last executing test programs: 5.895304814s ago: executing program 2 (id=6102): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x11, 0x2, 0x10001) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000001340)={'lo\x00', {0x2, 0x4e24, @broadcast}}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) 5.609322292s ago: executing program 2 (id=6106): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x100000}]}}, 0x0, 0x3e}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xbd1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x8804) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x5, 0xfffffffe}}) bind$rose(r7, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) setsockopt$inet6_buf(r7, 0x29, 0xd3, &(0x7f00000003c0)="8a63310bc4da13f629", 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0xfffffff4}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 4.894166687s ago: executing program 2 (id=6113): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff0000000002000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0xffe0}], 0x1}}], 0x1, 0x200400c0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/69, 0x45}], 0x1}, 0x10000) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x0, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x3, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x4}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0xfff, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 4.09736216s ago: executing program 4 (id=6125): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x55a1bf2db0ca0616}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) (async) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x55a1bf2db0ca0616}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (async) 4.036725299s ago: executing program 4 (id=6127): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x44, @dev={0xfe, 0x80, '\x00', 0x1c}, @private1, 0x8, 0x8, 0xfffffffa, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004900)={'syztnl2\x00', &(0x7f0000004880)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x8, 0x3, 0x18, @local, @local, 0x20, 0x7, 0xc1, 0xa}}) sendmmsg$inet(r1, &(0x7f00000049c0)=[{{&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000008c0)="339dc4c760519337a5425a3b3e59edc625b998693199a2bc82e69229b0a767074b5b11af6bb1ba663839b91430052225c6612655a01328ae20f9bd0fab59b4cd7e7fee2281e4a6d6be55aaf93e4db0f78e2c25fa0cd8e31f7cfb784cb987972b94f497f2a060c8c6fc60df95a65e7c223099377d9be13f1f46fd9492f1e6a6e841d47c23f6ed37289a5afc1bbb57324366f5d8f698a21c32299cbe20d79adef438cd803df68d98437090a7dbe3", 0xad}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="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", 0xf80}, {&(0x7f0000000980)="872fa605f8cc0d433bcecc424c5c119c759210f0a1ea86e98ca98cc361663bc0f058e92c5bbd62c11d1bed4c6c9628716f6d19641bee493c7e4e1502ef04e4c9d6e6ea66396dbc403a84eaae3ea210e1056c11da60c7767cc5", 0x59}], 0x4, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @private=0xa010100}}}], 0x20}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b40)="a5fd6e2bd7cf2d3ecf682a1707078f18593aea540321f7967a98fd861694538677aeab89ffa7a783176eadccd3a2643dcfe13eca270374614f8de7e99e9302826737e7526d372cc5e0eda5ec1b3e51d3f8", 0x51}, {&(0x7f0000002e00)="134c3a35cdeceaf774d85e0f1d8fb64acc94a080d477a2b5333a0d1a776046ea9c00441ed2bcb0966c69f54d90699e2f626a629ef58279793441e63fff9c1f98fd9655cf03a2ac2ec176519c52b149a71690fcf9afb0cdbd73bb89c96b6ba84a177b5d74b419a8af5c53c50e46d0dc5f5017634e50f6a0800059ba0dea0dfb46b0f3e56ded1ff898c7ff6b018a277110bd42fe7ea645c0f06b6ba85fd83bd41b0c04bb817352f4428fc2d34d55e0246441f4f03974794eabd0fe2353f86c1a3af8530ae615f669d361c2bac5b3077e5c4770a876b6665644cdf6de948a6e366179d2606fbd6660f275da69ecf60e2a1b34a4e534f64d2a89e542945ce2ce701df1c6f844eedadb68e3666cf2bd7659489b85db1d83d58151338150dab07ca7a47c002ed8ebb026412da6ee35680bc23606d7bbb9144116ebcdb7eb62110a9f7899a94e430ea3b65323af387f01186c03eaab712528b9a7846bf9b98cd3f767adaeb857ff5937e074c26c87960da63a748c63d86f112aacb89ffe3d4bf8d37a6823b17e9f0e404e89ac5c171dce0728e8921d890ddf5d8c11fde3edb53d08768712ac46e3487c2caa56a5d9649f13bfbfca4ba7cc6378bf061cf08a49ca1ad0526040f72b385734464a987c99c2e66c437fe89465610f8a0f1611479ed8bd5ae126d60d89fcbb7813d5499dbd8af5268f8a58a4591ac3e991c7aa858ed2954987c13213110cc57b69584d6dac63ea5e89762cb14c480fd171e37c64f20851cadfc04930651c2a7d0568a22f1cad53e1e4745e3ff800ee258790ba8dd8d4fb0d449e3ebe0d274b6ddbccbb5cd77d505c7270f160ce150a3953a960a9b9c17b747f4f24e03e1212b01b5cca09d71c8a4234424f392c77fced13afcf86fff65491d774d182ab2cc1c01922954bceb49702dcd38550732188ba83cb939b16baeea0257fe8ed8db08b8b4e874e7f406687b08c180ea6f693163aa066e06f44d0475dd63b28bf5be60b271b59e1ffd11aa679206ac48e4721d8d735a005a566a6bd2d1d366455828459a8510e8112d1c54acd18232555b3cfbdabe37f7da876f85f11339446da17ac0e0579549af7db6ef6fa8a7cb16c888b5b714b687ba065187d2556dc8013c642b1e332349d4218fa87ae115068c0e7cc736e4afb4736b98be4b45ab6d4cdfc5e60e09b61faa783e6ff1742e98473b45b52d5521e61173fa6ee6d4e3968364fa8f1731dba165266301bc410042b4264149464e39daca4b954c32ebf34712724dc9d3d1aba9e05ef0bb88b97ae2f8b96ec42ad8ed00df75cd9530f9b8522c95e17d8dcdd3203129c2f27f18ad0f00d1546570ff74740db5338cd355f44700e002e738afc0ced767deb0abbea3a1397d08593c4c71a972cf7a4940f9cd2e8649d8870628491b723736ecea6c03bc07234df116ba535fc3750da3bd1e0c46a089d30fc67028958e24889b81edb7e3b123d906c142169dee4c2f53f495bca73dda5dfc0a2bce3e514634c85c0a43f71e675d6ccc1f9437c3b1ad55468d5e85df2bca2448744939805c1afb2743fb35b2ee7c048f2a845e7887a193086d874fc957f7ad6bb2da08c0d7b2a0477e37beab47e5f7a6356991e085bb7fafb855935905f8f9199cd86ccc9510d35a8a21d746928120224cdd54777daeb18fd29d66c3db2e25a1e7a4a2de474ad35c67f8ce6f0df69502c863ddbbdd418a3a741afb12f2028f6736cc15118f7dd7b0177af7d9c86fc1b873acc93ed6dd17ce130bbbcbec39246ace75c6565e18fa671e322225c862642f32d172ccede610ef425a8284d22c06b5ff2f4b43d9dd88ac8eaee6b609bb36a9dcde2f89cb28fe78e59043d97f849b7876e0368b0fe686f60b31f59bbfe7db7f542c2894bbb2179a2f60995f36bce7e1ed07b564d0164a36c8cfa3d11c27a4d2807c23c0efe20c0e508858d73dbf6c5c146433dc2f77013ba038ae08520dbec2223a840f125f84f5a53648eb1f73042ac97f3db3602e2650c4bee1a1d5dd2fedc9414bd865435c28f5e77eb70c888f39d86c87ccb5ed9035ae6ae49219804b7ad3cdb626d8a631a83ffe8c23598d0dc6de69c9042edefdcb3ac6cf11543b48dda1018650b6cba0c3a36e9d7a27923393541d8d283f8265c1490604653ab053fd47cf453c23e359e41f605ec81735e021f253129c8fd055398c416b63e9479cf62a733cf07756b0dea0c5afd6b8e0f3d67aabb587588bd4bd1c96d9b0e1c8b0d7fa20530605493780c329c84f7436fe03b86fae5fdb98ac739ddb77bc9d37c3a2453cdb2a7283d368331f602da41bee14fb15fa58498b63f9c634498ca03470be72a2527ffb836ba6e8576678664e07da90608bda43eaab9f49ac54b0388c4f13cf0132ff50c574b3af4a9e0d7c0a159426f2d1a7e3507aa0143baa5d230117b9ce36e50f6e48e60dccfe344c89c6fc0e54dc8e8dd978edafefeea9d41941233320605a4ebf9e8ea620de2fd50a4d54d5a61dde1b718a162af58aa52ffb57b48070a8950ac6e112386eafd9ef9360624ba1eaad9c86f73fc1eceddf5cbeac48b885d01eefde1a1ac94477645d6678aec3b24f84bc7e4f16d85998af68467a99678343ea8c546049e7c8c862c5fa06238f5db076a12effb055b2e55f80a1d85620d53b3c9c35ec87eede205049d8a3fdc2c18070a507fb30520729d579e8dac5caf32aafc57147f4598a0a1db9014bbcf79ea93d6266827966d8edf3266031bd6c06b8f5479c5b84db0fd2fb8b6d207e2c2b84761315ab0c4d83532baa3510dca6005ac3c189ff6ecb287d02d81c9f6d2c2df20304767f7486366b06864a48991e48d8eba0ed6e6e92e638c9c9471d7bfca26e23ca7ce5ff4365027ff5b23a3b2e26f1e6336edda31c126441b1b88a819cecf8754ae85716c0934331f36fdeeb360958017632b8af7fb0691128e9bc6317124ed43dbedbe555901398b898af465fd548a04b782f02ca46e702d6fa7a1ded85106c1a0eba2182fddd3d9d765e037b5e92fcaa9478e3dfc601ad66c6920a5883f7c7cc6c9b26043039844981759a2835fe80f80bc8d9d127b7009e5adcb13066a8a2084145f500e063cb0f71c223a717e1af42abae134c90a12d676d5e4565cbb508c0e038cf22a6779f88c320c2b368f6aee896f9134f5cf380cfc62325d7bc0aa30d4cfde9250f61f9b30c9d4ddfde70720e97e2165cedacd36cc45223297ec4b32f9b98fda83f3ae9024586213b0dd55d749fe1a9ae9df31ffbffd7de6220f899d993d97dc747ccc174c2d0344fc3d1f7e393ce64d3bed78fcbba5bed301297e5eaef20688f6e6a3d2a7a1cef83877c9d93dc4d720633bff89305fd84ec6da36411d59e59f854ec170e2eaf0a8e961a1b32fb10f28022c7bcc10de899a555fc2f8391d43ac0bd956e5c030f4a9028a2d7a5d687647a8b9496eab230495c67cabb0f3722912379d71f4718f4443474412506789b3dcdd94329b505a55171579e92ce325bf3c621e021cf4fc38f2a90f8414ebd6827ad4306c1782cb0e38443e99bb6d3d75b2a69326d69aa8bee28f26bd024454157733f2d1b0afec984dc890be2d8910158ff4ad0c343ae81be39d2741c4f7b1063fd8b2ac64622b3b24cbf73f8732f9c2f3cf1b9ad450cdc7deebce4ca13d8f2a4a6345aa4de042ffc5241d6d67e5308449b4ec55dda04437a26190e48d3495dc35eb828238437e60991f1ab370a79cb80e708b3a5aadd411babde53e6c2ff88ba7c6c96addf88b03bf7770b54f38a11d185d364bb1caff92ea30d6762624c3153fb39cece481876166ceefce09671bbecf49e145d2f89f8902ea50806332e49ecd81a8cae09c126e1c954e05b33c0aa1e2b9b06e0a0031910a00454393747162bb9d7df56e8515a1c131268b4bdd9e37c57e6c75042edc6d92982c4d1a77fadb872d179c0c8466bcc44c1a464217a4a4247d6fa2c9cdd2260acce384e8e76a44de990683820a1e3f789eeeb44fc884a331a751ab38976e5771b436e6c9f6c42db8c207289736832b439e96fe20711c227a4083e1db17b420fcad2b3e56e50796522382232222c377ce8fadc2dd46c47060289913a790a692117774f2fc6fc236a2eda28afa572aba33ca4682d7aac6d4ff2392e0b60afbd000fc97eeef8b1fef5905d532065788d39314af3525192a4c0b26566f93854f809add97c80bcd3f3c210a486b7631d0ee4fdc20929ebc1784231c4218accb8cba577d360135644b32a40e347c7fe88acbe769c33d7db0b81e6e94f363b69f7abea44c5ea1e9b354e5e07fc7da20283372340e43dd418ca10d12259f0b0e9bc8a903085f6badcbcb8081b8b00bf22322e93c83b510680ea7a7a7fd9c22787e4210e98822029f264aff786213692e04a5a79baf4ef153066b77d44ce8ddc23ff465bb695c9942748693556c123391c7af02e98d6b58c767fb978a0030b65d0a3ea614f6d072ba8f4d034812d5fd75d3cbcb5e08b6fc24f532b506bd8877dac71e08a60216e8bf66d4103845cde0c0f90ac1f41e69fed41f1068a3455bb2d34b8e2a3523f83c69bbf55f378ea98fb312e6e89fb4910870a8864dadac45a3194a438bac351a8cc19647be4aed87201138cf4b32c833853ad6826490db5ae6467e7a74fcbee0e96140c5f7d10b81d8e43d01e08c931a68090472232ec2c59ad3c0b1355c848fa70f252b6f8ebbf080a72009e43f520d12a7b76dad393127ba0c23b52ce981c64885da71624424f20ba88d2004420f136ee03d5e107de4d718970b71383fc8fc68694ee1f3a5ebe8f46228fcb9b1d5af9eb0e619aa11c50edc0163edb9cecc12544031acd9319183b2c07c49b64402aa203a3f337eab9abe0e94e32a3d7f94ee7ff3e923ea780de61fae5df361a73c00375adc884e51bb26a8f7751a066f1f5cc0e4dcb6638c25687dd597c35dbae2e6d6832d2b5588d1a1501f5aa4f76014a68d7833df283b4f363ffa43057755f3b7f236886a47e2ddcd3e2a0d08d047c9b7221159c5db6a650e613dce510d88abf306028c8dd01d287b155e34bd9bbe245c25364840932e762e3bcca4ae01127c172d6427aa4f8bd1d49c4b34db606275534277f3ea12bc6dada7a296ef9c96acbf43f93df8e0f73888a8aa224cc450a0b1fd2234233e8f45bff840cb7da54783a53ef50a5cf41944f6f6902ad200c111405d6a7b679a63c1d00100234c293d84dd7a63e7d954d6cdb3fc31038d323f67054a47853eabe1be03ed123a8bc5eccd8642865f60f73760eba95fa2c2aecb03d543ace16fdebb64efb76fa7780394db782328df744163bcdbc688143dd7538a54a165d13174685dcf1623eb2502001610cb83aae8e5e6c3c61107194cab796cdb77580b99a38cafbe8e3734cefceeb1c78b4222c16821c618e1acccf9873181e85cc1f8ecc45ec6b72e27441d5c4f4f2dcdcebc96ed3f741a47860f305a362d09d8c3abe6f53c13f1e5d51b7f0d2996fb8d19fa577aed1653f4251d0aeb5a76962184bf35c9eb78116ce6ab03d8576a09ba019458510154df93b8f200da2ad62ab4642179eab009c49e17990f1152cf23e815d729a0cc8b7bdc25b55036ab03cd6255d44a1d79c9d95c895108cf4253d6e588a595bc8fb8d79bf88472ca8de936f091685205e21f554dd15b5c74847ba2862ac58c81a3ca40f01a5d6147d0a62fb955d5b9a5d2e76e9c43d1ca82dafeab8fe09850dd0f276b64fa4e29a597ef9603b5a79560f3cce2746efa7bf3e779a33653e159ea5fb358b604523b3e1c4a71ac68f9854d8d8a43", 