T24515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.207849][T26241] tunl0: Caught tx_queue_len zero misconfig [ 1164.261160][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16686'. [ 1164.326709][T26258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16688'. [ 1164.338335][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.428572][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1164.442984][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1164.560898][T26271] xt_hashlimit: max too large, truncated to 1048576 [ 1164.627512][T26283] netlink: 'syz.2.16694': attribute type 21 has an invalid length. [ 1164.673572][T26283] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1164.703369][T26283] bond9 (unregistering): Released all slaves [ 1164.749332][T26288] netlink: 'syz.3.16696': attribute type 4 has an invalid length. [ 1164.970670][T18329] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1165.012428][T26316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1165.019323][ T9931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1165.033860][ T9931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1165.121041][T26327] Cannot find add_set index 4 as target [ 1165.173592][T26334] sctp: [Deprecated]: syz.6.16709 (pid 26334) Use of int in max_burst socket option. [ 1165.173592][T26334] Use struct sctp_assoc_value instead [ 1165.616074][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1165.630484][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1165.660507][T26370] syzkaller0: entered promiscuous mode [ 1165.681133][T26370] syzkaller0: entered allmulticast mode [ 1165.784298][T26378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1165.814697][T26391] netlink: 'syz.3.16725': attribute type 1 has an invalid length. [ 1165.833867][T26378] bond8 (unregistering): Released all slaves [ 1165.934651][T26377] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1166.012619][T26377] bond8 (unregistering): Released all slaves [ 1166.062409][T26402] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1166.096358][T15241] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1166.130783][T26402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.138259][T26402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.169435][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1166.183974][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1166.311412][T26411] netlink: 'syz.6.16732': attribute type 1 has an invalid length. [ 1166.384516][T26415] syzkaller0: entered promiscuous mode [ 1166.421064][T26415] syzkaller0: entered allmulticast mode [ 1166.865144][T26451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.980774][T18330] bridge_slave_0: left allmulticast mode [ 1166.989122][T18330] bridge_slave_0: left promiscuous mode [ 1166.998977][T18330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.115238][T18330] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 1167.145764][T18330] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 1167.234869][T18330] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1167.323829][T18330] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 1167.361304][T18330] bridge3 (unregistering): left promiscuous mode [ 1167.438458][T18330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.472805][T18330] bond0 (unregistering): Released all slaves [ 1167.497870][T18330] bond1 (unregistering): Released all slaves [ 1167.525945][T18330] bond2 (unregistering): Released all slaves [ 1167.558445][T18330] bond3 (unregistering): Released all slaves [ 1167.582309][T18330] bond4 (unregistering): Released all slaves [ 1167.602976][T18330] bond5 (unregistering): Released all slaves [ 1167.634822][T18330] bond6 (unregistering): Released all slaves [ 1167.649908][T18330] bond7 (unregistering): Released all slaves [ 1167.664971][T18330] bond8 (unregistering): Released all slaves [ 1167.685156][T18330] bond9 (unregistering): Released all slaves [ 1167.704045][T18330] bond10 (unregistering): Released all slaves [ 1167.720631][T18330] bond11 (unregistering): Released all slaves [ 1167.744361][T26453] bond13: option fail_over_mac: invalid value (16) [ 1167.753829][T26453] bond13 (unregistering): Released all slaves [ 1167.841655][T18330] tipc: Left network mode [ 1168.297446][T18330] hsr_slave_0: left promiscuous mode [ 1168.325007][T18330] hsr_slave_1: left promiscuous mode [ 1168.353125][T18330] veth1_macvtap: left promiscuous mode [ 1168.372946][T18330] veth0_macvtap: left allmulticast mode [ 1168.384510][T18330] veth0_macvtap: left promiscuous mode [ 1168.462270][T26540] netlink: 'syz.2.16769': attribute type 1 has an invalid length. [ 1168.623533][T18330] team0 (unregistering): Port device team_slave_1 removed [ 1168.636325][T18330] team0 (unregistering): Port device team_slave_0 removed [ 1168.691498][T18330] team0 (unregistering): Port device dummy0 removed [ 1168.775018][T26540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1168.945322][T26565] __nla_validate_parse: 19 callbacks suppressed [ 1168.945339][T26565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16776'. [ 1169.014176][T26571] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16779'. [ 1169.037517][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16777'. [ 1169.048574][T18330] IPVS: stop unused estimator thread 0... [ 1169.142513][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16782'. [ 1169.183370][T26586] netlink: 'syz.0.16783': attribute type 1 has an invalid length. [ 1169.196770][T26584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16784'. [ 1169.224975][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16784'. [ 1169.263381][T26589] syz_tun: refused to change device tx_queue_len [ 1169.327157][T18330] net_ratelimit: 11 callbacks suppressed [ 1169.327174][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1169.347906][T18330] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1169.483509][T26602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16790'. [ 1169.495408][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16789'. [ 1169.833101][T26628] lo: entered promiscuous mode [ 1169.852400][T26628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.876550][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1169.891645][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1170.040928][T26641] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1170.121242][T26647] syzkaller0: entered promiscuous mode [ 1170.137664][T26647] syzkaller0: entered allmulticast mode [ 1170.157985][T26652] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1170.168383][T26647] 0: reclassify loop, rule prio 0, protocol 800 [ 1170.199854][T26654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16806'. [ 1170.324022][T26662] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1170.402726][T26672] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16812'. [ 1170.418621][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1170.433378][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1170.482596][T26672] bond10 (unregistering): Released all slaves [ 1170.720383][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.740376][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.751604][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.759873][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.769381][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.778483][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.787313][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.795651][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.805498][T26697] netlink: 'syz.5.16817': attribute type 8 has an invalid length. [ 1170.969444][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1170.983805][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1171.552785][T26730] tipc: Enabled bearer , priority 0 [ 1171.599565][T26736] syzkaller0: entered promiscuous mode [ 1171.622037][T26736] syzkaller0: entered allmulticast mode [ 1171.654063][T26723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1171.703023][T26723] tipc: Resetting bearer [ 1171.731254][T26739] bond0: entered allmulticast mode [ 1171.741829][T26739] bond_slave_0: entered allmulticast mode [ 1171.758874][T26739] bond_slave_1: entered allmulticast mode [ 1171.773402][T26721] tipc: Resetting bearer [ 1171.800477][T26721] tipc: Disabling bearer [ 1171.808838][T26753] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1172.243601][T26783] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 1172.283544][T26783] macvlan3: entered promiscuous mode [ 1172.294877][T26783] macvlan3: entered allmulticast mode [ 1172.310053][T26783] bond13: (slave macvlan3): Error -98 calling set_mac_address [ 1172.429566][T26797] veth0: entered promiscuous mode [ 1172.450654][T26797] batadv_slave_1: entered promiscuous mode [ 1172.581137][T26796] batadv_slave_1: left promiscuous mode [ 1172.582060][T26805] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1172.602171][T26796] veth0: left promiscuous mode [ 1172.728989][ T1771] block nbd5: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 840 seconds [ 1172.739810][ T1771] block nbd5: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 840 seconds [ 1172.750923][ T1771] block nbd5: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 840 seconds [ 1172.763124][ T1771] block nbd5: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 840 seconds [ 1172.972116][T26848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1174.040496][T26935] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1174.059442][T26935] bond2 (unregistering): Released all slaves [ 1174.262831][T26955] syzkaller0: entered promiscuous mode [ 1174.268769][T26955] syzkaller0: entered allmulticast mode [ 1174.461542][T26981] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1174.472866][T26977] x_tables: duplicate underflow at hook 2 [ 1174.481076][T26984] xt_hashlimit: size too large, truncated to 1048576 [ 1174.597755][T18328] net_ratelimit: 16 callbacks suppressed [ 1174.597773][T18328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1174.618018][T18328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1174.751633][T27003] __nla_validate_parse: 53 callbacks suppressed [ 1174.751651][T27003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16910'. [ 1174.873528][T27012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16912'. [ 1174.908090][T27014] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16914'. [ 1174.951750][T27016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16915'. [ 1175.115927][T27034] vlan4: entered promiscuous mode [ 1175.123757][T27034] bridge0: entered promiscuous mode [ 1175.134531][T27033] syzkaller0: entered promiscuous mode [ 1175.143823][T27033] syzkaller0: entered allmulticast mode [ 1175.207487][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1175.223053][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1175.283681][T27045] pimreg: entered allmulticast mode [ 1175.325048][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16924'. [ 1175.545891][T27067] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16932'. [ 1175.559299][T27062] No such timeout policy "syz1" [ 1175.592907][T27071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16934'. [ 1175.737440][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16938'. [ 1175.758282][T27083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16936'. [ 1175.768172][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1175.782599][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1175.852878][T27083] bond14: entered promiscuous mode [ 1175.873810][T27083] bond14: entered allmulticast mode [ 1175.923414][T27098] syzkaller1: entered promiscuous mode [ 1175.944230][T27098] syzkaller1: entered allmulticast mode [ 1175.965571][T27098] validate_nla: 32 callbacks suppressed [ 1175.965587][T27098] netlink: 'syz.3.16943': attribute type 8 has an invalid length. [ 1175.984515][T27105] syzkaller0: entered promiscuous mode [ 1175.994642][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16943'. [ 1176.007338][T27105] syzkaller0: entered allmulticast mode [ 1176.045291][T27113] netlink: 'syz.5.16949': attribute type 1 has an invalid length. [ 1176.289386][T27098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.297751][T27098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.329615][T18331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1176.345222][T18331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1176.555090][T27139] netlink: 'syz.2.16956': attribute type 1 has an invalid length. [ 1176.625676][T27143] netlink: 'syz.6.16958': attribute type 1 has an invalid length. [ 1176.663523][T27143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1176.680168][T27150] lo: Caught tx_queue_len zero misconfig [ 1176.713805][T27143] bond2: (slave ip6gretap1): making interface the new active one [ 1176.728467][T27143] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1176.863342][T27162] syzkaller0: left promiscuous mode [ 1176.875423][T27162] syzkaller0: left allmulticast mode [ 1176.883040][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1176.897502][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1177.010142][T27175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1177.021409][T27175] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1178.779010][T27266] xt_hashlimit: size too large, truncated to 1048576 [ 1179.189955][T27299] netlink: 'syz.2.16999': attribute type 1 has an invalid length. [ 1179.589867][T27324] netlink: 'syz.5.17006': attribute type 1 has an invalid length. [ 1179.662397][T27324] netlink: 'syz.5.17006': attribute type 1 has an invalid length. [ 1179.689089][T27328] lo: entered allmulticast mode [ 1179.706925][T27328] tunl0: entered allmulticast mode [ 1179.714221][T27328] gre0: entered allmulticast mode [ 1179.728191][T27328] gretap0: entered allmulticast mode [ 1179.740801][T27328] erspan0: entered allmulticast mode [ 1179.753948][T27328] ip_vti0: entered allmulticast mode [ 1179.760587][T27328] ip6_vti0: entered allmulticast mode [ 1179.778138][T27328] sit0: entered allmulticast mode [ 1179.788911][T27328] ip6tnl0: entered allmulticast