0x1000}, {&(0x7f0000000bc0)="29b36917576b8aec4e75950017d788cc3c7d70f5dca600ade4d23d76b4148a8b86864dee1f40612ef3c8d20a511cf2ddebc7d6e0b80de6de", 0x38}], 0x3, &(0x7f0000003e00)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="000181007f00000100000000"], 0x110}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000004500)=[{&(0x7f0000004000)="fbc44c71faad63c1333f376b31ca67269e6d84b9e75ba590eafa4a4ee69bf49d5f318ffe99598f339af9c83f61d820a011d8da31bc8d09af5e6eac9f88e0e97a8d163a426142cf716f6aca2cd462a88059ad508885e1c1c679067c22e7eaab0696cbbefce68a0c1eefcd3d23ccb8a15dab1d215dc4a60987f68b0a4df6a236de755868a71ca19da7d8edf5e929554fb065aa4d3f0d642ef0c2e18f8bdf7e1a52cc671ea60ad9cb4a84d07c1e05", 0xad}, {&(0x7f00000040c0)="7ac9915e1f6305b25f2e5ed217441e6b6e872e8bf23d4feab8b078e12702ab5ab6910c77656e0a7f955fb7803d42ca2efb0a0027c8123af84e72ec256f80e43e215f574c8becd2335675e9f3e5b8c6c0cf92f979c49b9685e9332ba04f9a15ac61125fcb9e67252aecb33c5023ffb1b5a6e97f5f58d69aa636a3256d2d0c24da443ca7c559a64b23cccda939438edf0325b8b980270a433b9c", 0x99}, {&(0x7f0000004180)="705c600d7c91d44aa52bc1315d1c76badc95b712ed22d0df3b73ab5db9b3549af1b956b6aaa2f6bb15499ce694496228d256ec855295359095456660fec28e75d82e31789ff9c5895603affcd527beccc4557d56a950bef3cd69a8cb586c3c23efdd6cc525540132f486e23362cce595c6641b933cd34b433558df58ac7a1bb7eacb66694735899b73a6aaacc7b906843f96479d114f792e57cc70d69a5e9012671189cc788d1deb6050de37539c9a75f62c0d22dc4d8eb46e766a24d1", 0xbd}, {&(0x7f0000004240)="997eadaa1881ecfb42186223066ca7999e72ec92bf12588a4a2c3554d4477f88fb29ddd6451cd70b8f0019ed3420e8d8aa0a8d5d567284bb7e30feec75a821281a072e28855e1b7699e0f293dfce13bdc8980a5cd2c903cef708ecf4719587a88443bb557f72dbb83be003955703023a36e656b5e73aa09014a47d37df5d88c300f2f6fd5e2dc7f11d9ef5c4cfab611755c2a9bf8fda3b26cc25751f67a054932e6dd5d604fad843d58e2f22d1d58f240e9be30291e351e7bc00a4d1019fefb24e67c1c7b05e3010e93fdfd5e4b6c8115a20aadbc1b0dda53c104d8399bda32fd98e46ac475e8e869285bd32b82ae9", 0xef}, {&(0x7f0000004340)="635533963428c42c9b6308cfbaa0446fc588ec6dabad177428c9523025bc34b7e91c31470dde3892031ad37e4dcf9c4acca324cc89bef955accbb48cc8bdcac557d8e14644a01dc9f8675f214658598e49aebcadbf10a8516455615f9c06e0e0c8febb7ed8e0113066dcc70a6e6357dd446b6f3295a1361c33d9a8ade5", 0x7d}], 0x5, &(0x7f0000004580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x2a, [@broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x6, [{@local, 0x3}]}, @end, @timestamp_addr={0x44, 0x4, 0xc0, 0x1, 0x9}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000003f80)}, {&(0x7f0000004680)="12b430b132a8c5669b27f5d08c5e091abe9adbac4aef9d94a7f87aa1afdcc865cec483ec6eaabd288d86b2adfc8e27eb963e4057a1e795d10886b6357a372594e8e400a62b5eee84c3b7272b2c1023dca179aeaa848474c5cc88f3cf8e8aae9c8e2d91929c7fc3fa54b29f7635cabcc3", 0x70}, {&(0x7f0000004740)="964f2d6f7aa8aa1cee63ee11d36d3edcf083f3ccfe37310e9b8d49f1fe92b0f147521e30159e541d27bfc4ea00a8d60832475aaff7c0c5bfa5600b634ce0108b94c464e0a9edd4da84994f539eebc0c46524b8adbfcdca7c4c681b630a0b9ef6123111df8e34019a8e358edc14c8b75e3bd9beeb022ef8bb53fa2fc3d59d30898df77f3e9f3cae4d4cd54589fe726e8521364dde4c1e0da0fc780b0e0b96ebc76301ee23a3233f7fd933cce9111f60c160693217b35438fbc4eeb567a7232c78131e73defe165baa80be27fa0f0745c432b6ebc3b2201e7dff6b746fab13caa2132b67db276c7fb568499063c4d5a9253751ac2e43", 0xf5}], 0x3, &(0x7f0000004940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x30}}], 0x5, 0x14) unshare(0x6a040000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="1b00000000000000000000002407000000000000607f6b36e1276db7cf32840316cf14c7f45455fc8f0323a400c1bf08a119e14a301c111b99da9a381a4895bf4b2286374e3d6910217416dc4fe345428519687810a078bf9c098fc9a3c2f30bb0d3b29e55ba2b7ed9f8d2ea48a0451fa5c20dea086d927fa08371476eac6734d2c7ba453a989bd532c8059fc8567d9a01406017a007028be0cacf4a3e3f733f7e9db3ddda26775f7c4eeb972777f110248cef10d9081daff9a1b21b9dd249648665ed834d", @ANYRES32=r0, @ANYBLOB='y6\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000240)=@raw=[@ldst={0x3, 0x2, 0x6, 0x9, 0xb, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], &(0x7f0000000400)='syzkaller\x00', 0x1995, 0x0, 0x0, 0x40f00, 0xd7, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xf, 0xfffffffb, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r5, 0xffffffffffffffff, r5, r5, r9, r5], &(0x7f0000000800)=[{0x1, 0x1, 0xe, 0x8}, {0x2, 0x3, 0x10, 0xc}, {0x4, 0x4, 0x9, 0x3}, {0x1, 0x2, 0x7, 0x7}, {0x0, 0x4, 0xe, 0x4}], 0x10, 0xffffff4d}, 0x94) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004b00)=ANY=[@ANYBLOB="c9bb60161aed43bca4ef9065cfd26b909ab9bfce51b9500100001a00130720000000fddbdf25200100000000000000000000000000012001000004b0000000000000000000010000009118165a3a8e8158a6ff419c39820d8f3eb91de8d0c8ffe967b808ee91fe257ed70360cddc2b792f7d57a12a623d2a089c6eabd1df3bf61b2e2f3e7fb777917e7b2098fde1d3d5d1ba240dd36b2f7944841faee536a302a453", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3.921354906s ago: executing program 2 (id=6128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabc}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fbffff1f00000000", @ANYRES32=r5, @ANYBLOB="460006000000000024001280090009006280050001000200000005000e000300000000000000000000000000d14d04832a4d858299217f3a95031c920edc5f182fa2431f7d200c1398e0a2452ad15e7e32e79fee02cea1ea735b20f95af5d5"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x31, 0x3, 0x0, 0x0, 0x4, 0x8}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x31, 0x3, 0x0, 0x0, 0x4, 0x8}, 0x1c) 3.854454331s ago: executing program 2 (id=6129): r0 = socket$inet6(0xa, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r2, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt(r0, 0xff, 0x22, 0x0, &(0x7f00000002c0)) 3.736925202s ago: executing program 1 (id=6130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet(0x2, 0x3, 0x104) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x10, 0x40, 0x7, 0x10002, {{0x5, 0x4, 0x1, 0x1c, 0x14, 0x64, 0x0, 0x40, 0x4, 0x0, @remote, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x82}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x11, 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0028"], 0x28}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 3.513476314s ago: executing program 2 (id=6131): r0 = socket$kcm(0xf, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0xf0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000}, 0x20) unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffce8, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4884) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000480000062cbd7000fedbdf250a004000", @ANYRES32=0x0, @ANYBLOB='?\x00'/12], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4004) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r5, &(0x7f0000000000)='&@%[{-[\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x3]}, {0x330, 0x401, 0xad, 0xd0}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7fff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x60, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) close(r4) r8 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r8, 0x0, 0x0, 0x1, 0x0, 0x0) 3.105557729s ago: executing program 1 (id=6133): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x61f0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x118, 0x5, 0x84, 0x6, 0x8, @remote}, 0x10) 2.902491872s ago: executing program 3 (id=6135): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000006c0)="a1c0ffff000039a9029e2d347a0000000666eeee", 0x14}], 0x1}}], 0x1, 0xfffe) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x3}, @volatile={0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}]}, {0x0, [0x30, 0x7f, 0x2e]}}, &(0x7f0000000100)=""/166, 0x4d, 0xa6, 0x1, 0x5, 0x10000, @value=r2}, 0x28) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.553130965s ago: executing program 0 (id=6136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x3, 0xc}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x200000000}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x3, 0xc}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x200000000}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) (async) 2.316964987s ago: executing program 3 (id=6137): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000ff0800000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0xb1}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000280)={0x24, @short}, 0x14) (async, rerun: 32) close(0x3) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r9, 0x0) (async) close(0x3) (async) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}], 0x18, 0x4008000}, 0x28008841) 2.113564523s ago: executing program 0 (id=6138): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x1}, {0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.977441614s ago: executing program 3 (id=6139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x112}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) bind$alg(r6, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r8 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000400)=0x2, 0x4) recvmsg(r8, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) connect$unix(r5, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r12, 0x29, 0xd0, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) 1.921357011s ago: executing program 0 (id=6140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x6b}, @timestamp={0x44, 0x8, 0x7, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7727}}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000016003480040035006d6163766c616e310000000000000000140035"], 0x4c}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000400)={@val={0xa, 0x8847}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x86dd, 0x4, 0x1, 0x4}}, {@can={0xc, {{0x0, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "97e9f5f514315f1e"}}}}}, 0x2a) 1.750759524s ago: executing program 3 (id=6141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f6, 0x4, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x40c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x8000}) 1.552745266s ago: executing program 3 (id=6142): socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80003, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket(0x10, 0x3, 0x0) unshare(0x20000400) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r0], 0x3b) 1.413361842s ago: executing program 0 (id=6143): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000005c0)=0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000640), &(0x7f0000000840)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) (async) recvmsg$unix(r7, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0, 0x48}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010163) (async) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$SIOCAX25NOUID(r9, 0x89e3, &(0x7f00000000c0)=0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000009050000000000000000000a0000090c0004800800014000007fff0900010073797a31000000002400020014000180080001670000000008000200e00000020c0002800500010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000a0000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100727400001c0002800800014000000002080002400000000805000320010000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f0000000580)=0x889, 0x4) 1.183627218s ago: executing program 3 (id=6145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000980)="c1298e99b95dfaff4284860186ddd6832a84a09f59804362eaa7b4bab76ac58f07b714b5eb499edf3a37d6905ca2abbe46bc30d684ef", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) 1.169815462s ago: executing program 0 (id=6146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) pipe(&(0x7f0000000240)={0xffffffffffffffff}) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async, rerun: 64) read$rfkill(0xffffffffffffffff, &(0x7f0000000380), 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES32=r2, @ANYRES8, @ANYRESHEX=r5], 0x28}, 0x1, 0x0, 0x0, 0x5000}, 0x24000004) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000300)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) poll(&(0x7f0000000300), 0x29, 0x200) (async, rerun: 32) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="40080000850aff03000000008f61ac2ebf725ef4000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 915.624813ms ago: executing program 4 (id=6147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f00000000c0)=[{r1, 0x44c1}, {r0, 0x4038}], 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='THAWED\x00', 0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 776.735637ms ago: executing program 1 (id=6148): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0xa, 0xc19, {{0x2c, 0x4, 0x2, 0xe, 0xb0, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x28, 0x98, 0x0, 0xd, [0xfffffffc, 0xb, 0xfffffffa, 0xffffffff, 0xfb, 0x9, 0x7, 0x9, 0x0]}, @ssrr={0x89, 0xf, 0xa6, [@multicast1, @empty, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa6, 0x0, 0x4, [0x6, 0x8, 0x3b, 0x1]}, @cipso={0x86, 0x9, 0x0, [{0x1, 0x3, '*'}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @ssrr={0x89, 0x23, 0xc5, [@multicast1, @private=0xa010102, @broadcast, @broadcast, @local, @multicast1, @multicast1, @private=0xa010101]}, @generic={0x89, 0x12, "0408461d09057e076760814c9e9a5ca7"}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_deladdr={0x34, 0x15, 0x2, 0x70bd29, 0x25dfdbfe, {0x2, 0x3f, 0x5, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x1, 0x46c, 0x9}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) 468.937473ms ago: executing program 1 (id=6149): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0xffff, 0x5}, &(0x7f0000000140)=0x8) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 422.001708ms ago: executing program 4 (id=6150): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @local, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000032000008fa857d88179f4900fe80000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x74, 0x0, 0x0, 0x2000000}]}, 0x10) 263.898479ms ago: executing program 4 (id=6151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="d2dcaafb519c2ec1800000002047", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x84) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c001680"], 0x38}, 0x1, 0x0, 0x0, 0x24048011}, 0xc800) 159.501119ms ago: executing program 1 (id=6152): socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0x11, r0, 0x80000000) socket$key(0xf, 0x3, 0x2) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 904.876µs ago: executing program 1 (id=6153): syz_emit_ethernet(0x2a, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaa0eaaaaaaaaaa0c08060001080006040004aaaaaaaaaabb0a010100aaaaaaaae377e3cf0001"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1, 0x1000000}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) syz_emit_ethernet(0x2a, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaa0eaaaaaaaaaa0c08060001080006040004aaaaaaaaaabb0a010100aaaaaaaae377e3cf0001"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1, 0x1000000}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r5, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (async) 400.91µs ago: executing program 4 (id=6154): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000e00)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb}]}, 0x48}}, 0x20000040) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[&$-+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {}, {@multicast2}, {}, {@private}, {@broadcast}, {@empty}, {@dev}, {@dev}, {@dev}]}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 0 (id=6155): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5}, 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) kernel console output (not intermixed with test programs): thread 0... [ 669.366729][T24678] tipc: Resetting bearer [ 669.417939][T24678] tipc: Disabling bearer [ 669.456303][T24687] IPVS: using max 32 ests per chain, 76800 per kthread [ 669.575312][T24694] validate_nla: 2 callbacks suppressed [ 669.575333][T24694] netlink: 'syz.4.4873': attribute type 8 has an invalid length. [ 669.606117][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 669.720195][T24699] xt_hashlimit: size too large, truncated to 1048576 [ 669.734701][T24703] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 669.746981][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 669.821361][T24703] 8021q: adding VLAN 0 to HW filter on device bond11 [ 669.882055][T24703] bond11: (slave batadv3): Opening slave failed [ 670.030631][T24707] bond11: (slave veth13): Enslaving as an active interface with a down link [ 670.086119][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 670.203400][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 670.267548][T24723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4878'. [ 670.326519][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 670.395008][T24730] netlink: 'syz.2.4882': attribute type 10 has an invalid length. [ 670.419120][T24730] netlink: 320 bytes leftover after parsing attributes in process `syz.2.4882'. [ 670.431041][T24733] syzkaller1: entered promiscuous mode [ 670.437338][T24733] syzkaller1: entered allmulticast mode [ 670.460618][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 670.576621][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 670.696552][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 671.449843][T24779] atomic_op ffff88807b7a0198 conn xmit_atomic 0000000000000000 [ 671.460229][T24779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4893'. [ 671.470610][T24779] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4893'. [ 671.480265][T24779] netlink: 'syz.2.4893': attribute type 9 has an invalid length. [ 671.789461][T24791] netlink: 'syz.2.4896': attribute type 29 has an invalid length. [ 671.852474][T24800] netlink: 'syz.2.4896': attribute type 29 has an invalid length. [ 672.226814][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 672.388310][T24816] syzkaller0: entered promiscuous mode [ 672.393927][T24816] syzkaller0: entered allmulticast mode [ 672.408334][T24816] __nla_validate_parse: 3 callbacks suppressed [ 672.408346][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4902'. [ 672.771513][T24819] bond6 (unregistering): Released all slaves [ 672.801086][T24829] netlink: 'syz.2.4903': attribute type 4 has an invalid length. [ 672.830953][T24833] netlink: 'syz.3.4906': attribute type 32 has an invalid length. [ 672.839423][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 672.875876][T24833] bond12: Setting coupled_control to on (1) [ 673.048522][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4907'. [ 673.090430][T24848] netlink: 'syz.4.4910': attribute type 8 has an invalid length. [ 673.099795][T24848] sch_fq: defrate 0 ignored. [ 673.105608][T24847] netlink: 'syz.4.4910': attribute type 8 has an invalid length. [ 673.121843][T24847] sch_fq: defrate 0 ignored. [ 673.397393][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4917'. [ 673.441553][T24870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4918'. [ 673.462100][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4918'. [ 673.509428][T24875] wg1 speed is unknown, defaulting to 1000 [ 673.547968][T24870] ip6tnl4: entered allmulticast mode [ 673.566694][T24875] lo speed is unknown, defaulting to 1000 [ 673.580806][T24875] wg1 speed is unknown, defaulting to 1000 [ 673.947262][T24898] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4923'. [ 674.034698][T24906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4927'. [ 674.101883][T24907] syzkaller0: entered promiscuous mode [ 674.108305][T24907] syzkaller0: entered allmulticast mode [ 674.166087][T12087] net_ratelimit: 26 callbacks suppressed [ 674.166109][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 674.286067][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 674.354865][T24924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4935'. [ 674.358143][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4933'. [ 674.365160][T24924] tc_dump_action: action bad kind [ 674.384480][T24923] chnl_net:caif_netlink_parms(): no params data found [ 674.426164][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 674.538095][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 674.656276][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 674.776497][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 674.809426][T24940] netlink: 'syz.4.4940': attribute type 1 has an invalid length. [ 674.886503][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 674.996236][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 675.116720][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 675.160188][T24951] syzkaller1: entered promiscuous mode [ 675.177606][T24951] syzkaller1: entered allmulticast mode [ 675.227698][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 675.327739][T24961] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 675.475832][T24966] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 675.484133][T24966] syzkaller0: entered promiscuous mode [ 675.491818][T24966] syzkaller0: entered allmulticast mode [ 675.519021][T24968] syzkaller0: entered promiscuous mode [ 675.526176][T24968] syzkaller0: entered allmulticast mode [ 675.541018][T24964] tipc: Enabled bearer , priority 0 [ 675.576512][T24963] tipc: Resetting bearer [ 675.599664][T24963] tipc: Disabling bearer [ 675.919378][ T6556] IPVS: starting estimator thread 0... [ 676.016887][T25001] IPVS: using max 29 ests per chain, 69600 per kthread [ 676.098820][T25012] geneve0 (unregistering): left promiscuous mode [ 676.124585][T25012] geneve0 (unregistering): left allmulticast mode [ 676.180967][T25012] team0: Port device geneve0 removed [ 676.325189][T25029] syzkaller0: entered promiscuous mode [ 676.337079][T25029] syzkaller0: entered allmulticast mode [ 676.355690][T25029] tipc: Enabled bearer , priority 0 [ 676.365423][T25028] tipc: Resetting bearer [ 676.403798][T25028] tipc: Disabling