mode [ 1179.794796][T27328] ip6gre0: entered allmulticast mode [ 1179.803216][T27328] syz_tun: entered allmulticast mode [ 1179.810589][T27330] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1179.997384][T18329] net_ratelimit: 11 callbacks suppressed [ 1179.997402][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1180.028250][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1180.034501][T27353] __nla_validate_parse: 15 callbacks suppressed [ 1180.034517][T27353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17016'. [ 1180.168565][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17020'. [ 1180.211758][T27367] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1180.293485][T27362] syzkaller0: entered promiscuous mode [ 1180.301890][T27362] syzkaller0: entered allmulticast mode [ 1180.383055][T27378] netlink: 'syz.0.17026': attribute type 2 has an invalid length. [ 1180.426379][T27379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17026'. [ 1180.606291][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1180.621110][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1180.715497][T27409] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17036'. [ 1180.753953][T27415] netlink: 'syz.3.17039': attribute type 1 has an invalid length. [ 1180.855802][T27425] xt_hashlimit: size too large, truncated to 1048576 [ 1180.919856][T27431] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.17042'. [ 1180.932002][T27433] netlink: 'syz.0.17045': attribute type 4 has an invalid length. [ 1180.962572][T27430] IPv6: sit1: Disabled Multicast RS [ 1180.971318][T27430] sit1: entered allmulticast mode [ 1180.992490][T27431] 0ªX¹¦Dö»: renamed from gretap0 [ 1181.007940][T27431] 0ªX¹¦Dö»: entered allmulticast mode [ 1181.039521][T27431] syzkaller1: entered promiscuous mode [ 1181.053363][T27431] syzkaller1: entered allmulticast mode [ 1181.109330][T27443] tipc: Cannot configure node identity twice [ 1181.124680][T27443] tipc: Cannot configure node identity twice [ 1181.202901][T18331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1181.217741][T18331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1181.295088][T27453] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1181.786321][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1181.801956][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1182.146783][T27528] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.17066'. [ 1182.166881][T27530] bond0: Error: Cannot enslave bond to itself. [ 1182.193623][T27530] netlink: 10 bytes leftover after parsing attributes in process `syz.5.17067'. [ 1182.233323][T27530] netlink: 'syz.5.17067': attribute type 2 has an invalid length. [ 1182.377857][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1182.392498][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1182.675504][T27545] bridge0: port 3(team0) entered disabled state [ 1182.682427][T27545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.032096][T27545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.436694][T27545] vlan2: left allmulticast mode [ 1183.441599][T27545] batadv_slave_1: left allmulticast mode [ 1183.469096][T27545] veth3: left allmulticast mode [ 1183.584264][T27545] bond2: left promiscuous mode [ 1183.590230][T27545] bond2: left allmulticast mode [ 1183.606774][T27545] macvtap1: left allmulticast mode [ 1183.614698][T27545] macvtap2: left allmulticast mode [ 1183.631087][T27545] vlan4: left promiscuous mode [ 1183.640746][T27545] geneve1: left promiscuous mode [ 1183.645851][T27545] vlan4: left allmulticast mode [ 1183.651325][T27545] geneve1: left allmulticast mode [ 1183.883168][ T9929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.916994][ T9929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.941233][ T9929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.983210][ T9929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.072158][T27598] syzkaller0: entered promiscuous mode [ 1184.090267][T27598] syzkaller0: entered allmulticast mode [ 1184.103766][T27598] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1184.172270][T27608] bond8: (slave gretap0): Device is not bonding slave [ 1184.189138][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17086'. [ 1184.202298][T27608] bond8: option active_slave: invalid value (gretap0) [ 1184.215891][T27608] bond8 (unregistering): Released all slaves [ 1184.242389][T27620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17088'. [ 1184.263038][T27615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17088'. [ 1184.435073][T27631] x_tables: duplicate underflow at hook 1 [ 1184.585708][T27642] erspan0: entered promiscuous mode [ 1184.727702][T27642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.772644][T27642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.831116][T27642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.898177][T27642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.920638][T27642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.948072][T27642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1184.963409][T27642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.008618][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.015743][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.088103][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.095274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.116657][ C1] net_ratelimit: 14 callbacks suppressed [ 1185.116674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.168448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.194807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.220985][T27668] __nla_validate_parse: 1 callbacks suppressed [ 1185.221002][T27668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17104'. [ 1185.236762][T27661] netlink: 288 bytes leftover after parsing attributes in process `syz.0.17099'. [ 1185.277194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.280674][T27656] pim6reg: entered allmulticast mode [ 1185.319490][T27652] syzkaller1: entered promiscuous mode [ 1185.337316][T27652] syzkaller1: entered allmulticast mode [ 1185.497490][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1185.512047][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1185.563690][T27686] syzkaller1: entered promiscuous mode [ 1185.569673][T27686] syzkaller1: entered allmulticast mode [ 1185.602859][T27688] xt_TCPMSS: Only works on TCP SYN packets [ 1185.668224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.825808][T27694] tipc: Enabled bearer , priority 0 [ 1185.902950][T27694] set match dimension is over the limit! [ 1185.920524][T27694] tipc: Resetting bearer [ 1185.951928][T27692] tipc: Disabling bearer [ 1185.963073][T27690] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1185.984654][T27690] netlink: 228 bytes leftover after parsing attributes in process `syz.3.17111'. [ 1186.048470][T27707] vlan2: entered allmulticast mode [ 1186.074428][T27707] bond0: entered allmulticast mode [ 1186.087550][T27707] bond_slave_0: entered allmulticast mode [ 1186.089200][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1186.104942][T27707] bond9: entered allmulticast mode [ 1186.107812][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1186.131214][T27710] netlink: 'syz.6.17119': attribute type 8 has an invalid length. [ 1186.131389][T27713] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17117'. [ 1186.271712][T27722] netlink: 'syz.3.17120': attribute type 32 has an invalid length. [ 1186.303353][T27722] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.17120'. [ 1186.333344][T27722] netlink: Unknown conntrack attr (type=2304, max=9) [ 1186.478021][T27737] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1186.491134][T27737] bond3 (unregistering): Released all slaves [ 1186.921432][T27764] FAULT_INJECTION: forcing a failure. [ 1186.921432][T27764] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.962728][T27764] CPU: 0 UID: 0 PID: 27764 Comm: syz.0.17135 Not tainted syzkaller #0 PREEMPT(full) [ 1186.962753][T27764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.962764][T27764] Call Trace: [ 1186.962770][T27764] [ 1186.962777][T27764] dump_stack_lvl+0xe8/0x150 [ 1186.962806][T27764] should_fail_ex+0x40c/0x560 [ 1186.962827][T27764] should_failslab+0xa8/0x100 [ 1186.962851][T27764] __kmalloc_noprof+0xe8/0x750 [ 1186.962869][T27764] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1186.962891][T27764] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1186.962915][T27764] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1186.962937][T27764] genl_family_rcv_msg_doit+0xda/0x340 [ 1186.962959][T27764] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1186.962980][T27764] ? __pfx_genl_get_cmd+0x10/0x10 [ 1186.962998][T27764] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.963031][T27764] genl_rcv_msg+0x614/0x7a0 [ 1186.963052][T27764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.963069][T27764] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1186.963085][T27764] ? __netlink_lookup+0xc6/0x8b0 [ 1186.963099][T27764] ? rcu_is_watching+0x15/0xb0 [ 1186.963119][T27764] netlink_rcv_skb+0x226/0x4a0 [ 1186.963141][T27764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.963159][T27764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.963185][T27764] ? down_read+0x2be/0x330 [ 1186.963210][T27764] genl_rcv+0x28/0x40 [ 1186.963225][T27764] netlink_unicast+0x7bb/0x940 [ 1186.963249][T27764] netlink_sendmsg+0x813/0xb40 [ 1186.963267][T27764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.963288][T27764] ? __might_fault+0xaf/0x130 [ 1186.963306][T27764] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1186.963323][T27764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1186.963344][T27764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.963366][T27764] __sys_sendto+0x626/0x6c0 [ 1186.963388][T27764] ? __pfx___sys_sendto+0x10/0x10 [ 1186.963420][T27764] ? do_user_addr_fault+0xc4a/0x1340 [ 1186.963438][T27764] __x64_sys_sendto+0xde/0x100 [ 1186.963454][T27764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.963470][T27764] do_syscall_64+0x174/0x580 [ 1186.963487][T27764] ? trace_irq_disable+0x3b/0x140 [ 1186.963506][T27764] ? clear_bhb_loop+0x40/0x90 [ 1186.963521][T27764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.963534][T27764] RIP: 0033:0x7f9e64f5d68e [ 1186.963548][T27764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1186.963559][T27764] RSP: 002b:00007f9e65dbfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1186.963576][T27764] RAX: ffffffffffffffda RBX: 00007f9e65dc16c0 RCX: 00007f9e64f5d68e [ 1186.963585][T27764] RDX: 0000000000000020 RSI: 00007f9e65dc0000 RDI: 0000000000000003 [ 1186.963594][T27764] RBP: 0000000000000000 R08: 00007f9e65dbff04 R09: 000000000000000c [ 1186.963602][T27764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1186.963611][T27764] R13: 00007f9e65dbff58 R14: 00007f9e65dc0000 R15: 0000000000000000 [ 1186.963628][T27764] [ 1187.505422][T27770] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1187.519488][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1187.532251][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1187.539739][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1187.547364][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1187.554821][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1187.600350][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17139'. [ 1187.627467][T17207] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1187.634758][T17207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1187.641455][T27775] netlink: 'syz.5.17140': attribute type 39 has an invalid length. [ 1187.642103][T17207] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1187.656689][T27777] netlink: 'syz.0.17139': attribute type 4 has an invalid length. [ 1187.673709][T17207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1187.681380][T17207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1187.704217][T27770] netlink: 'syz.2.17138': attribute type 10 has an invalid length. [ 1187.723114][T27777] : entered promiscuous mode [ 1187.745894][T27770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1187.782826][T27770] team0: entered allmulticast mode [ 1187.788412][T27770] team_slave_0: entered allmulticast mode [ 1187.794206][T27770] team_slave_1: entered allmulticast mode [ 1187.801237][T27770] bridge0: port 3(team0) entered blocking state [ 1187.808178][T27770] bridge0: port 3(team0) entered disabled state [ 1187.816391][T27770] team0: entered promiscuous mode [ 1187.821464][T27770] team_slave_0: entered promiscuous mode [ 1187.828087][T27770] team_slave_1: entered promiscuous mode [ 1187.834283][T27770] bridge0: port 3(team0) entered blocking state [ 1187.840686][T27770] bridge0: port 3(team0) entered forwarding state [ 1187.922561][T18331] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.951926][T18331] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.001097][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17144'. [ 1188.024466][T27794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17144'. [ 1188.038771][T18331] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.068624][T18331] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.089545][ T1771] block nbd1: Possible stuck request ffff8880271b2300: control (read@0,1024B). Runtime 810 seconds [ 1188.100959][ T1771] block nbd1: Possible stuck request ffff8880271b24c0: control (read@1024,1024B). Runtime 810 seconds [ 1188.112339][ T1771] block nbd1: Possible stuck request ffff8880271b2680: control (read@2048,1024B). Runtime 810 seconds [ 1188.124543][ T1771] block nbd1: Possible stuck request ffff8880271b2840: control (read@3072,1024B). Runtime 810 seconds [ 1188.197050][T18331] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.259882][T18331] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.321931][T18331] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.362501][T18331] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.432490][T27824] macvlan0: entered promiscuous mode [ 1188.629551][T18331] bridge_slave_1: left allmulticast mode [ 1188.642027][T18331] bridge_slave_1: left promiscuous mode [ 1188.661203][T18331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.674381][T18331] bridge_slave_0: left allmulticast mode [ 1188.688770][T18331] bridge_slave_0: left promiscuous mode [ 1188.701062][T18331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.071228][T18331] pimreg: left allmulticast mode [ 1189.321775][T18331] bond1 (unregistering): Released all slaves [ 1189.332979][T18331] bond2 (unregistering): Released all slaves [ 1189.363899][T18331] bond0 (unregistering): Released all slaves [ 1189.411978][T27831] syzkaller0: entered promiscuous mode [ 1189.419194][T27831] syzkaller0: entered allmulticast mode [ 1189.532201][T18331] tipc: Left network mode [ 1189.551251][T27857] netlink: 'syz.5.17163': attribute type 1 has an invalid length. [ 1189.577120][T18331] IPVS: stopping backup sync thread 24914 ... [ 1189.648852][T27857] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1189.767652][ T5617] Bluetooth: hci7: command tx timeout [ 1189.799599][T27866] sctp: [Deprecated]: syz.5.17165 (pid 27866) Use of int in max_burst socket option. [ 1189.799599][T27866] Use struct sctp_assoc_value instead [ 1190.144253][T27767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.157440][T27894] SET target dimension over the limit! [ 1190.174032][T27767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.192599][T27767] bridge_slave_0: entered allmulticast mode [ 1190.207475][T27767] bridge_slave_0: entered promiscuous mode [ 1190.230066][T27767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.239507][T27767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.249376][T27767] bridge_slave_1: entered allmulticast mode [ 1190.262104][T27767] bridge_slave_1: entered promiscuous mode [ 1190.295600][T27900] __nla_validate_parse: 6 callbacks suppressed [ 1190.295617][T27900] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.17175'. [ 1190.332448][T27900] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.17175'. [ 1190.358720][T27891] syzkaller0: entered promiscuous mode [ 1190.364418][T27891] syzkaller0: entered allmulticast mode [ 1190.385277][T27767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.421174][T27767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.460553][T27906] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17176'. [ 1190.472134][T27767] team0: Port device team_slave_0 added [ 1190.480941][T27767] team0: Port device team_slave_1 added [ 1190.514557][T27910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17176'. [ 1190.586070][ T9937] net_ratelimit: 16 callbacks suppressed [ 1190.586086][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1190.606365][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1190.690325][T27914] team0: left allmulticast mode [ 1190.702608][T27914] team_slave_0: left allmulticast mode [ 1190.718824][T27914] team_slave_1: left allmulticast mode [ 1190.744592][T27914] team0: left promiscuous mode [ 1190.752502][T27914] team_slave_0: left promiscuous mode [ 1190.760671][T27914] team_slave_1: left promiscuous mode [ 1190.767188][T27914] bridge0: port 3(team0) entered disabled state [ 1190.775506][T27914] bridge_slave_0: left allmulticast mode [ 1190.785166][T27914] bridge_slave_0: left promiscuous mode [ 1190.791167][T27914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.800636][T27914] bridge_slave_1: left allmulticast mode [ 1190.815876][T27914] bridge_slave_1: left promiscuous mode [ 1190.835916][T27914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.865296][T27914] bond0: (slave bond_slave_0): Releasing backup interface [ 1190.875225][T27914] team0: Port device team_slave_0 removed [ 1190.896781][T27914] team0: Port device team_slave_1 removed [ 1190.903181][T27914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.912208][T27914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1190.934793][T27916] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17179'. [ 1190.949224][T27767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.962373][T27767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.011935][T27767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.043119][T27925] bond4: option min_links: invalid value (18446744073709551614) [ 1191.053151][T27925] bond4: option min_links: allowed values 0 - 2147483647 [ 1191.075752][T27925] bond4 (unregistering): Released all slaves [ 1191.098974][T27928] syzkaller1: entered promiscuous mode [ 1191.104731][T27928] syzkaller1: entered allmulticast mode [ 1191.135116][T27767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.155501][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1191.170338][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1191.192854][T27767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.230626][T27767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.283790][T27946] netlink: 'syz.6.17185': attribute type 10 has an invalid length. [ 1191.326662][T27946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.365840][T27946] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1191.448674][T27767] hsr_slave_0: entered promiscuous mode [ 1191.473766][T27767] hsr_slave_1: entered promiscuous mode [ 1191.493963][T27767] debugfs: 'hsr0' already exists in 'hsr' [ 1191.512952][T27767] Cannot create hsr debugfs directory [ 1191.570083][T18331] hsr_slave_0: left promiscuous mode [ 1191.596122][T18331] hsr_slave_1: left promiscuous mode [ 1191.603730][T18331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.631600][T18331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.655091][T18331] veth0_macvtap: left promiscuous mode [ 1191.667117][T18331] veth1_vlan: left promiscuous mode [ 1191.678023][T18331] veth0_vlan: left promiscuous mode [ 1191.696421][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1191.710886][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1191.847019][ T5617] Bluetooth: hci7: command tx timeout [ 1191.960481][T18331] team0 (unregistering): Port device team_slave_1 removed [ 1192.094552][T27973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17192'. [ 1192.111586][T27964] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1192.145648][T27964] bond10 (unregistering): Released all slaves [ 1192.152544][T27975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17193'. [ 1192.210135][T27975] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1192.256390][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1192.279584][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1192.404914][T27986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17196'. [ 1192.419061][T27987] x_tables: unsorted entry at hook 3 [ 1192.515468][T27991] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1192.528409][T27991] bond8 (unregistering): Released all slaves [ 1192.579987][T18331] IPVS: stop unused estimator thread 0... [ 1192.785649][T27767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1192.805005][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1192.837817][T27767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1192.846489][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1192.872392][T28000] netlink: 'syz.5.17200': attribute type 1 has an invalid length. [ 1192.882004][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.892702][T27767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1192.915194][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.925609][T27767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1192.940152][T27767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1193.060531][T27767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.093967][T27767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.105568][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.112718][ T9931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.159185][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.166349][ T9931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.346957][T28027] syzkaller0: entered promiscuous mode [ 1193.360558][T28027] syzkaller0: entered allmulticast mode [ 1193.386452][T28027] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1193.410302][T28027] netlink: 'syz.2.17207': attribute type 4 has an invalid length. [ 1193.439968][T28032] netlink: 68 bytes leftover after parsing attributes in process `syz.5.17209'. [ 1193.584683][T28043] netlink: 'syz.0.17212': attribute type 1 has an invalid length. [ 1193.612352][ T29] audit: type=1107 audit(1782347510.006:31): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1193.618179][T28046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17213'. [ 1193.652933][T28043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1193.880793][T27767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.926643][ T5617] Bluetooth: hci7: command tx timeout [ 1194.019524][T27767] veth0_vlan: entered promiscuous mode [ 1194.068638][T27767] veth1_vlan: entered promiscuous mode [ 1194.135303][T28092] dvmrp8: entered allmulticast mode [ 1194.182516][T27767] veth0_macvtap: entered promiscuous mode [ 1194.219138][T27767] veth1_macvtap: entered promiscuous mode [ 1194.283753][T27767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.306783][T27767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.338898][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.380840][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.419135][T28116] netlink: 'syz.6.17231': attribute type 12 has an invalid length. [ 1194.428416][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.448397][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.565058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.590994][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.629278][T28124] syzkaller0: entered promiscuous mode [ 1194.634814][T28124] syzkaller0: entered allmulticast mode [ 1194.656717][ T9929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.670468][ T9929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.061280][T17207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.069289][T17207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.077766][T17207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.085391][T17207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.094070][T17207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1195.488440][T28184] __nla_validate_parse: 36 callbacks suppressed [ 1195.488459][T28184] netlink: 260 bytes leftover after parsing attributes in process `syz.3.17245'. [ 1195.538264][T28184] sctp: [Deprecated]: syz.3.17245 (pid 28184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1195.538264][T28184] Use struct sctp_sack_info instead [ 1195.599880][T28188] net_ratelimit: 13 callbacks suppressed [ 1195.599897][T28188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1195.714992][T28197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17249'. [ 1195.729526][T18331] bridge_slave_1: left allmulticast mode [ 1195.745367][T18331] bridge_slave_1: left promiscuous mode [ 1195.761920][T18331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.790674][T18331] pim6reg: left allmulticast mode [ 1195.796389][T18331] pim6reg527: left allmulticast mode [ 1195.801792][T18331] pimreg: left allmulticast mode [ 1195.808218][T18331] dvmrp8: left allmulticast mode [ 1195.927333][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1195.941713][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1196.006246][ T5617] Bluetooth: hci7: command tx timeout [ 1196.032149][T18331] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 1196.054440][T18331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.063505][T18331] bond_slave_0: left allmulticast mode [ 1196.075332][T18331] bond0 (unregistering): (slave bond9): Releasing backup interface [ 1196.084126][T18331] bond9 (unregistering): left allmulticast mode [ 1196.091250][T18331] bond0 (unregistering): Released all slaves [ 1196.100815][T18331] bond1 (unregistering): Released all slaves [ 1196.112507][T18331] bond2 (unregistering): Released all slaves [ 1196.129006][T18331] bond3 (unregistering): Released all slaves [ 1196.141606][T18331] bond4 (unregistering): Released all slaves [ 1196.155546][T18331] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1196.165315][T18331] bond5 (unregistering): Released all slaves [ 1196.192168][T18331] bond6 (unregistering): Released all slaves [ 1196.204092][T18331] bond7 (unregistering): Released all slaves [ 1196.219199][T18331] bond8 (unregistering): Released all slaves [ 1196.238751][T28176] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1196.242999][T18331] bond9 (unregistering): Released all slaves [ 1196.258606][T18331] bond10 (unregistering): Released all slaves [ 1196.276690][T18331] bond11 (unregistering): Released all slaves [ 1196.288981][T18331] bond12 (unregistering): Released all slaves [ 1196.310323][T18331] bond13 (unregistering): Released all slaves [ 1196.322412][T18331] bond14 (unregistering): Released all slaves [ 1196.336739][T18331] bond15 (unregistering): Released all slaves [ 1196.355720][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17254'. [ 1196.365163][T28216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17254'. [ 1196.389928][T28212] tipc: Started in network mode [ 1196.418128][T28212] tipc: Node identity 0ee8192545fe, cluster identity 4711 [ 1196.451589][T28212] tipc: Enabled bearer , priority 0 [ 1196.469124][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1196.483705][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1196.572519][T28212] tipc: Disabling bearer [ 1196.839114][T28230] syzkaller0: entered promiscuous mode [ 1196.841742][T28244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17258'. [ 1196.851696][T28230] syzkaller0: entered allmulticast mode [ 1196.867688][T28247] netlink: 'syz.0.17262': attribute type 49 has an invalid length. [ 1197.007174][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1197.021897][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1197.059748][T28260] netlink: 'syz.2.17266': attribute type 1 has an invalid length. [ 1197.127151][ T5617] Bluetooth: hci2: command tx timeout [ 1197.148811][T28153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.185881][T28153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.223098][T28153] bridge_slave_0: entered allmulticast mode [ 1197.255022][T28153] bridge_slave_0: entered promiscuous mode [ 1197.300329][T28271] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1197.323269][T28153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.337161][T28153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.344535][T28153] bridge_slave_1: entered allmulticast mode [ 1197.353365][T28153] bridge_slave_1: entered promiscuous mode [ 1197.384213][T28278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17270'. [ 1197.403325][T28153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.435405][T28153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.512929][T28153] team0: Port device team_slave_0 added [ 1197.536057][T28153] team0: Port device team_slave_1 added [ 1197.550233][T28288] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1197.556853][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1197.556879][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1197.620293][T28153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.630033][T28153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.681491][T28153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.700357][T28153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.709333][T28153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.747539][T28153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.771888][T18331] hsr_slave_0: left promiscuous mode [ 1197.784383][T18331] hsr_slave_1: left promiscuous mode [ 1197.919256][T18331] team0 (unregistering): Port device team_slave_1 removed [ 1197.932783][T18331] team0 (unregistering): Port device team_slave_0 removed [ 1198.108812][T28153] hsr_slave_0: entered promiscuous mode [ 1198.118320][T28153] hsr_slave_1: entered promiscuous mode [ 1198.124225][T28307] netlink: 'syz.2.17277': attribute type 4 has an invalid length. [ 1198.125101][T28153] debugfs: 'hsr0' already exists in 'hsr' [ 1198.139626][T28153] Cannot create hsr debugfs directory [ 1198.164686][T28307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1198.218622][T28307] .