bearer [ 676.604733][T25045] : entered promiscuous mode [ 676.737818][T25050] netlink: 'syz.1.4968': attribute type 39 has an invalid length. [ 676.788535][T25048] netlink: 'syz.1.4968': attribute type 5 has an invalid length. [ 676.814097][T25056] netlink: 'syz.0.4970': attribute type 14 has an invalid length. [ 676.823644][T25056] netlink: 'syz.0.4970': attribute type 12 has an invalid length. [ 676.970902][T25070] netlink: 'syz.2.4973': attribute type 1 has an invalid length. [ 677.067592][T25070] macvlan0: entered promiscuous mode [ 677.072955][T25070] macvlan0: entered allmulticast mode [ 677.080571][T25070] bond6: (slave macvlan0): Opening slave failed [ 677.133144][T25078] syz_tun: left promiscuous mode [ 677.147394][T25078] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.233974][T25081] syzkaller0: entered promiscuous mode [ 677.240239][T25081] syzkaller0: entered allmulticast mode [ 677.250557][T25081] tipc: Enabled bearer , priority 0 [ 677.259294][T25080] tipc: Resetting bearer [ 677.296866][T25080] tipc: Disabling bearer [ 677.600976][T25099] __nla_validate_parse: 21 callbacks suppressed [ 677.600997][T25099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4983'. [ 677.850150][T25109] netlink: 'syz.3.4989': attribute type 7 has an invalid length. [ 677.871730][T25109] netlink: 'syz.3.4989': attribute type 7 has an invalid length. [ 677.878581][T23278] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.888088][T23278] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.914267][T23278] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.926156][T23278] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.073510][T25114] wg1 speed is unknown, defaulting to 1000 [ 678.089488][T25114] lo speed is unknown, defaulting to 1000 [ 678.139002][T25114] wg1 speed is unknown, defaulting to 1000 [ 678.553853][T25131] tipc: Enabled bearer , priority 10 [ 678.682494][T25114] lo speed is unknown, defaulting to 1000 [ 678.690159][T25114] lo speed is unknown, defaulting to 1000 [ 678.696804][T25114] lo speed is unknown, defaulting to 1000 [ 678.739511][T25143] netlink: 'syz.1.4997': attribute type 61 has an invalid length. [ 678.757720][T25143] netlink: 'syz.1.4997': attribute type 62 has an invalid length. [ 678.962266][T25153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5000'. [ 679.075616][T25114] infiniband sqz0: set down [ 679.084293][T25114] infiniband sqz0: added lo [ 679.093047][T25114] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 679.096668][T25114] infiniband sqz0: Couldn't open port 1 [ 679.149419][T25114] RDS/IB: sqz0: added [ 679.159243][T25114] smc: adding ib device sqz0 with port count 1 [ 679.166907][T25114] smc: ib device sqz0 port 1 has no pnetid [ 679.174757][ T6556] lo speed is unknown, defaulting to 1000 [ 679.183879][T17965] lo speed is unknown, defaulting to 1000 [ 679.189841][T12085] net_ratelimit: 29 callbacks suppressed [ 679.189859][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.209918][T25114] lo speed is unknown, defaulting to 1000 [ 679.296104][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.416489][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.523986][T25114] lo speed is unknown, defaulting to 1000 [ 679.536051][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.572292][ T6563] tipc: Node number set to 3970152540 [ 679.646531][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.754736][T25168] tipc: Enabling of bearer rejected, failed to enable media [ 679.806165][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 679.824344][T25171] syz.1.5004: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 679.868667][T25171] CPU: 0 UID: 0 PID: 25171 Comm: syz.1.5004 Not tainted syzkaller #0 PREEMPT(full) [ 679.868699][T25171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.868712][T25171] Call Trace: [ 679.868719][T25171] [ 679.868727][T25171] dump_stack_lvl+0xe8/0x150 [ 679.868769][T25171] warn_alloc+0x249/0x340 [ 679.868801][T25171] ? stack_trace_save+0xa9/0x100 [ 679.868835][T25171] ? __pfx_warn_alloc+0x10/0x10 [ 679.868872][T25171] ? kasan_save_track+0x4f/0x80 [ 679.868896][T25171] ? kasan_save_track+0x3e/0x80 [ 679.868920][T25171] ? __kasan_kmalloc+0x93/0xb0 [ 679.868945][T25171] ? __kmalloc_cache_noprof+0x31c/0x660 [ 679.868974][T25171] ? xskq_create+0x56/0x170 [ 679.868998][T25171] ? xsk_setsockopt+0x54c/0x990 [ 679.869018][T25171] ? do_sock_setsockopt+0x17c/0x1b0 [ 679.869043][T25171] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 679.869068][T25171] ? do_syscall_64+0x14d/0xf80 [ 679.869101][T25171] __vmalloc_node_range_noprof+0x132/0x1730 [ 679.869166][T25171] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 679.869203][T25171] ? __kasan_kmalloc+0x93/0xb0 [ 679.869238][T25171] vmalloc_user_noprof+0xad/0xe0 [ 679.869267][T25171] ? xskq_create+0xbf/0x170 [ 679.869293][T25171] xskq_create+0xbf/0x170 [ 679.869320][T25171] xsk_init_queue+0xad/0x110 [ 679.869356][T25171] xsk_setsockopt+0x54c/0x990 [ 679.869383][T25171] ? __pfx_xsk_setsockopt+0x10/0x10 [ 679.869407][T25171] ? __pfx_aa_sk_perm+0x10/0x10 [ 679.869448][T25171] ? aa_sock_opt_perm+0xff/0x1a0 [ 679.869482][T25171] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 679.869513][T25171] ? __pfx_xsk_setsockopt+0x10/0x10 [ 679.869538][T25171] do_sock_setsockopt+0x17c/0x1b0 [ 679.869579][T25171] __x64_sys_setsockopt+0x13d/0x1b0 [ 679.869613][T25171] do_syscall_64+0x14d/0xf80 [ 679.869648][T25171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.869669][T25171] ? trace_irq_disable+0x37/0x100 [ 679.869694][T25171] ? clear_bhb_loop+0x40/0x90 [ 679.869726][T25171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.869748][T25171] RIP: 0033:0x7fe78099c629 [ 679.869769][T25171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.869786][T25171] RSP: 002b:00007fe7818dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 679.869809][T25171] RAX: ffffffffffffffda RBX: 00007fe780c15fa0 RCX: 00007fe78099c629 [ 679.869826][T25171] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 679.869840][T25171] RBP: 00007fe780a32b39 R08: 0000000000000004 R09: 0000000000000000 [ 679.869854][T25171] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.869868][T25171] R13: 00007fe780c16038 R14: 00007fe780c15fa0 R15: 00007ffcf58fa5c8 [ 679.869905][T25171] [ 679.870004][T25171] Mem-Info: [ 679.978977][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 680.035074][T25173] netlink: 'syz.1.5004': attribute type 1 has an invalid length. [ 680.078241][T25171] active_anon:9489 inactive_anon:0 isolated_anon:0 [ 680.078241][T25171] active_file:2589 inactive_file:40617 isolated_file:0 [ 680.078241][T25171] unevictable:784 dirty:104 writeback:0 [ 680.078241][T25171] slab_reclaimable:12810 slab_unreclaimable:126223 [ 680.078241][T25171] mapped:32384 shmem:4234 pagetables:1374 [ 680.078241][T25171] sec_pagetables:0 bounce:0 [ 680.078241][T25171] kernel_misc_reclaimable:0 [ 680.078241][T25171] free:1281345 free_pcp:16660 free_cma:0 [ 680.245788][T25171] Node 0 active_anon:37856kB inactive_anon:0kB active_file:10356kB inactive_file:162264kB unevictable:1600kB isolated(anon):0kB isolated(file):0kB mapped:133536kB dirty:416kB writeback:0kB shmem:15400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14700kB pagetables:5272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 680.298800][T25171] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 680.366620][T25171] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 680.416644][T25171] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 680.432801][T25171] Node 0 DMA32 free:1191980kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42456kB inactive_anon:0kB active_file:10356kB inactive_file:162264kB unevictable:1600kB writepending:416kB zspages:0kB present:3129332kB managed:2554012kB mlocked:64kB bounce:0kB free_pcp:37956kB local_pcp:9476kB free_cma:0kB [ 680.482918][T25171] lowmem_reserve[]: 0 0 0 0 0 [ 680.496672][T25171] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 680.538899][T25171] lowmem_reserve[]: 0 0 0 0 0 [ 680.543776][T25171] Node 1 Normal free:3917844kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24536kB local_pcp:0kB free_cma:0kB [ 680.590673][T25171] lowmem_reserve[]: 0 0 0 0 0 [ 680.602337][T25171] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 680.695358][T25171] Node 0 DMA32: 7121*4kB (UME) 5396*8kB (UE) 2949*16kB (UE) 103*32kB (UE) 698*64kB (UME) 520*128kB (UM) 392*256kB (UM) 354*512kB (UME) 255*1024kB (UM) 117*2048kB (UM) 43*4096kB (U) = 1191828kB [ 680.734584][T25171] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.764266][T25171] Node 1 Normal: 2*4kB (UM) 6*8kB (UME) 15*16kB (UME) 11*32kB (UME) 9*64kB (UME) 7*128kB (UM) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 953*4096kB (UM) = 3917896kB [ 680.769523][T25192] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 680.810248][T25171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.824681][T25193] xt_hashlimit: size too large, truncated to 1048576 [ 680.833468][T25171] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 680.854361][T25171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.876531][T25171] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 680.898114][T25171] 51048 total pagecache pages [ 680.902854][T25171] 0 pages in swap cache [ 680.919030][T25171] Free swap = 124996kB [ 680.923263][T25171] Total swap = 124996kB [ 680.937656][T25171] 2097051 pages RAM [ 680.946922][T25171] 0 pages HighMem/MovableOnly [ 680.959462][T25171] 426702 pages reserved [ 680.969574][T25171] 0 pages cma reserved [ 681.080852][T25173] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 681.089001][T25114] lo speed is unknown, defaulting to 1000 [ 681.186321][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 681.346514][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 681.621484][T25114] lo speed is unknown, defaulting to 1000 [ 681.838856][T25230] m1Ie5èÿá: entered promiscuous mode [ 681.914773][T25234] netlink: 'syz.3.5015': attribute type 21 has an invalid length. [ 681.927767][T25234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5015'. [ 682.158550][T25114] lo speed is unknown, defaulting to 1000 [ 682.381892][T25240] tipc: Enabling of bearer rejected, failed to enable media [ 682.484166][T25250] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5018'. [ 682.945429][T25259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5021'. [ 683.023921][T25262] vlan3: entered promiscuous mode [ 683.287201][T25285] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 683.293520][T25286] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 683.389645][T25285] bond7: Unable to set down delay as MII monitoring is disabled [ 683.460889][T25285] bond7 (unregistering): Released all slaves [ 683.519003][T25286] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 683.591193][T25299] bridge_slave_0: entered promiscuous mode [ 683.632394][T25299] netlink: 'syz.2.5032': attribute type 16 has an invalid length. [ 683.641435][T25299] netlink: 'syz.2.5032': attribute type 17 has an invalid length. [ 683.743119][T25299] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.824788][T17965] lo speed is unknown, defaulting to 1000 [ 683.845215][T17965] syz2: Port: 1 Link ACTIVE [ 683.927577][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5033'. [ 684.060847][T25322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5038'. [ 684.070909][T25324] syz.4.5037 uses old SIOCAX25GETINFO [ 684.112999][T25325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 684.153681][T25325] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 684.223021][ T49] net_ratelimit: 21 callbacks suppressed [ 684.223041][ T49] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 684.288007][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 684.314898][T25334] tipc: Started in network mode [ 684.322286][T25334] tipc: Node identity 080211000001, cluster identity 4711 [ 684.330263][T25334] tipc: Enabled bearer , priority 0 [ 684.346447][T25334] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 684.356757][ T49] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 684.378604][T25334] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 684.396191][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 684.408211][T25335] tipc: Resetting bearer [ 684.546655][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 684.656087][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 684.774331][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 684.886390][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 685.016143][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 685.082105][T25362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5047'. [ 685.092761][T25362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5047'. [ 685.164461][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 685.234197][T25364] netlink: 'syz.3.5048': attribute type 1 has an invalid length. [ 685.270902][T25367] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.5049'. [ 685.291562][T25364] bond13: entered promiscuous mode [ 685.297889][T25364] 8021q: adding VLAN 0 to HW filter on device bond13 [ 685.305516][T25363] bridge0: Device is already in use. [ 685.330338][T25367] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.5049'. [ 685.386123][ T6563] tipc: Node number set to 134418688 [ 685.536897][T25377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5052'. [ 685.569387][T25377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5052'. [ 686.291470][T25405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 686.566723][T25420] team0 (unregistering): Port device team_slave_0 removed [ 686.595708][T25420] team0 (unregistering): Port device team_slave_1 removed [ 686.630344][T25417] pimreg: tun_chr_ioctl cmd 1074812117 [ 687.367186][T25466] wg1 speed is unknown, defaulting to 1000 [ 687.374840][T25466] lo speed is unknown, defaulting to 1000 [ 687.402547][T25466] wg1 speed is unknown, defaulting to 1000 [ 687.413558][T25466] lo speed is unknown, defaulting to 1000 [ 687.858565][T25481] tipc: Enabling of bearer rejected, already enabled [ 688.142338][T25507] __nla_validate_parse: 11 callbacks suppressed [ 688.142360][T25507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5084'. [ 688.167846][T25508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5085'. [ 688.250638][T25513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 688.273315][T25513] netlink: 'syz.1.5087': attribute type 1 has an invalid length. [ 688.321298][T25506] netlink: 461 bytes leftover after parsing attributes in process `syz.2.5086'. [ 688.495265][T25524] netlink: 'syz.1.5090': attribute type 29 has an invalid length. [ 688.617079][T25530] netlink: 'syz.4.5092': attribute type 1 has an invalid length. [ 688.651556][T25533] netlink: 'syz.1.5093': attribute type 58 has an invalid length. [ 688.658336][T25535] netlink: 'syz.1.5093': attribute type 58 has an invalid length. [ 688.674069][T25535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5093'. [ 688.699748][T25533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5093'. [ 688.792268][T25538] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5094'. [ 688.852918][T25543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'. [ 688.862180][T25543] erspan0: entered promiscuous mode [ 688.886242][T25543] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5095'. [ 688.908002][T25543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5095'. [ 688.925723][T25543] bond0: entered promiscuous mode [ 688.933277][T25543] bond_slave_0: entered promiscuous mode [ 688.941790][T25543] bond_slave_1: entered promiscuous mode [ 688.953402][T25543] bond0: left promiscuous mode [ 688.961000][T25543] bond_slave_0: left promiscuous mode [ 688.967611][T25543] bond_slave_1: left promiscuous mode [ 689.102461][T25553] netlink: 'syz.0.5099': attribute type 10 has an invalid length. [ 689.102657][T25552] siw: device registration error -23 [ 689.112320][T25553] veth0_vlan: left allmulticast mode [ 689.318962][ T49] net_ratelimit: 35 callbacks suppressed [ 689.318982][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 689.322754][T25563] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.343065][T25563] block nbd0: NBD_DISCONNECT [ 689.348116][T25563] block nbd0: Send disconnect failed -32 [ 689.353991][T25563] block nbd0: shutting down sockets [ 689.426951][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 689.546597][T23278] bond2: (slave bridge2): failed to get link speed/duplex [ 689.657592][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 689.766573][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 689.876629][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 689.917775][T25594] tipc: Enabled bearer , priority 0 [ 689.974818][T25593] tipc: Disabling bearer [ 690.012451][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 690.101565][T25598] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 690.109431][T25598] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 690.136414][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 690.239151][T25613] netlink: 'syz.4.5112': attribute type 2 has an invalid length. [ 690.256656][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 690.579715][T25630] gretap0: entered promiscuous mode [ 690.594317][T25630] gretap0: left promiscuous mode [ 690.873814][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 691.010341][T25657] netlink: 'syz.0.5124': attribute type 83 has an invalid length. [ 691.257330][T25674] netlink: 'syz.1.5127': attribute type 10 has an invalid length. [ 691.345669][T25680] netlink: 'syz.1.5127': attribute type 10 has an invalid length. [ 691.370720][T25680] team0: Device ipvlan1 failed to register rx_handler [ 691.452193][T25683] netlink: 'syz.0.5130': attribute type 1 has an invalid length. [ 691.550415][T25686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 691.555708][T25689] bond4: (slave bridge5): making interface the new active one [ 691.565051][T25689] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 691.598463][T25683] bridge0: port 5(dummy0) entered blocking state [ 691.605071][T25683] bridge0: port 5(dummy0) entered forwarding state [ 691.704115][T25698] netlink: 'syz.4.5133': attribute type 1 has an invalid length. [ 691.712089][T25698] netlink: 'syz.4.5133': attribute type 2 has an invalid length. [ 691.720628][T25697] netlink: 'syz.4.5133': attribute type 1 has an invalid length. [ 691.730936][T25697] netlink: 'syz.4.5133': attribute type 2 has an invalid length. [ 691.781396][T25704] netlink: 'syz.0.5135': attribute type 32 has an invalid length. [ 691.880309][T25704] bond5: Setting coupled_control to off (0) [ 692.127431][T25706] wg1 speed is unknown, defaulting to 1000 [ 692.158022][T25706] lo speed is unknown, defaulting to 1000 [ 692.176735][T25706] wg1 speed is unknown, defaulting to 1000 [ 692.192818][T25706] lo speed is unknown, defaulting to 1000 [ 692.253457][T25732] bond6: option arp_interval: invalid value (18446744073709551615) [ 692.280805][T25732] bond6: option arp_interval: allowed values 0 - 2147483647 [ 692.294639][T25732] bond6 (unregistering): Released all slaves [ 692.513680][T25742] ip6gretap0: entered promiscuous mode [ 692.522776][T25742] ip6gretap0: left promiscuous mode [ 692.865875][T17965] lo speed is unknown, defaulting to 1000 [ 693.168482][T25761] __nla_validate_parse: 16 callbacks suppressed [ 693.168502][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'. [ 693.282041][T25775] syzkaller1: entered promiscuous mode [ 693.301575][T25775] syzkaller1: entered allmulticast mode [ 693.320995][T25771] syzkaller1: entered promiscuous mode [ 693.329630][T25771] syzkaller1: entered allmulticast mode [ 693.561529][T25787] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5156'. [ 693.601740][T25787] vlan3: entered promiscuous mode [ 693.900086][T25813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 694.012577][T25813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 694.033780][T25836] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5166'. [ 694.127696][T25813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 694.194681][T25840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.231002][T25813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 694.322829][T12087] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 694.349477][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 694.392865][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 694.450910][T12078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 694.462443][T25851] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 694.470112][T25851] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 694.478462][T25854] syzkaller0: entered promiscuous mode [ 694.490861][T25854] syzkaller0: entered allmulticast mode [ 694.541296][T25854] ¾x9ÿ: renamed from bridge_slave_0 [ 694.628751][T25860] ..0ªî{X¹¦: left allmulticast mode [ 694.711657][T25860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.730435][T25860] net_ratelimit: 84 callbacks suppressed [ 694.730448][T25860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.754204][T25868] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5180'. [ 694.764193][T25868] bridge_slave_1: default FDB implementation only supports local addresses [ 694.777930][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 694.797396][T12078] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 694.807524][T12078] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 694.819098][T12078] bond0: now running without any active interface! [ 694.889545][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 695.006455][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 695.116188][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 695.236132][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 695.346302][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 695.456130][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 695.532319][T25917] x_tables: duplicate underflow at hook 1 [ 695.576359][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 695.687568][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 