`: renamed from bond0 (while UP) [ 1198.372703][T18331] IPVS: stop unused estimator thread 0... [ 1198.589060][ T29] audit: type=1804 audit(1782347514.986:32): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.17289" name="/newroot/391/cgroup.controllers" dev="tmpfs" ino=2002 res=1 errno=0 [ 1198.618976][ T29] audit: type=1800 audit(1782347515.006:33): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17289" name="cgroup.controllers" dev="tmpfs" ino=2002 res=0 errno=0 [ 1198.641299][T28352] netlink: 'syz.6.17290': attribute type 2 has an invalid length. [ 1198.652934][T28352] netlink: 244 bytes leftover after parsing attributes in process `syz.6.17290'. [ 1198.768976][T28360] netlink: 88 bytes leftover after parsing attributes in process `syz.6.17292'. [ 1198.800190][T28360] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17292'. [ 1198.831297][T28153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1198.851569][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.878789][T28153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1198.901863][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1198.921727][T28153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1198.940595][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.959901][T28153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1198.973548][T28379] netlink: 'syz.0.17297': attribute type 21 has an invalid length. [ 1198.993605][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.132635][T28395] netlink: 'syz.6.17299': attribute type 32 has an invalid length. [ 1199.206271][ T5617] Bluetooth: hci2: command tx timeout [ 1199.324289][T28406] netlink: 'syz.3.17302': attribute type 1 has an invalid length. [ 1200.617659][T18329] net_ratelimit: 13 callbacks suppressed [ 1200.617677][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1200.637776][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1201.166230][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1201.180778][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1201.286166][ T5617] Bluetooth: hci2: command tx timeout [ 1201.706905][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1201.721433][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1201.876046][T28370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1202.039194][T28424] __nla_validate_parse: 2 callbacks suppressed [ 1202.039211][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17304'. [ 1202.091702][T28426] ip6t_rpfilter: unknown options [ 1202.093128][T28153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.182236][T28153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.213431][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.220584][ T9929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.249496][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1202.263841][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1202.315900][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.323062][T15241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.370796][T28442] netlink: 9704 bytes leftover after parsing attributes in process `syz.6.17312'. [ 1202.400718][T28442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1202.575496][T28452] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17313'. [ 1202.809737][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1202.812175][ T1771] block nbd5: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 870 seconds [ 1202.827879][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17316'. [ 1202.835806][ T1771] block nbd5: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 870 seconds [ 1202.856763][ T1771] block nbd5: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 870 seconds [ 1202.867833][ T1771] block nbd5: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 870 seconds [ 1203.044546][T28479] netlink: 'syz.0.17318': attribute type 8 has an invalid length. [ 1203.317986][T28153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.367488][T17207] Bluetooth: hci2: command tx timeout [ 1203.566145][ T29] audit: type=1800 audit(1782347519.956:34): pid=28510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.17326" name="memory.events" dev="tmpfs" ino=1596 res=0 errno=0 [ 1203.754692][T28533] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17330'. [ 1203.893651][T28530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17329'. [ 1203.897775][T28526] syzkaller0: entered promiscuous mode [ 1203.914153][T28526] syzkaller0: entered allmulticast mode [ 1203.946830][T28153] veth0_vlan: entered promiscuous mode [ 1203.965372][T28526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17329'. [ 1204.014284][T28526] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17329'. [ 1204.027687][T28153] veth1_vlan: entered promiscuous mode [ 1204.056082][T28526] netlink: 13 bytes leftover after parsing attributes in process `syz.6.17329'. [ 1204.104076][T28526] veth5: entered promiscuous mode [ 1204.297840][T28564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17336'. [ 1204.354014][T28564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.384270][T28564] bridge_slave_1 (unregistering): left allmulticast mode [ 1204.430179][T28564] bridge_slave_1 (unregistering): left promiscuous mode [ 1204.441380][T28564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.552632][T28153] veth0_macvtap: entered promiscuous mode [ 1204.593914][T28153] veth1_macvtap: entered promiscuous mode [ 1204.639925][T28153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.685483][T28153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.793441][ T9937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.823119][ T9937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.860573][T28580] team0: left promiscuous mode [ 1204.868775][T28580] team_slave_0: left promiscuous mode [ 1204.876792][T28580] team_slave_1: left promiscuous mode [ 1204.882800][T28580] bridge0: port 3(team0) entered disabled state [ 1204.917280][T28580] bridge_slave_1: left allmulticast mode [ 1204.924153][T28580] bridge_slave_1: left promiscuous mode [ 1204.930209][T28580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.945459][T28580] bridge_slave_0: left allmulticast mode [ 1204.951781][T28580] bridge_slave_0: left promiscuous mode [ 1204.958000][T28580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.999314][ T9937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.016119][ T9937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.147628][ T9937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.163222][ T9937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.235633][T25156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.288549][T25156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.446237][T17207] Bluetooth: hci2: command 0x0405 tx timeout [ 1205.784561][T28655] netlink: 'syz.5.17366': attribute type 1 has an invalid length. [ 1205.868710][T28659] syzkaller0: entered promiscuous mode [ 1205.891835][T28659] syzkaller0: entered allmulticast mode [ 1205.946487][ T545] net_ratelimit: 12 callbacks suppressed [ 1205.946504][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1205.967244][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1206.181198][T28681] syzkaller0: entered promiscuous mode [ 1206.188846][T28681] syzkaller0: entered allmulticast mode [ 1206.222939][T28681] syzkaller0: create flow: hash 3503620418 index 1 [ 1206.223568][T24516] IPVS: starting estimator thread 0... [ 1206.267128][T28681] openvswitch: netlink: IPv4 tun info is not correct [ 1206.317020][T28693] netlink: 'syz.0.17382': attribute type 12 has an invalid length. [ 1206.345961][T28679] syzkaller0: delete flow: hash 3503620418 index 1 [ 1206.352743][T28689] IPVS: using max 49 ests per chain, 117600 per kthread [ 1206.510942][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1206.525481][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1206.893895][T28718] netlink: 'syz.0.17388': attribute type 3 has an invalid length. [ 1207.068519][T28740] syzkaller1: entered promiscuous mode [ 1207.082645][T28740] syzkaller1: entered allmulticast mode [ 1207.095349][T28740] __nla_validate_parse: 12 callbacks suppressed [ 1207.095365][T28740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17396'. [ 1207.107086][T28742] netlink: 'syz.6.17397': attribute type 8 has an invalid length. [ 1207.114108][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1207.134388][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1207.151788][T28740] netlink: 'syz.0.17396': attribute type 30 has an invalid length. [ 1207.188434][T18329] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.213633][T18329] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.271942][T18329] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.285200][T18329] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.308527][T28752] : entered promiscuous mode [ 1207.443913][T28762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17405'. [ 1207.476851][T28762] block nbd9: Unsupported socket: should be TCP or UNIX. [ 1207.505119][T28767] tipc: Enabling of bearer rejected, failed to enable media [ 1207.529875][T28769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17406'. [ 1207.546131][T28767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17403'. [ 1207.557999][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17405'. [ 1207.567658][T28769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17406'. [ 1207.590569][T28767] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1207.675328][T28776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17408'. [ 1207.684640][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1207.684669][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1207.804511][T28785] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1207.814752][T24519] IPVS: starting estimator thread 0... [ 1207.877479][T28790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.906956][T28786] IPVS: using max 44 ests per chain, 105600 per kthread [ 1207.934118][T28790] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1207.992928][T28799] vlan2: entered promiscuous mode [ 1208.000000][T28799] bridge0: entered promiscuous mode [ 1208.022140][T28801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17416'. [ 1208.040811][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17416'. [ 1208.058849][T28802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.128702][T28802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.158449][T28807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17417'. [ 1208.264805][T28821] netlink: 'syz.6.17421': attribute type 2 has an invalid length. [ 1208.407408][T28826] tc action pedit offset must be on 32 bit boundaries [ 1208.506608][T28819] SET target dimension over the limit! [ 1208.815554][T28846] lo: left allmulticast mode [ 1208.841283][T28846] tunl0: left allmulticast mode [ 1208.858876][T28846] gre0: left allmulticast mode [ 1208.880811][T28846] gretap0: left allmulticast mode [ 1208.918673][T28846] erspan0: left allmulticast mode [ 1208.939999][T28846] ip_vti0: left allmulticast mode [ 1208.957026][T28846] ip6_vti0: left allmulticast mode [ 1208.978077][T28846] sit0: left allmulticast mode [ 1209.003503][T28846] ip6tnl0: left allmulticast mode [ 1209.018875][T28846] ip6gre0: left allmulticast mode [ 1209.030590][T28846] syz_tun: left allmulticast mode [ 1209.054798][T28846] .