695.755859][T25937] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5197'. [ 695.771860][T25937] validate_nla: 4 callbacks suppressed [ 695.771878][T25937] netlink: 'syz.4.5197': attribute type 4 has an invalid length. [ 695.791840][T25937] netlink: 'syz.4.5197': attribute type 4 has an invalid length. [ 695.805124][ T6556] lo speed is unknown, defaulting to 1000 [ 695.812464][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5197'. [ 695.824477][ T6556] sqz0: Port: 1 Link ACTIVE [ 695.885949][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 695.889255][ T6556] lo speed is unknown, defaulting to 1000 [ 695.894047][ C0] lec:lec_tx_timeout: lec0 [ 695.935168][T25943] xt_hashlimit: max too large, truncated to 1048576 [ 695.984236][T25943] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 696.068905][T25939] netlink: 'syz.2.5198': attribute type 4 has an invalid length. [ 696.110910][T25949] tipc: Enabling of bearer rejected, failed to enable media [ 696.118036][T25939] netlink: 'syz.2.5198': attribute type 4 has an invalid length. [ 696.156902][ T6556] lo speed is unknown, defaulting to 1000 [ 696.166936][ T6556] syz2: Port: 1 Link DOWN [ 696.259806][ T6556] lo speed is unknown, defaulting to 1000 [ 696.274022][ T6556] syz2: Port: 1 Link ACTIVE [ 696.286574][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5205'. [ 696.364209][T25961] netlink: 'syz.0.5204': attribute type 11 has an invalid length. [ 696.487837][T25965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5206'. [ 696.541686][T25965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 696.549668][T25967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5206'. [ 697.010426][T25973] wg1 speed is unknown, defaulting to 1000 [ 697.043112][T25973] lo speed is unknown, defaulting to 1000 [ 697.051580][T25973] wg1 speed is unknown, defaulting to 1000 [ 697.061237][T25973] lo speed is unknown, defaulting to 1000 [ 697.218278][T25983] netlink: 'syz.4.5211': attribute type 10 has an invalid length. [ 697.246602][T25985] netlink: 'syz.2.5210': attribute type 12 has an invalid length. [ 697.273294][T25985] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5210'. [ 697.273466][T25988] x_tables: duplicate underflow at hook 2 [ 697.337167][T25983] syz_tun: entered promiscuous mode [ 697.521923][T25998] netlink: 'syz.4.5215': attribute type 1 has an invalid length. [ 697.609540][T25998] bond9: entered promiscuous mode [ 697.637614][T25998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.699921][T26002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.728231][T26002] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 697.767761][T26002] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 697.790209][T26002] bond9: (slave vcan1): making interface the new active one [ 697.816125][T26002] vcan1: entered promiscuous mode [ 697.822363][T26002] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 698.390495][T26030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 698.793236][T26044] netlink: 'syz.4.5230': attribute type 16 has an invalid length. [ 698.802862][T26044] netlink: 'syz.4.5230': attribute type 17 has an invalid length. [ 698.915601][T26044] syz_tun: left promiscuous mode [ 699.364600][T26054] dvmrp0: entered allmulticast mode [ 699.390092][T26048] __nla_validate_parse: 2 callbacks suppressed [ 699.390110][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5230'. [ 699.742696][T26070] tipc: Enabling of bearer rejected, already enabled [ 699.886364][ T49] net_ratelimit: 29 callbacks suppressed [ 699.886386][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 700.050638][T26085] wg1 speed is unknown, defaulting to 1000 [ 700.057413][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 700.069475][T26085] lo speed is unknown, defaulting to 1000 [ 700.088162][T26085] wg1 speed is unknown, defaulting to 1000 [ 700.095726][T26085] lo speed is unknown, defaulting to 1000 [ 700.176088][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 700.286077][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 700.323854][T26096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5244'. [ 700.427116][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 700.536583][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 700.801576][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 700.959446][T26117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5250'. [ 701.157642][T26126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5252'. [ 701.706200][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 701.856840][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 701.932858][T26141] validate_nla: 5 callbacks suppressed [ 701.932878][T26141] netlink: 'syz.0.5256': attribute type 9 has an invalid length. [ 701.966976][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 701.987649][T26141] netlink: 'syz.0.5256': attribute type 11 has an invalid length. [ 702.008466][T26141] netlink: 'syz.0.5256': attribute type 12 has an invalid length. [ 702.030299][T26141] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5256'. [ 702.071449][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'. [ 702.119531][T26141] netlink: 'syz.0.5256': attribute type 61 has an invalid length. [ 702.142232][T26141] netlink: 'syz.0.5256': attribute type 62 has an invalid length. [ 702.215303][T26152] ¾x9ÿ: renamed from bridge_slave_0 [ 702.258233][T26152] pim6reg: entered allmulticast mode [ 702.264261][T26150] pim6reg: left allmulticast mode [ 702.319442][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'. [ 702.371191][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5259'. [ 702.497513][T26161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5260'. [ 703.757698][T26164] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 703.830026][T26171] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 703.935430][T26177] wg1 speed is unknown, defaulting to 1000 [ 703.964800][T26177] lo speed is unknown, defaulting to 1000 [ 704.040877][T26177] wg1 speed is unknown, defaulting to 1000 [ 704.058488][T26177] lo speed is unknown, defaulting to 1000 [ 704.269276][T26202] geneve0: entered promiscuous mode [ 704.284304][T12087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.297710][T12087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.318144][T12087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.346138][T12087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.956717][T12085] net_ratelimit: 10 callbacks suppressed [ 704.956736][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 705.096614][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 705.316109][T12015] bond2: (slave bridge2): failed to get link speed/duplex [ 705.441597][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5275'. [ 705.450858][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 705.565147][T26248] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5275'. [ 705.846740][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 705.862314][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 705.913998][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 705.942494][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 705.948813][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 706.001572][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 706.011920][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 706.024647][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 706.098264][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 706.129161][T26261] bond4: option mode: unable to set because the bond device has slaves [ 706.226781][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 706.376358][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 706.487966][ T6976] bond2: (slave bridge2): failed to get link speed/duplex [ 706.584475][T26279] netlink: 'syz.1.5283': attribute type 1 has an invalid length. [ 706.597907][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 706.716711][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 706.901241][T26293] syzkaller0: entered promiscuous mode [ 706.907362][T26293] syzkaller0: entered allmulticast mode [ 707.481694][T26314] netlink: 'syz.1.5289': attribute type 1 has an invalid length. [ 707.605528][T26313] wg1 speed is unknown, defaulting to 1000 [ 707.648137][T26317] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 707.682150][T26317] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 707.825614][T26313] lo speed is unknown, defaulting to 1000 [ 707.841949][T26313] wg1 speed is unknown, defaulting to 1000 [ 707.882153][T26313] lo speed is unknown, defaulting to 1000 [ 708.457897][T26345] wg1 speed is unknown, defaulting to 1000 [ 708.502532][T26345] lo speed is unknown, defaulting to 1000 [ 708.525296][T26345] wg1 speed is unknown, defaulting to 1000 [ 708.607620][T26345] lo speed is unknown, defaulting to 1000 [ 708.874145][T26358] veth1_macvtap: left allmulticast mode [ 709.006426][T26358] macsec0: left allmulticast mode [ 709.111634][T12078] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.143968][T12078] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.228236][T12078] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.246532][T12078] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.266662][T12078] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.285361][T12078] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.367148][T12078] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.392866][T12078] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.414833][T26374] netlink: 'syz.1.5304': attribute type 8 has an invalid length. [ 709.666642][T26380] pimreg: tun_chr_ioctl cmd 1074025677 [ 709.686214][T26380] pimreg: linktype set to 6 [ 710.036320][T12085] net_ratelimit: 239 callbacks suppressed [ 710.036344][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 710.166062][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 710.285401][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 710.526379][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 710.571095][T26409] dummy0: left allmulticast mode [ 710.582101][T26409] dummy0: left promiscuous mode [ 710.607019][T26409] bridge0: port 5(dummy0) entered disabled state [ 710.632904][T26409] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.669067][T26409] bridge_slave_1: left allmulticast mode [ 710.674777][T26409] bridge_slave_1: left promiscuous mode [ 710.718999][T26409] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.731118][T26409] bond0: (slave bond_slave_0): Releasing backup interface [ 710.753530][T26409] bond0: (slave bond_slave_1): Releasing backup interface [ 710.788638][T26409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.801830][T26409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.810240][T26409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.827641][T26431] xt_hashlimit: max too large, truncated to 1048576 [ 710.834489][T26431] xt_bpf: check failed: parse error [ 710.862835][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 710.957925][T26442] syzkaller0: entered promiscuous mode [ 710.963465][T26442] syzkaller0: entered allmulticast mode [ 711.026604][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 711.136072][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 711.144599][T26451] netlink: 'syz.3.5329': attribute type 10 has an invalid length. [ 711.154608][T26451] bond0: (slave dummy0): Releasing backup interface [ 711.164550][T26452] __nla_validate_parse: 143 callbacks suppressed [ 711.164562][T26452] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5328'. [ 711.187225][T26451] dummy0: entered promiscuous mode [ 711.193506][T26451] dummy0: entered allmulticast mode [ 711.217587][T26451] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 711.226903][T26451] team0: Failed to send options change via netlink (err -105) [ 711.234478][T26451] team0: Port device dummy0 added [ 711.266912][T26455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5330'. [ 711.276513][T12078] bond2: (slave bridge2): failed to get link speed/duplex [ 711.416237][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 711.574278][T26461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5332'. [ 711.768789][T26474] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5335'. [ 711.921072][T26484] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5337'. [ 712.338448][T26514] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 712.363269][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 712.383212][T26508] wg1 speed is unknown, defaulting to 1000 [ 712.437955][T26508] lo speed is unknown, defaulting to 1000 [ 712.455385][T26508] wg1 speed is unknown, defaulting to 1000 [ 712.485536][T26508] lo speed is unknown, defaulting to 1000 [ 712.786474][T26530] wg1 speed is unknown, defaulting to 1000 [ 712.833733][T26530] lo speed is unknown, defaulting to 1000 [ 712.877703][T26530] wg1 speed is unknown, defaulting to 1000 [ 712.948722][T26530] lo speed is unknown, defaulting to 1000 [ 713.888363][T26578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5362'. [ 714.359978][T26608] netlink: 'syz.2.5368': attribute type 1 has an invalid length. [ 714.377045][T26610] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5369'. [ 714.398829][T26610] netlink: 'syz.3.5369': attribute type 10 has an invalid length. [ 714.428034][T26615] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.5368'. [ 714.446867][T26610] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5369'. [ 714.474446][T26615] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 714.494835][T26608] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.557299][T26617] bond7: entered allmulticast mode [ 714.585644][T26605] wg1 speed is unknown, defaulting to 1000 [ 714.595551][T26605] lo speed is unknown, defaulting to 1000 [ 714.603453][T26605] wg1 speed is unknown, defaulting to 1000 [ 714.619201][T26608] bond7: (slave ip6gretap2): making interface the new active one [ 714.628614][T26608] ip6gretap2: entered allmulticast mode [ 714.635217][T26608] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 714.647178][T26605] lo speed is unknown, defaulting to 1000 [ 715.017588][T26637] wg1 speed is unknown, defaulting to 1000 [ 715.042118][T26637] lo speed is unknown, defaulting to 1000 [ 715.068061][T26637] wg1 speed is unknown, defaulting to 1000 [ 715.111475][T26641] syzkaller1: entered promiscuous mode [ 715.117698][T26637] lo speed is unknown, defaulting to 1000 [ 715.123530][T26641] syzkaller1: entered allmulticast mode [ 715.346181][T12086] net_ratelimit: 30 callbacks suppressed [ 715.346226][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 715.466408][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 715.691324][T26656] block nbd0: Unsupported socket: should be TCP or UNIX. [ 715.729101][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 715.902961][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 716.057998][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 716.167265][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 716.174527][T26685] __nla_validate_parse: 7 callbacks suppressed [ 716.174543][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5390'. [ 716.232360][T26685] ip6gre1: entered promiscuous mode [ 716.242973][T26685] ip6gre1: entered allmulticast mode [ 716.248737][T26687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 716.317730][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 716.333396][T26691] žÿ: renamed from team_slave_1 [ 716.436012][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 716.448924][T26691] wg1 speed is unknown, defaulting to 1000 [ 716.486456][T26691] lo speed is unknown, defaulting to 1000 [ 716.493690][T26691] wg1 speed is unknown, defaulting to 1000 [ 716.507497][T26691] lo speed is unknown, defaulting to 1000 [ 716.566668][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 716.597313][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5394'. [ 716.707720][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 716.905641][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 717.097750][T26733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5401'. [ 717.409158][T26751] tipc: Enabled bearer , priority 0 [ 717.567467][T26751] syzkaller0: entered promiscuous mode [ 717.596788][T26751] syzkaller0: entered allmulticast mode [ 717.610547][T26751] tipc: Resetting bearer [ 717.696489][T26743] tipc: Resetting bearer [ 717.798742][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5406'. [ 718.201459][T26764] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 718.421126][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5412'. [ 718.613232][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5413'. [ 719.439777][T26743] tipc: Disabling bearer [ 719.646587][T26793] Cannot find del_set index 4 as target [ 719.698252][T26791] netlink: 'syz.2.5415': attribute type 39 has an invalid length. [ 719.730631][T26794] netlink: 'syz.2.5415': attribute type 39 has an invalid length. [ 719.868487][T26803] bond8: option tlb_dynamic_lb: invalid value (5) [ 719.878294][T26811] netlink: 'syz.0.5419': attribute type 2 has an invalid length. [ 719.910271][T26803] bond8 (unregistering): Released all slaves [ 719.962664][T26811] : entered promiscuous mode [ 720.051576][T26816] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5420'. [ 720.287607][T26824] wg1 speed is unknown, defaulting to 1000 [ 720.295680][T26824] lo speed is unknown, defaulting to 1000 [ 720.303982][T26824] wg1 speed is unknown, defaulting to 1000 [ 720.312152][T26824] lo speed is unknown, defaulting to 1000 [ 720.436453][T12081] net_ratelimit: 10 callbacks suppressed [ 720.436471][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 720.566311][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 720.663453][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5427'. [ 720.684011][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 720.796404][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 720.916271][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 721.068161][T26852] tipc: Enabling of bearer rejected, already enabled [ 721.307438][T26849] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 721.326495][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 721.454191][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 721.484603][T26867] netlink: 'syz.4.5433': attribute type 10 has an invalid length. [ 721.493599][T26867] __nla_validate_parse: 5 callbacks suppressed [ 721.493615][T26867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5433'. [ 721.576531][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 721.596609][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5433'. [ 721.736711][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 721.862352][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 722.068236][T26891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5438'. [ 722.097896][T26894] netlink: 'syz.2.5440': attribute type 2 has an invalid length. [ 722.112786][T26897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5439'. [ 722.125829][T26894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5440'. [ 722.137520][T26897] team0: left allmulticast mode [ 722.142688][T26897] dummy0: left allmulticast mode [ 722.162994][T26897] bridge0: port 2(team0) entered disabled state [ 722.191053][T26897] dummy0: left promiscuous mode [ 722.218034][T26897] team0: Port device dummy0 removed [ 722.466709][T26914] netlink: 'syz.3.5444': attribute type 1 has an invalid length. [ 722.474651][T26914] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5444'. [ 722.498378][T26910] netlink: 'syz.0.5443': attribute type 10 has an invalid length. [ 722.568842][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5445'. [ 722.676750][T26922] netlink: 'syz.4.5447': attribute type 1 has an invalid length. [ 722.790128][T26929] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5450'. [ 722.809556][T26925] netlink: 'syz.0.5448': attribute type 1 has an invalid length. [ 722.813350][T26928] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5450'. [ 722.858076][T26937] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5451'. [ 722.915353][T26932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 723.015134][T26925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 723.071028][T26951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.089247][T26935] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 723.106556][T26935] bond10: (slave macvlan0): Enslaving as a backup interface with a down link [ 723.932663][T27012] syzkaller0: entered promiscuous mode [ 723.955322][T27012] syzkaller0: entered allmulticast mode [ 724.024855][T27012] tipc: Enabled bearer , priority 0 [ 724.048158][T27008] tipc: Resetting bearer [ 724.096287][T27008] tipc: Disabling bearer [ 724.207889][T27035] wg1 speed is unknown, defaulting to 1000 [ 724.215513][T27035] lo speed is unknown, defaulting to 1000 [ 724.224199][T27035] wg1 speed is unknown, defaulting to 1000 [ 724.232871][T27035] lo speed is unknown, defaulting to 1000 [ 725.298756][T27065] wg1 speed is unknown, defaulting to 1000 [ 725.334900][T27065] lo speed is unknown, defaulting to 1000 [ 725.344490][T27065] wg1 speed is unknown, defaulting to 1000 [ 725.354322][T27065] lo speed is unknown, defaulting to 1000 [ 725.447113][T12073] net_ratelimit: 29 callbacks suppressed [ 725.447135][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 725.576604][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 725.665423][T27075] validate_nla: 3 callbacks suppressed [ 725.665449][T27075] netlink: 'syz.4.5490': attribute type 3 has an invalid length. [ 725.728742][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 725.762825][ T8926] lec:lec_start_xmit: lec0:No lecd attached [ 725.772593][T27075] wg1 speed is unknown, defaulting to 1000 [ 725.780313][T27075] lo speed is unknown, defaulting to 1000 [ 725.791796][T27075] wg1 speed is unknown, defaulting to 1000 [ 725.800234][T27075] lo speed is unknown, defaulting to 1000 [ 725.961403][T27080] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 725.984765][T27080] bond9 (unregistering): Released