`: left allmulticast mode [ 1209.067763][T28846] bond_slave_0: left allmulticast mode [ 1209.076679][T28846] bond_slave_1: left allmulticast mode [ 1209.087860][T28846] team0: left allmulticast mode [ 1209.099601][T28846] team_slave_0: left allmulticast mode [ 1209.116075][T28846] team_slave_1: left allmulticast mode [ 1209.225012][T28846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.257516][T28846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.310099][T28846] vlan0: left promiscuous mode [ 1209.320656][T28846] bond4: left promiscuous mode [ 1209.329112][T28846] bridge1: left promiscuous mode [ 1209.334969][T28846] bond6: left promiscuous mode [ 1209.340515][T28846] xfrm1: left promiscuous mode [ 1209.345343][T28846] xfrm1: left allmulticast mode [ 1209.353975][T28846] bridge3: left promiscuous mode [ 1209.360447][T28846] bridge3: left allmulticast mode [ 1209.747161][T28895] x_tables: duplicate underflow at hook 2 [ 1210.733768][T28935] macvlan0: entered promiscuous mode [ 1210.892402][T28945] nbd: illegal input index 2958377 [ 1210.917839][T28942] vlan6: entered allmulticast mode [ 1210.941542][T28942] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1211.173071][T28967] smc: net device team0 applied user defined pnetid SYZ2 [ 1211.257793][T18329] net_ratelimit: 15 callbacks suppressed [ 1211.257810][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1211.277905][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1211.539293][T29003] tipc: Enabling of bearer rejected, failed to enable media [ 1211.780669][T29011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.788115][T29011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.876139][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1211.890541][T18329] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1212.225441][T29043] __nla_validate_parse: 18 callbacks suppressed [ 1212.225459][T29043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17499'. [ 1212.288682][T29043] bond2: entered promiscuous mode [ 1212.294102][T29043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.424835][T29043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.454484][T29043] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1212.468144][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1212.482948][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1212.502697][T29043] bond2: (slave sit1): Error -95 calling set_mac_address [ 1212.541999][T29055] netlink: zone id is out of range [ 1212.572642][T29055] netlink: zone id is out of range [ 1212.590792][T29055] netlink: zone id is out of range [ 1212.616366][T29055] netlink: zone id is out of range [ 1212.642344][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17502'. [ 1212.672840][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17502'. [ 1212.703495][T29055] netlink: 'syz.2.17502': attribute type 1 has an invalid length. [ 1212.950410][T29093] syzkaller0: entered promiscuous mode [ 1212.966726][T29093] syzkaller0: entered allmulticast mode [ 1212.978764][ T5617] block nbd9: Receive control failed (result -32) [ 1212.999715][T29089] netlink: 88 bytes leftover after parsing attributes in process `syz.0.17509'. [ 1213.029412][T29097] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1213.074298][T29089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17509'. [ 1213.106651][T29097] bond0: (slave lo): Error: Device can not be enslaved while up [ 1213.114492][T29089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17509'. [ 1213.135145][T29099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17512'. [ 1213.168631][T29099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17512'. [ 1213.235820][T29107] sctp: [Deprecated]: syz.5.17516 (pid 29107) Use of int in max_burst socket option. [ 1213.235820][T29107] Use struct sctp_assoc_value instead [ 1213.261579][T29108] netlink: 'syz.2.17515': attribute type 5 has an invalid length. [ 1213.299752][T29110] netlink: 'syz.0.17517': attribute type 20 has an invalid length. [ 1213.326188][T29110] IPv6: NLM_F_CREATE should be specified when creating new route [ 1213.443670][T29122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17520'. [ 1213.475227][T29125] netlink: 'syz.0.17521': attribute type 2 has an invalid length. [ 1213.504801][T29125] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17521'. [ 1213.824820][T29160] netlink: 'syz.6.17533': attribute type 1 has an invalid length. [ 1213.835156][T29160] netlink: 'syz.6.17533': attribute type 1 has an invalid length. [ 1213.845396][T29160] netlink: 'syz.6.17533': attribute type 8 has an invalid length. [ 1214.322437][T29193] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1214.374835][T29198] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1214.396159][T29198] bond9 (unregistering): Released all slaves [ 1214.718632][T29230] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1214.775709][T29227] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1214.790798][T29227] bond9 (unregistering): Released all slaves [ 1214.798662][T29240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.959741][T29240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.001235][T29240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.250139][T29268] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1215.267758][T29274] netlink: 'syz.2.17573': attribute type 39 has an invalid length. [ 1215.275898][T29275] xt_l2tp: v2 doesn't support IP mode [ 1215.310659][T29268] bond1: (slave lo): Enslaving as an active interface with an up link [ 1215.428711][T29284] netlink: 'syz.6.17575': attribute type 10 has an invalid length. [ 1215.560255][T29296] macsec1: entered promiscuous mode [ 1215.754110][T29325] netlink: 'syz.0.17587': attribute type 1 has an invalid length. [ 1215.997649][T29347] xt_hashlimit: size too large, truncated to 1048576 [ 1216.139218][T29356] bond4: entered promiscuous mode [ 1216.149126][T29356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1216.229271][T29365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1216.251671][T29365] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 1216.279575][T29365] bond4: (slave sit1): Error -95 calling set_mac_address [ 1216.529501][T29380] net_ratelimit: 49 callbacks suppressed [ 1216.529518][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.560011][T29393] mac80211_hwsim hwsim160 syzkaller0: entered promiscuous mode [ 1216.560061][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.588205][T29393] mac80211_hwsim hwsim160 syzkaller0: entered allmulticast mode [ 1216.596405][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1216.611729][ T545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1216.618753][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.671301][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.734736][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.802016][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.848359][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.876929][T29380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.062658][T29425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.069844][T29425] bridge0: port 2(bridge_slave_1) entered listening state [ 1217.077175][T29425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.084297][T29425] bridge0: port 1(bridge_slave_0) entered listening state [ 1217.393944][T29447] __nla_validate_parse: 19 callbacks suppressed [ 1217.393962][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17614'. [ 1217.428817][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17617'. [ 1217.452899][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17614'. [ 1217.501619][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17617'. [ 1217.526709][T29450] nbd: device at index 64 is going down [ 1217.692225][T29469] x_tables: duplicate underflow at hook 1 [ 1217.773996][T29478] FAULT_INJECTION: forcing a failure. [ 1217.773996][T29478] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.803435][T29478] CPU: 1 UID: 0 PID: 29478 Comm: syz.0.17628 Not tainted syzkaller #0 PREEMPT(full) [ 1217.803457][T29478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1217.803467][T29478] Call Trace: [ 1217.803473][T29478] [ 1217.803479][T29478] dump_stack_lvl+0xe8/0x150 [ 1217.803500][T29478] should_fail_ex+0x40c/0x560 [ 1217.803519][T29478] should_failslab+0xa8/0x100 [ 1217.803542][T29478] __kmalloc_cache_noprof+0x88/0x660 [ 1217.803561][T29478] ? call_usermodehelper_setup+0x8e/0x270 [ 1217.803583][T29478] call_usermodehelper_setup+0x8e/0x270 [ 1217.803601][T29478] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1217.803619][T29478] __request_module+0x3ba/0x630 [ 1217.803637][T29478] ? __pfx___request_module+0x10/0x10 [ 1217.803651][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803667][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803681][T29478] ? rtnl_link_ops_get+0x23/0x250 [ 1217.803779][T29478] ? rtnl_link_ops_get+0x23/0x250 [ 1217.803799][T29478] ? rtnl_link_ops_get+0x23/0x250 [ 1217.803820][T29478] ? rtnl_link_ops_get+0x215/0x250 [ 1217.803840][T29478] rtnl_newlink+0x61b/0x1bd0 [ 1217.803860][T29478] ? unwind_next_frame+0x8f/0x2550 [ 1217.803876][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803893][T29478] ? __pfx_rtnl_newlink+0x10/0x10 [ 1217.803910][T29478] ? unwind_next_frame+0x8f/0x2550 [ 1217.803927][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803944][T29478] ? is_bpf_text_address+0x26/0x2b0 [ 1217.803965][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803980][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.803995][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804015][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804038][T29478] ? is_bpf_text_address+0x292/0x2b0 [ 1217.804059][T29478] ? is_bpf_text_address+0x26/0x2b0 [ 1217.804080][T29478] ? unwind_next_frame+0x8f/0x2550 [ 1217.804095][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804113][T29478] ? is_bpf_text_address+0x26/0x2b0 [ 1217.804132][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804157][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804173][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804190][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804211][T29478] ? is_bpf_text_address+0x292/0x2b0 [ 1217.804230][T29478] ? is_bpf_text_address+0x26/0x2b0 [ 1217.804251][T29478] ? kernel_text_address+0xa5/0xe0 [ 1217.804266][T29478] ? __kernel_text_address+0xd/0x30 [ 1217.804280][T29478] ? unwind_get_return_address+0x4d/0x90 [ 1217.804296][T29478] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1217.804315][T29478] ? arch_stack_walk+0xfb/0x150 [ 1217.804357][T29478] ? __pfx_rtnl_newlink+0x10/0x10 [ 1217.804375][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804393][T29478] ? bpf_lsm_capable+0x9/0x20 [ 1217.804405][T29478] ? security_capable+0x7e/0x2c0 [ 1217.804431][T29478] ? __pfx_rtnl_newlink+0x10/0x10 [ 1217.804449][T29478] rtnetlink_rcv_msg+0x802/0xc00 [ 1217.804468][T29478] ? kasan_save_track+0x3e/0x80 [ 1217.804488][T29478] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1217.804509][T29478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1217.804528][T29478] ? __netlink_lookup+0xc6/0x8b0 [ 1217.804542][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804560][T29478] netlink_rcv_skb+0x226/0x4a0 [ 1217.804582][T29478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1217.804602][T29478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1217.804627][T29478] ? net_generic+0x1e/0x240 [ 1217.804642][T29478] ? net_generic+0x1e/0x240 [ 1217.804660][T29478] ? netlink_deliver_tap+0x2e/0x1b0 [ 1217.804682][T29478] netlink_unicast+0x7bb/0x940 [ 1217.804707][T29478] netlink_sendmsg+0x813/0xb40 [ 1217.804725][T29478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.804747][T29478] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1217.804762][T29478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1217.804779][T29478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.804801][T29478] ____sys_sendmsg+0x9b9/0xa20 [ 1217.804827][T29478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1217.804849][T29478] ? lock_release+0x4b/0x3c0 [ 1217.804871][T29478] ? import_iovec+0x73/0xa0 [ 1217.804893][T29478] ___sys_sendmsg+0x2a5/0x360 [ 1217.804913][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804927][T29478] ? get_pid_task+0x20/0x1f0 [ 1217.804942][T29478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.804965][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.804993][T29478] ? __fget_files+0x2a/0x420 [ 1217.805010][T29478] ? __fget_files+0x3a2/0x420 [ 1217.805032][T29478] __x64_sys_sendmsg+0x1b1/0x290 [ 1217.805054][T29478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1217.805088][T29478] ? rcu_is_watching+0x15/0xb0 [ 1217.805105][T29478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.805122][T29478] do_syscall_64+0x174/0x580 [ 1217.805150][T29478] ? trace_irq_disable+0x3b/0x140 [ 1217.805170][T29478] ? clear_bhb_loop+0x40/0x90 [ 1217.805188][T29478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.805204][T29478] RIP: 0033:0x7f9e64f9ce59 [ 1217.805219][T29478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.805233][T29478] RSP: 002b:00007f9e65dc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.805251][T29478] RAX: ffffffffffffffda RBX: 00007f9e65215fa0 RCX: 00007f9e64f9ce59 [ 1217.805263][T29478] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1217.805274][T29478] RBP: 00007f9e65dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.805283][T29478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.805293][T29478] R13: 00007f9e65216038 R14: 00007f9e65215fa0 R15: 00007ffcc8827d38 [ 1217.805311][T29478] [ 1218.534544][ T1771] block nbd1: Possible stuck request ffff8880271b2300: control (read@0,1024B). Runtime 840 seconds [ 1218.546506][ T1771] block nbd1: Possible stuck request ffff8880271b24c0: control (read@1024,1024B). Runtime 840 seconds [ 1218.559176][ T1771] block nbd1: Possible stuck request ffff8880271b2680: control (read@2048,1024B). Runtime 840 seconds [ 1218.570708][ T1771] block nbd1: Possible stuck request ffff8880271b2840: control (read@3072,1024B). Runtime 840 seconds [ 1218.687068][T29495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17634'. [ 1218.715228][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17636'. [ 1218.882868][T29514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17639'. [ 1218.984239][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17639'. [ 1219.030065][T29524] netlink: 'syz.5.17642': attribute type 4 has an invalid length. [ 1219.069347][T29524] netlink: 224 bytes leftover after parsing attributes in process `syz.5.17642'. [ 1219.093184][T29528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17644'. [ 1219.112039][T29526] tipc: Enabled bearer , priority 0 [ 1219.139729][T29525] tipc: Disabling bearer [ 1219.318042][T29539] FAULT_INJECTION: forcing a failure. [ 1219.318042][T29539] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.351894][T29539] CPU: 1 UID: 0 PID: 29539 Comm: syz.3.17647 Not tainted syzkaller #0 PREEMPT(full) [ 1219.351918][T29539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.351928][T29539] Call Trace: [ 1219.351935][T29539] [ 1219.351942][T29539] dump_stack_lvl+0xe8/0x150 [ 1219.351965][T29539] should_fail_ex+0x40c/0x560 [ 1219.351984][T29539] should_failslab+0xa8/0x100 [ 1219.352007][T29539] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1219.352027][T29539] ? rcu_is_watching+0x15/0xb0 [ 1219.352044][T29539] ? __alloc_skb+0x1d7/0x7a0 [ 1219.352064][T29539] ? trace_irq_enable+0x3b/0x140 [ 1219.352086][T29539] __alloc_skb+0x1d7/0x7a0 [ 1219.352106][T29539] netlink_ack+0x136/0xb30 [ 1219.352126][T29539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1219.352145][T29539] ? ref_tracker_free+0x689/0x830 [ 1219.352164][T29539] ? __pfx_ref_tracker_free+0x10/0x10 [ 1219.352185][T29539] netlink_rcv_skb+0x2a4/0x4a0 [ 1219.352207][T29539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1219.352227][T29539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1219.352255][T29539] ? netlink_deliver_tap+0x2e/0x1b0 [ 1219.352278][T29539] netlink_unicast+0x7bb/0x940 [ 1219.352303][T29539] netlink_sendmsg+0x813/0xb40 [ 1219.352321][T29539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.352343][T29539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1219.352359][T29539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1219.352377][T29539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.352400][T29539] ____sys_sendmsg+0x9b9/0xa20 [ 1219.352426][T29539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.352449][T29539] ? lock_release+0x4b/0x3c0 [ 1219.352480][T29539] ? import_iovec+0x73/0xa0 [ 1219.352501][T29539] ___sys_sendmsg+0x2a5/0x360 [ 1219.352521][T29539] ? rcu_is_watching+0x15/0xb0 [ 1219.352535][T29539] ? get_pid_task+0x20/0x1f0 [ 1219.352552][T29539] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.352575][T29539] ? rcu_is_watching+0x15/0xb0 [ 1219.352603][T29539] ? __fget_files+0x2a/0x420 [ 1219.352621][T29539] ? __fget_files+0x3a2/0x420 [ 1219.352642][T29539] __x64_sys_sendmsg+0x1b1/0x290 [ 1219.352665][T29539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1219.352693][T29539] ? rcu_is_watching+0x15/0xb0 [ 1219.352710][T29539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.352726][T29539] do_syscall_64+0x174/0x580 [ 1219.352746][T29539] ? trace_irq_disable+0x3b/0x140 [ 1219.352765][T29539] ? clear_bhb_loop+0x40/0x90 [ 1219.352783][T29539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.352798][T29539] RIP: 0033:0x7f407179ce59 [ 1219.352813][T29539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.352827][T29539] RSP: 002b:00007f4072623028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.352845][T29539] RAX: ffffffffffffffda RBX: 00007f4071a16090 RCX: 00007f407179ce59 [ 1219.352857][T29539] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1219.352867][T29539] RBP: 00007f4072623090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.352878][T29539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.352888][T29539] R13: 00007f4071a16128 R14: 00007f4071a16090 R15: 00007fffc34b07b8 [ 1219.352908][T29539] [ 1219.758869][T29510] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1220.098348][T29581] netlink: 'syz.6.17657': attribute type 10 has an invalid length. [ 1220.168391][T29590] netlink: 'syz.0.17661': attribute type 1 has an invalid length. [ 1220.253515][T29590] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1220.262494][T29596] FAULT_INJECTION: forcing a failure. [ 1220.262494][T29596] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.278438][T29601] veth0_to_bridge: entered promiscuous mode [ 1220.290491][T29596] CPU: 0 UID: 0 PID: 29596 Comm: syz.5.17663 Not tainted syzkaller #0 PREEMPT(full) [ 1220.290513][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1220.290522][T29596] Call Trace: [ 1220.290528][T29596] [ 1220.290535][T29596] dump_stack_lvl+0xe8/0x150 [ 1220.290560][T29596] should_fail_ex+0x40c/0x560 [ 1220.290580][T29596] should_failslab+0xa8/0x100 [ 1220.290601][T29596] ? skb_clone+0x212/0x3a0 [ 1220.290615][T29596] kmem_cache_alloc_noprof+0x87/0x650 [ 1220.290639][T29596] skb_clone+0x212/0x3a0 [ 1220.290655][T29596] __netlink_deliver_tap+0x413/0x860 [ 1220.290682][T29596] ? netlink_deliver_tap+0x2e/0x1b0 [ 1220.290703][T29596] netlink_deliver_tap+0x19c/0x1b0 [ 1220.290725][T29596] netlink_sendskb+0x68/0x140 [ 1220.290745][T29596] netlink_rcv_skb+0x2a4/0x4a0 [ 1220.290766][T29596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1220.290787][T29596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1220.290813][T29596] ? netlink_deliver_tap+0x2e/0x1b0 [ 1220.290835][T29596] netlink_unicast+0x7bb/0x940 [ 1220.290858][T29596] netlink_sendmsg+0x813/0xb40 [ 1220.290875][T29596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.290895][T29596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1220.290915][T29596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.290933][T29596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.290953][T29596] ____sys_sendmsg+0x9b9/0xa20 [ 1220.290977][T29596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.290999][T29596] ? lock_release+0x4b/0x3c0 [ 1220.291022][T29596] ? import_iovec+0x73/0xa0 [ 1220.291044][T29596] ___sys_sendmsg+0x2a5/0x360 [ 1220.291064][T29596] ? rcu_is_watching+0x15/0xb0 [ 1220.291081][T29596] ? get_pid_task+0x20/0x1f0 [ 1220.291098][T29596] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.291121][T29596] ? rcu_is_watching+0x15/0xb0 [ 1220.291149][T29596] ? __fget_files+0x2a/0x420 [ 1220.291166][T29596] ? __fget_files+0x3a2/0x420 [ 1220.291187][T29596] __x64_sys_sendmsg+0x1b1/0x290 [ 1220.291210][T29596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.291238][T29596] ? rcu_is_watching+0x15/0xb0 [ 1220.291255][T29596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.291273][T29596] do_syscall_64+0x174/0x580 [ 1220.291294][T29596] ? trace_irq_disable+0x3b/0x140 [ 1220.291315][T29596] ? clear_bhb_loop+0x40/0x90 [ 1220.291340][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.291356][T29596] RIP: 0033:0x7f737bb9ce59 [ 1220.291371][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.291385][T29596] RSP: 002b:00007f737caf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.291404][T29596] RAX: ffffffffffffffda RBX: 00007f737be15fa0 RCX: 00007f737bb9ce59 [ 1220.291416][T29596] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1220.291427][T29596] RBP: 00007f737caf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.291437][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.291448][T29596] R13: 00007f737be16038 R14: 00007f737be15fa0 R15: 00007ffc074903e8 [ 1220.291468][T29596] [ 1220.617011][T29605] syzkaller0: entered promiscuous mode [ 1220.622623][T29605] syzkaller0: entered allmulticast mode [ 1220.651743][T29590] bond9: (slave geneve3): making interface the new active one [ 1220.673410][T29590] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 1220.703422][T25156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.720532][T29600] veth0_to_bridge: left promiscuous mode [ 1220.771018][T25156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.833821][T25156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.900689][T29617] netlink: 'syz.2.17668': attribute type 1 has an invalid length. [ 1220.912785][T25156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.109492][T29630] syzkaller0: entered promiscuous mode [ 1221.125533][T29630] syzkaller0: entered allmulticast mode [ 1221.212311][ T5617] Bluetooth: hci2: command 0x0405 tx timeout [ 1221.382360][T29661] netlink: 'syz.2.17680': attribute type 1 has an invalid length. [ 1221.398716][T29661] netlink: 'syz.2.17680': attribute type 2 has an invalid length. [ 1221.457065][T29667] netlink: 'syz.6.17682': attribute type 2 has an invalid length. [ 1221.490184][T29669] netlink: 'syz.2.17680': attribute type 3 has an invalid length. [ 1221.513812][T29664] netlink: 'syz.2.17680': attribute type 3 has an invalid length. [ 1221.538201][T29667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.555062][T29669] netlink: 'syz.2.17680': attribute type 1 has an invalid length. [ 1221.570940][T29667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.607045][T29667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.689801][T29681] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1221.726894][ T9937] net_ratelimit: 77 callbacks suppressed [ 1221.726911][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1221.746975][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1221.833483][T29687] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1221.854805][T29687] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1221.902059][T29689] syzkaller0: entered promiscuous mode [ 1221.908917][T29689] syzkaller0: entered allmulticast mode [ 1222.111391][ T9937] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 1222.277832][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1222.292781][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.370941][T29714] syzkaller0: entered promiscuous mode [ 1222.376705][T29714] syzkaller0: entered allmulticast mode [ 1222.828623][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1222.843237][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1223.406332][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1223.421549][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1224.012885][T29725] __nla_validate_parse: 12 callbacks suppressed [ 1224.012903][T29725] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.17700'. [ 1224.290663][T29730] validate_nla: 5 callbacks suppressed [ 1224.290680][T29730] netlink: 'syz.2.17701': attribute type 10 has an invalid length. [ 1224.313953][T29730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.331032][T29730] .`: (slave team0): Enslaving as an active interface with an up link [ 1224.343648][T29730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17701'. [ 1225.052498][T29700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.249121][T29747] Cannot find set identified by id 65534 to match [ 1225.298508][T29755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17708'. [ 1225.327969][T29757] x_tables: duplicate underflow at hook 3 [ 1225.332941][T29761] bond_slave_1: entered promiscuous mode [ 1225.363319][T29761] bond_slave_1: entered allmulticast mode [ 1225.385589][T29761] .`: (slave bond_slave_1): Releasing backup interface [ 1225.481606][T29771] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.17713'. [ 1225.713958][T29799] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1225.769977][T29804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17722'. [ 1225.792214][T29806] xt_TCPMSS: Only works on TCP SYN packets [ 1225.873711][T29813] tc_dump_action: action bad kind [ 1225.901274][T29813] veth5: entered allmulticast mode [ 1225.933198][T29815] macvtap0: entered promiscuous mode [ 1225.950177][T29815] vlan0: entered promiscuous mode [ 1225.954148][T29823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17727'. [ 1225.981455][T29815] vlan0: left promiscuous mode [ 1226.002739][T29813] tc_dump_action: action bad kind [ 1226.010456][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17729'. [ 1226.279633][T29852] netlink: 'syz.2.17736': attribute type 11 has an invalid length. [ 1226.379106][T29860] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1226.421178][T29860] bond4 (unregistering): Released all slaves [ 1226.485900][T29867] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.17741'. [ 1226.616990][T29882] netlink: 'syz.6.17746': attribute type 58 has an invalid length. [ 1226.643750][T29882] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17746'. [ 1226.745390][T29887] bond10: entered promiscuous mode [ 1226.770951][T29892] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17749'. [ 1226.932973][T29903] net_ratelimit: 14 callbacks suppressed [ 1226.932991][T29903] openvswitch: netlink: IP tunnel dst address not specified [ 1226.969962][T29908] netlink: 'syz.0.17755': attribute type 49 has an invalid length. [ 1226.978826][T29903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.992133][T29899] netlink: 'syz.2.17753': attribute type 1 has an invalid length. [ 1227.006258][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1227.020798][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1227.031675][T29899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.175673][T29916] xt_ecn: cannot match TCP bits for non-tcp packets [ 1227.362729][T29940] netlink: 'syz.2.17761': attribute type 1 has an invalid length. [ 1227.433902][T29943] No such timeout policy "syz0" [ 1227.544786][T29947] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1227.586690][T29947] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1227.595197][T29947] gretap3: entered promiscuous mode [ 1227.619159][T29947] gretap3: entered allmulticast mode [ 1227.638073][T29961] veth0: entered promiscuous mode [ 1227.646901][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1227.661684][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1227.715388][T29972] IPVS: length: 8 != 1152 [ 1227.722642][T29950] veth0: left promiscuous mode [ 1227.912744][T29987] veth0_macvtap: left promiscuous mode [ 1228.207764][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1228.222429][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.400474][T30021] syzkaller0: entered promiscuous mode [ 1228.409077][T30021] syzkaller0: entered allmulticast mode [ 1228.418609][T30021] 0: reclassify loop, rule prio 0, protocol 700 [ 1228.507395][T30027] netlink: 'syz.5.17792': attribute type 29 has an invalid length. [ 1228.581520][T30031] macvtap1: entered promiscuous mode [ 1228.587739][T30031] vlan0: entered promiscuous mode [ 1228.604523][T30031] vlan0: left promiscuous mode [ 1228.634147][T30037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.655285][T30039] bridge_slave_1: left promiscuous mode [ 1228.674561][T30039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.695869][T30039] bridge_slave_0: left allmulticast mode [ 1228.701871][T30031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.725862][T30039] bridge_slave_0: left promiscuous mode [ 1228.735971][T30039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.753153][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1228.898408][T30030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1229.278630][T30071] netlink: 'syz.2.17803': attribute type 1 has an invalid length. [ 1229.350115][T30089] __nla_validate_parse: 8 callbacks suppressed [ 1229.350132][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17809'. [ 1229.372466][T30089] team0: entered promiscuous mode [ 1229.379519][T30089] team_slave_0: entered promiscuous mode [ 1229.385385][T30089] team_slave_1: entered promiscuous mode [ 1229.393455][T30089] team0: left promiscuous mode [ 1229.399027][T30089] team_slave_0: left promiscuous mode [ 1229.404782][T30089] team_slave_1: left promiscuous mode [ 1232.154375][T30064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.303703][T30105] netlink: 'syz.3.17815': attribute type 1 has an invalid length. [ 1232.347271][ T9929] net_ratelimit: 13 callbacks suppressed [ 1232.347288][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1232.367555][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1232.716461][T30139] x_tables: duplicate underflow at hook 3 [ 1232.890189][ T1771] block nbd5: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 900 seconds [ 1232.902600][ T1771] block nbd5: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 900 seconds [ 1232.915185][ T1771] block nbd5: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 900 seconds [ 1232.919815][T30161] netlink: 44 bytes leftover after parsing attributes in process `syz.6.17830'. [ 1232.926664][ T1771] block nbd5: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 900 seconds [ 1232.955054][T30161] netlink: 'syz.6.17830': attribute type 21 has an invalid length. [ 1232.964539][T30161] netlink: 128 bytes leftover after parsing attributes in process `syz.6.17830'. [ 1232.973810][T30161] netlink: 3 bytes leftover after parsing attributes in process `syz.6.17830'. [ 1232.977957][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1232.997116][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1233.017654][T30161] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17830'. [ 1233.049107][T30165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17832'. [ 1233.204340][T30182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.17838'. [ 1233.308529][T30198] netlink: 180 bytes leftover after parsing attributes in process `syz.3.17840'. [ 1233.340528][T30200] netlink: 'syz.2.17842': attribute type 63 has an invalid length. [ 1233.502462][T30212] bridge0: port 3(gretap0) entered blocking state [ 1233.516984][T30212] bridge0: port 3(gretap0) entered disabled state [ 1233.529982][T30212] gretap0: entered allmulticast mode [ 1233.536420][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1233.547068][T30212] gretap0: entered promiscuous mode [ 1233.551484][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1233.600251][T30212] bridge0: port 3(gretap0) entered blocking state [ 1233.606824][T30212] bridge0: port 3(gretap0) entered listening state [ 1233.675132][T30223] netlink: 'syz.2.17848': attribute type 1 has an invalid length. [ 1233.709217][T30223] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17848'. [ 1233.761376][T30228] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17851'. [ 1233.779171][T30228] netlink: 'syz.5.17851': attribute type 5 has an invalid length. [ 1233.810892][T30228] netlink: 'syz.5.17851': attribute type 6 has an invalid length. [ 1233.848273][T30228] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1234.137507][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1234.152625][T15241] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1234.213887][ T9937] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.223217][ T9937] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.256894][ T9937] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.284907][ T9937] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.532117][T30292] syzkaller0: entered promiscuous mode [ 1234.539119][T30292] syzkaller0: entered allmulticast mode [ 1234.642270][T30299] __nla_validate_parse: 54 callbacks suppressed [ 1234.642288][T30299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17869'. [ 1234.669903][T30299] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17869'. [ 1234.706704][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1234.721819][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1234.935388][T30318] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1234.964099][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17874'. [ 1235.013817][T30318] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1235.037649][T30318] bond4 (unregistering): Released all slaves [ 1235.080032][T30334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17878'. [ 1235.095072][T30331] pimreg3: entered allmulticast mode [ 1235.138127][T30333] bridge0: port 2(vlan2) entered blocking state [ 1235.167144][T30333] bridge0: port 2(vlan2) entered disabled state [ 1235.179223][T30333] vlan2: entered allmulticast mode [ 1235.192894][T30343] netlink: 'syz.5.17881': attribute type 28 has an invalid length. [ 1235.202869][T30333] vlan2: entered promiscuous mode [ 1235.212509][T30343] netlink: 'syz.5.17881': attribute type 3 has an invalid length. [ 1235.238801][T30343] netlink: 132 bytes leftover after parsing attributes in process `syz.5.17881'. [ 1235.397661][T30352] netlink: 156 bytes leftover after parsing attributes in process `syz.6.17883'. [ 1235.433321][T17207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1235.445551][T17207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1235.455779][T17207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1235.464053][T17207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1235.473264][T17207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1235.842882][T30382] ipt_rpfilter: unknown options [ 1235.900554][T30391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17896'. [ 1236.020565][T30408] netlink: 68 bytes leftover after parsing attributes in process `syz.6.17900'. [ 1236.029884][T30404] veth1: entered promiscuous mode [ 1236.037487][T30404] veth1: entered allmulticast mode [ 1236.051823][T30403] netlink: 'syz.3.17899': attribute type 1 has an invalid length. [ 1236.140935][T30406] veth3: entered promiscuous mode [ 1236.173559][T30403] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1236.330958][T30431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17904'. [ 1236.402592][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17907'. [ 1236.654338][T30453] ip6erspan1: entered allmulticast mode [ 1236.771139][T30457] netlink: 'syz.5.17912': attribute type 15 has an invalid length. [ 1236.787494][T30353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.794596][T30353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.802713][T30353] bridge_slave_0: entered allmulticast mode [ 1236.811234][T30353] bridge_slave_0: entered promiscuous mode [ 1236.840404][T30353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.853773][T30353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.869976][T30353] bridge_slave_1: entered allmulticast mode [ 1236.885353][T30353] bridge_slave_1: entered promiscuous mode [ 1236.899479][T25156] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1236.954778][T25156] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1236.974685][T30353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.995738][T25156] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1237.013226][T30353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.032789][T25156] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1237.088238][T30353] team0: Port device team_slave_0 added [ 1237.121599][T30353] team0: Port device team_slave_1 added [ 1237.193517][T30353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.222682][T30353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.294243][T30353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.314531][T30353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.322289][T30353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.356152][T30353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.356220][T25156] net_ratelimit: 9 callbacks suppressed [ 1237.356233][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1237.390734][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1237.419871][T30498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1237.449405][T30501] macvlan3: entered promiscuous mode [ 1237.463511][T30501] macvlan3: entered allmulticast mode [ 1237.475367][T30501] bond2: (slave macvlan3): Opening slave failed [ 1237.502697][T30353] hsr_slave_0: entered promiscuous mode [ 1237.510719][T30353] hsr_slave_1: entered promiscuous mode [ 1237.529516][T17207] Bluetooth: hci4: command tx timeout [ 1237.545825][T30353] debugfs: 'hsr0' already exists in 'hsr' [ 1237.555207][T30353] Cannot create hsr debugfs directory [ 1237.811417][T30353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.835718][T30353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.921784][T30353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.948758][T30353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.952805][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1237.973622][ T9929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1238.064917][T30353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1238.084631][T30353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.157507][T30353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1238.170627][T30353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.282038][T30353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1238.305523][T30353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1238.325757][T30353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1238.349693][T30353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.363352][T30353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1238.389516][T30353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1238.411569][T30353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1238.432131][T30353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.508653][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1238.523112][ T9937] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1238.633497][T30353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.668056][T30353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.679918][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.687081][ T9929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.707583][ T545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.714714][ T545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.086639][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1239.101788][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1239.301502][T30634] validate_nla: 2 callbacks suppressed [ 1239.301521][T30634] netlink: 'syz.5.17963': attribute type 2 has an invalid length. [ 1239.345498][T30634] netlink: 'syz.5.17963': attribute type 1 has an invalid length. [ 1239.354733][T30634] netlink: 'syz.5.17963': attribute type 1 has an invalid length. [ 1239.381500][T30634] netlink: 'syz.5.17963': attribute type 8 has an invalid length. [ 1239.404054][T30353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.517824][T30353] veth0_vlan: entered promiscuous mode [ 1239.558896][T30353] veth1_vlan: entered promiscuous mode [ 1239.607012][T17207] Bluetooth: hci4: command tx timeout [ 1239.623114][T30353] veth0_macvtap: entered promiscuous mode [ 1239.643814][T30353] veth1_macvtap: entered promiscuous mode [ 1239.683515][T30353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.707512][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1239.722094][ T1159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1239.722698][T30353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.798870][T30664] netlink: 'syz.5.17975': attribute type 1 has an invalid length. [ 1239.799093][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.819400][T30664] __nla_validate_parse: 16 callbacks suppressed [ 1239.819415][T30664] netlink: 16071 bytes leftover after parsing attributes in process `syz.5.17975'. [ 1239.822725][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.915257][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.925551][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.965905][T30672] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1240.084428][T30678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17980'. [ 1240.116355][T30679] netlink: 'syz.2.17980': attribute type 20 has an invalid length. [ 1240.118631][ T9937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.148984][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17980'. [ 1240.157799][ T9937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.181013][T30679] netlink: 'syz.2.17980': attribute type 20 has an invalid length. [ 1240.206555][ T9937] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.215719][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17980'. [ 1240.228226][ T9937] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.238560][ T545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.253541][ T545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.253581][ T9937] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.287617][ T9937] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.348138][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17983'. [ 1240.383196][T30687] macsec1: entered promiscuous mode [ 1240.398640][T30687] bridge0: entered promiscuous mode [ 1240.421781][T30687] macsec1: entered allmulticast mode [ 1240.429887][T30687] bridge0: entered allmulticast mode [ 1240.437224][T30687] bridge0: port 3(macsec1) entered blocking state [ 1240.443984][T30687] bridge0: port 3(macsec1) entered disabled state [ 1240.453733][T30687] bridge0: left allmulticast mode [ 1240.469485][T27578] bridge0: left promiscuous mode [ 1240.556147][T30698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.563618][T30698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.750530][T30714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17990'. [ 1240.769871][T30715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17990'. [ 1241.014509][T30740] netlink: 'syz.0.17997': attribute type 1 has an invalid length. [ 1241.101174][T30744] syzkaller0: entered promiscuous mode [ 1241.113503][T30744] syzkaller0: entered allmulticast mode [ 1241.132707][T30744] tipc: Started in network mode [ 1241.142562][T30744] tipc: Node identity 9a564832a362, cluster identity 4711 [ 1241.154012][T30744] tipc: Enabled bearer , priority 0 [ 1241.175583][T30744] tipc: Resetting bearer [ 1241.193179][T30743] tipc: Resetting bearer [ 1241.216778][T30743] tipc: Disabling bearer [ 1241.318291][T30755] syzkaller0: entered promiscuous mode [ 1241.331687][T30755] syzkaller0: entered allmulticast mode [ 1241.455669][T30769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.480319][T30769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.686331][T17207] Bluetooth: hci4: command tx timeout [ 1241.936403][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18019'. [ 1242.064992][T30804] netlink: 220 bytes leftover after parsing attributes in process `syz.5.18021'. [ 1242.235657][T30813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18026'. [ 1242.293365][T30813] syzkaller0: entered promiscuous mode [ 1242.305110][T30813] syzkaller0: entered allmulticast mode [ 1242.321197][T30818] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1242.408950][T30820] netlink: 'syz.5.18029': attribute type 1 has an invalid length. [ 1242.695361][T30843] veth0: entered promiscuous mode [ 1242.825255][T30855] netlink: 'syz.3.18041': attribute type 16 has an invalid length. [ 1242.834851][T25156] net_ratelimit: 16 callbacks suppressed [ 1242.834867][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1242.855528][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1242.869507][T30859] syzkaller0: entered promiscuous mode [ 1242.877921][T30859] syzkaller0: entered allmulticast mode [ 1242.948074][T30859] tipc: Enabled bearer , priority 0 [ 1242.977334][T30842] veth0: left promiscuous mode [ 1243.061644][T30858] tipc: Resetting bearer [ 1243.099426][T30858] tipc: Disabling bearer [ 1243.396700][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1243.412168][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1243.520064][T30908] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1243.685695][T30931] bridge1: entered promiscuous mode [ 1243.693261][T30931] bridge1: entered allmulticast mode [ 1243.714453][T30931] team0: Port device bridge1 added [ 1243.728654][T30931] bridge0: port 4(team0) entered blocking state [ 1243.744136][T30931] bridge0: port 4(team0) entered disabled state [ 1243.761490][T30931] team0: entered allmulticast mode [ 1243.780320][ T5617] Bluetooth: hci4: command tx timeout [ 1243.810572][T30931] team_slave_0: entered allmulticast mode [ 1243.824656][T30931] team_slave_1: entered allmulticast mode [ 1243.842279][T30931] team0: entered promiscuous mode [ 1243.861033][T30931] team_slave_0: entered promiscuous mode [ 1243.875261][T30931] team_slave_1: entered promiscuous mode [ 1243.882190][T30931] bridge0: port 4(team0) entered blocking state [ 1243.888557][T30931] bridge0: port 4(team0) entered listening state [ 1243.912418][T30946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.932224][T30946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.967951][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1243.982557][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1244.075044][T30957] syzkaller0: entered promiscuous mode [ 1244.087282][T30957] syzkaller0: entered allmulticast mode [ 1244.112788][T30960] syzkaller0: entered promiscuous mode [ 1244.120315][T30960] syzkaller0: entered allmulticast mode [ 1244.127574][T30961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.407605][ T30] INFO: task syz.1.15439:21958 blocked for more than 143 seconds. [ 1244.422562][ T30] Not tainted syzkaller #0 [ 1244.427838][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1244.436953][ T30] task:syz.1.15439 state:D stack:27568 pid:21958 tgid:21955 ppid:11903 task_flags:0x400040 flags:0x00080002 [ 1244.450372][ T30] Call Trace: [ 1244.453758][ T30] [ 1244.459196][ T30] __schedule+0x17d9/0x56c0 [ 1244.463975][ T30] ? stack_trace_save+0xa9/0x100 [ 1244.469553][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1244.480982][T30972] validate_nla: 1 callbacks suppressed [ 1244.480998][T30972] netlink: 'syz.2.18073': attribute type 7 has an invalid length. [ 1244.497071][T30972] netlink: 'syz.2.18073': attribute type 8 has an invalid length. [ 1244.502620][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 1244.515982][ T30] ? genl_rcv+0x28/0x40 [ 1244.523543][ T30] ? __pfx___schedule+0x10/0x10 [ 1244.531686][ T30] ? rcu_is_watching+0x15/0xb0 [ 1244.537208][ T30] ? rcu_is_watching+0x15/0xb0 [ 1244.542066][ T30] ? lock_release+0x4b/0x3c0 [ 1244.546815][ T30] ? rcu_is_watching+0x15/0xb0 [ 1244.551625][ T30] schedule+0x164/0x360 [ 1244.555860][ T30] schedule_preempt_disabled+0x13/0x30 [ 1244.561647][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1244.577771][T25156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1244.592501][ T30] __mutex_lock+0x7bf/0x1550 [ 1244.597466][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1244.602272][ T30] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1244.608872][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1244.613943][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1244.618587][ T30] ? genlmsg_put+0x137/0x2e0 [ 1244.623254][ T30] nfsd_nl_version_get_doit+0x17c/0xd20 [ 1244.629275][ T30] ? __nla_parse+0x40/0x60 [ 1244.633781][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1244.640669][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1244.647408][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1244.653791][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1244.659848][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1244.666853][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 1244.672151][ T30] genl_rcv_msg+0x614/0x7a0 [ 1244.676907][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.681966][ T30] ? ref_tracker_free+0x689/0x830 [ 1244.687116][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1244.693243][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1244.706620][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1244.711457][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.716616][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1244.721959][ T30] ? down_read+0x2be/0x330 [ 1244.728413][ T30] genl_rcv+0x28/0x40 [ 1244.732454][ T30] netlink_unicast+0x7bb/0x940 [ 1244.737297][ T30] netlink_sendmsg+0x813/0xb40 [ 1244.742136][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.747623][ T30] ? futex_unqueue+0x22/0x240 [ 1244.752410][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1244.758269][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1244.763639][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.769094][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 1244.773947][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.779467][ T30] ? lock_release+0x4b/0x3c0 [ 1244.784161][ T30] ? import_iovec+0x73/0xa0 [ 1244.789601][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1244.794369][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.799654][ T30] ? futex_wait+0x2a2/0x390 [ 1244.804181][ T30] ? __fget_files+0x2a/0x420 [ 1244.811639][ T30] ? __fget_files+0x3a2/0x420 [ 1244.819044][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1244.824073][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1244.829676][ T30] ? rcu_is_watching+0x15/0xb0 [ 1244.834908][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.841178][ T30] do_syscall_64+0x174/0x580 [ 1244.845845][ T30] ? trace_irq_disable+0x3b/0x140 [ 1244.851716][ T30] ? clear_bhb_loop+0x40/0x90 [ 1244.857229][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.863161][ T30] RIP: 0033:0x7ff043d9ce59 [ 1244.867758][ T30] RSP: 002b:00007ff044bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.876921][ T30] RAX: ffffffffffffffda RBX: 00007ff044016090 RCX: 00007ff043d9ce59 [ 1244.884969][ T30] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1244.901555][ T30] RBP: 00007ff043e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1244.920517][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.937761][ T30] R13: 00007ff044016128 R14: 00007ff044016090 R15: 00007fff6122e748 [ 1244.945845][ T30] [ 1244.955125][ T30] INFO: lockdep is turned off. [ 1244.961426][ T30] NMI backtrace for cpu 0 [ 1244.961442][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1244.961467][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1244.961477][ T30] Call Trace: [ 1244.961483][ T30] [ 1244.961490][ T30] dump_stack_lvl+0xe8/0x150 [ 1244.961514][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1244.961533][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1244.961584][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1244.961600][ T30] sys_info+0x135/0x170 [ 1244.961613][ T30] watchdog+0xfd7/0x1030 [ 1244.961639][ T30] ? watchdog+0x1c7/0x1030 [ 1244.961658][ T30] kthread+0x388/0x470 [ 1244.961671][ T30] ? __pfx_watchdog+0x10/0x10 [ 1244.961685][ T30] ? __pfx_kthread+0x10/0x10 [ 1244.961698][ T30] ret_from_fork+0x514/0xb70 [ 1244.961712][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.961725][ T30] ? __switch_to+0xc89/0x1420 [ 1244.961746][ T30] ? __pfx_kthread+0x10/0x10 [ 1244.961761][ T30] ret_from_fork_asm+0x1a/0x30 [ 1244.961786][ T30] [ 1244.961797][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1245.081489][ C1] NMI backtrace for cpu 1 [ 1245.081506][ C1] CPU: 1 UID: 0 PID: 21443 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1245.081525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.081535][ C1] RIP: 0010:do_raw_spin_lock+0x82/0x2f0 [ 1245.081561][ C1] Code: ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 <3d> ad 4e ad de 0f 85 32 01 00 00 4c 8d 73 10 4c 89 f0 48 c1 e8 03 [ 1245.081575][ C1] RSP: 0018:ffffc9000438faa0 EFLAGS: 00000046 [ 1245.081589][ C1] RAX: 00000000dead4ead RBX: ffff8880315d8760 RCX: 0000000080000002 [ 1245.081601][ C1] RDX: dffffc0000000000 RSI: ffffffff8c291100 RDI: ffff8880315d8760 [ 1245.081613][ C1] RBP: ffffc9000438fb60 R08: 0000000000000001 R09: 0000000000000000 [ 1245.081624][ C1] R10: dffffc0000000000 R11: fffffbfff206229f R12: 1ffff92000871f58 [ 1245.081636][ C1] R13: ffff888028818000 R14: ffff8880315d8764 R15: dffffc0000000000 [ 1245.081648][ C1] FS: 000055555f315500(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 1245.081661][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1245.081672][ C1] CR2: 00007f2ebefea540 CR3: 000000004c930000 CR4: 00000000003526f0 [ 1245.081687][ C1] Call Trace: [ 1245.081693][ C1] [ 1245.081699][ C1] ? add_wait_queue+0x41/0x180 [ 1245.081718][ C1] ? rcu_is_watching+0x15/0xb0 [ 1245.081735][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1245.081755][ C1] ? timerqueue_linked_add+0x287/0x2e0 [ 1245.081772][ C1] ? rcu_is_watching+0x15/0xb0 [ 1245.081790][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 1245.081808][ C1] add_wait_queue+0x41/0x180 [ 1245.081829][ C1] do_wait+0x176/0x510 [ 1245.081845][ C1] ? rcu_is_watching+0x15/0xb0 [ 1245.081863][ C1] kernel_wait4+0x232/0x2b0 [ 1245.081881][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 1245.081899][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 1245.081918][ C1] ? hrtimer_nanosleep+0x2cc/0x3a0 [ 1245.081940][ C1] __x64_sys_wait4+0x166/0x240 [ 1245.081964][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1245.081987][ C1] ? rcu_is_watching+0x15/0xb0 [ 1245.082004][ C1] ? rcu_is_watching+0x15/0xb0 [ 1245.082021][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.082037][ C1] do_syscall_64+0x174/0x580 [ 1245.082058][ C1] ? trace_irq_disable+0x3b/0x140 [ 1245.082079][ C1] ? clear_bhb_loop+0x40/0x90 [ 1245.082096][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.082111][ C1] RIP: 0033:0x7f2ebef5d68e [ 1245.082124][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1245.082138][ C1] RSP: 002b:00007ffcfe890118 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1245.082153][ C1] RAX: ffffffffffffffda RBX: 000055555f315500 RCX: 00007f2ebef5d68e [ 1245.082164][ C1] RDX: 0000000040000001 RSI: 00007ffcfe8901bc RDI: ffffffffffffffff [ 1245.082175][ C1] RBP: 00007ffcfe8901bc R08: 0000000000000000 R09: 0000000000000000 [ 1245.082185][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1245.082195][ C1] R13: 00000000000927c0 R14: 000000000012fd54 R15: 00007ffcfe890210 [ 1245.082213][ C1] [ 1245.116164][ T9936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1245.134198][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1245.134220][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1245.134239][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.134250][ T30] Call Trace: [ 1245.134257][ T30] [ 1245.134264][ T30] vpanic+0x56c/0xa60 [ 1245.134287][ T30] ? __pfx___schedule+0x10/0x10 [ 1245.134309][ T30] ? __pfx_vpanic+0x10/0x10 [ 1245.134326][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1245.134348][ T30] panic+0xc5/0xd0 [ 1245.134364][ T30] ? __pfx_panic+0x10/0x10 [ 1245.134379][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1245.134398][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1245.134418][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1245.134436][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1245.134463][ T30] watchdog+0x1030/0x1030 [ 1245.134485][ T30] ? watchdog+0x1c7/0x1030 [ 1245.134507][ T30] kthread+0x388/0x470 [ 1245.134523][ T30] ? __pfx_watchdog+0x10/0x10 [ 1245.134540][ T30] ? __pfx_kthread+0x10/0x10 [ 1245.134556][ T30] ret_from_fork+0x514/0xb70 [ 1245.134573][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1245.134588][ T30] ? __switch_to+0xc89/0x1420 [ 1245.134611][ T30] ? __pfx_kthread+0x10/0x10 [ 1245.134626][ T30] ret_from_fork_asm+0x1a/0x30 [ 1245.134650][ T30] [ 1245.139465][ T30] Kernel Offset: disabled