all slaves [ 726.027733][T27083] netlink: 'syz.3.5492': attribute type 9 has an invalid length. [ 726.036618][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 726.147401][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 726.185356][T27091] syzkaller0: entered promiscuous mode [ 726.216463][T27091] syzkaller0: entered allmulticast mode [ 726.243106][T27091] tipc: Enabled bearer , priority 0 [ 726.259461][T27090] tipc: Resetting bearer [ 726.345675][T27090] tipc: Disabling bearer [ 726.820887][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 726.916232][T27112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 726.996638][T27112] batman_adv: batadv0: Adding interface: dummy0 [ 727.003270][T27119] openvswitch: netlink: Multiple metadata blocks provided [ 727.006036][T27112] batman_adv: batadv0: Interface activated: dummy0 [ 727.070585][T27112] batadv0: mtu less than device minimum [ 727.087990][T27112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 727.286067][T27128] __nla_validate_parse: 6 callbacks suppressed [ 727.286085][T27128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5505'. [ 727.479971][T27138] tipc: Enabling of bearer rejected, already enabled [ 727.745022][T27164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'. [ 727.773304][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 727.784464][T27165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'. [ 727.809523][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 727.845056][T27162] vlan0: entered promiscuous mode [ 727.854462][T27162] bridge0: entered promiscuous mode [ 728.131630][T27184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5520'. [ 728.140996][T27184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5520'. [ 728.157098][T27184] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5520'. [ 728.377756][T27197] syzkaller0: entered promiscuous mode [ 728.383339][T27197] syzkaller0: entered allmulticast mode [ 728.387314][T27199] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 728.400288][T27197] tipc: Enabled bearer , priority 0 [ 728.418224][T27196] tipc: Resetting bearer [ 728.438073][T27196] tipc: Disabling bearer [ 728.740239][T27212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5525'. [ 728.766214][T27217] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 728.825225][T27213] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 728.837049][T27213] syzkaller1: linktype set to 270 [ 728.991315][T27221] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5530'. [ 729.211819][T27234] syzkaller0: entered promiscuous mode [ 729.217685][T27234] syzkaller0: entered allmulticast mode [ 729.490655][T27240] vlan0: entered allmulticast mode [ 729.502249][T27240] bridge_slave_0: entered allmulticast mode [ 730.371821][T27274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.542976][T27281] pim6reg: entered allmulticast mode [ 730.566202][T12073] net_ratelimit: 48 callbacks suppressed [ 730.566220][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 730.638808][T27281] pim6reg: left allmulticast mode [ 730.726682][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 730.836486][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 730.865982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 730.874042][ C0] lec:lec_tx_timeout: lec0 [ 730.944801][T27305] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.966943][T27305] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.986639][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 731.096868][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 731.216860][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 731.326784][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 731.437020][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 731.546698][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 731.657020][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 732.168446][T27341] bond9: ARP target 9.0.0.0 is already present [ 732.175111][T27341] bond9: option arp_ip_target: invalid value (9) [ 732.183890][T27341] bond9 (unregistering): Released all slaves [ 732.451100][T27350] __nla_validate_parse: 3 callbacks suppressed [ 732.451119][T27350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5565'. [ 732.506949][T12086] batman_adv: batadv1: IGMP Querier appeared [ 732.513048][T12086] batman_adv: batadv1: MLD Querier appeared [ 732.643830][T27357] netlink: 'syz.0.5566': attribute type 1 has an invalid length. [ 732.680692][T27357] bond9: entered promiscuous mode [ 732.686407][T27357] 8021q: adding VLAN 0 to HW filter on device bond9 [ 732.733080][T27357] bond9: (slave bridge9): making interface the new active one [ 732.747993][T27357] bridge9: entered promiscuous mode [ 732.754370][T27357] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 732.903428][ T6956] batman_adv: batadv3: IGMP Querier appeared [ 732.909544][ T6956] batman_adv: batadv3: MLD Querier appeared [ 732.915643][ T6956] batman_adv: batadv2: IGMP Querier appeared [ 732.922100][ T6956] batman_adv: batadv2: MLD Querier appeared [ 733.398431][T27395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5579'. [ 733.552264][T27399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5581'. [ 733.764030][T17979] hid-generic 0005:0006:5508.0001: item fetching failed at offset 3/4 [ 733.781437][T17979] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 734.083706][T27427] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 734.139830][T27430] Cannot find del_set index 4 as target [ 734.286904][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5590'. [ 734.351412][T27437] netlink: 'syz.4.5590': attribute type 1 has an invalid length. [ 734.377026][T27437] 8021q: adding VLAN 0 to HW filter on device bond11 [ 734.656046][T27440] wg1 speed is unknown, defaulting to 1000 [ 734.663218][T27440] lo speed is unknown, defaulting to 1000 [ 734.670523][T27440] wg1 speed is unknown, defaulting to 1000 [ 734.677652][T27440] lo speed is unknown, defaulting to 1000 [ 734.811048][T27442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5591'. [ 734.857377][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5593'. [ 734.959090][T27451] netlink: 'syz.3.5593': attribute type 39 has an invalid length. [ 735.116027][T27454] syzkaller0: entered promiscuous mode [ 735.121548][T27454] syzkaller0: entered allmulticast mode [ 735.636408][ T6956] net_ratelimit: 28 callbacks suppressed [ 735.636433][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 735.756498][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 735.876612][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 735.987152][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 736.096775][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 736.206652][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 736.316709][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 736.426384][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 736.536152][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 736.646525][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 736.714740][T27408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.724552][T27415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5584'. [ 736.991674][T27467] block nbd0: Unsupported socket: should be TCP or UNIX. [ 737.238900][T27486] tipc: Enabled bearer , priority 0 [ 737.262237][T27486] syzkaller0: entered promiscuous mode [ 737.276749][T27486] syzkaller0: entered allmulticast mode [ 737.311086][T27486] tipc: Resetting bearer [ 737.334248][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5600'. [ 737.419901][T27483] tipc: Resetting bearer [ 737.449527][T27483] tipc: Disabling bearer [ 737.558159][T27499] netlink: 'syz.0.5605': attribute type 1 has an invalid length. [ 737.568238][T27499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5605'. [ 737.638647][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5607'. [ 737.708495][T27503] batadv_slave_0: entered promiscuous mode [ 737.722710][T27501] batadv_slave_0: left promiscuous mode [ 737.947048][T17966] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 737.994259][T27511] delete_channel: no stack [ 738.246606][ T6962] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 738.706232][T17966] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 739.266511][T12086] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 739.274700][T12086] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 740.226306][ T6563] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 740.316505][T27492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.329739][T27515] netlink: 'syz.3.5609': attribute type 1 has an invalid length. [ 740.348760][T27515] netlink: 'syz.3.5609': attribute type 1 has an invalid length. [ 740.490305][T27530] syzkaller1: entered promiscuous mode [ 740.495826][T27530] syzkaller1: entered allmulticast mode [ 740.567982][T27533] wg1 speed is unknown, defaulting to 1000 [ 740.575428][T27533] lo speed is unknown, defaulting to 1000 [ 740.610656][T27533] wg1 speed is unknown, defaulting to 1000 [ 740.621034][T27540] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5618'. [ 740.630308][T27540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5618'. [ 740.660118][T27540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5618'. [ 740.671875][T27533] lo speed is unknown, defaulting to 1000 [ 740.755635][T27546] netlink: 'syz.1.5620': attribute type 1 has an invalid length. [ 740.764288][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5619'. [ 740.786848][T12073] net_ratelimit: 36 callbacks suppressed [ 740.786867][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 740.809112][T27554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 740.819952][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5619'. [ 740.866401][T27557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5620'. [ 740.926993][T27562] netlink: 'syz.2.5622': attribute type 2 has an invalid length. [ 740.989297][T27557] bond6 (unregistering): Released all slaves [ 741.010186][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5622'. [ 741.058191][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 741.076477][T27554] netlink: 'syz.1.5620': attribute type 6 has an invalid length. [ 741.167702][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 741.292133][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 741.468023][T27583] netlink: 'syz.3.5627': attribute type 1 has an invalid length. [ 741.516598][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 741.646620][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 741.785995][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 741.916939][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 742.058047][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 742.166742][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 742.636932][T27639] syzkaller0: entered promiscuous mode [ 742.660279][T27639] syzkaller0: entered allmulticast mode [ 743.586332][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 744.381623][T27678] pim6reg: entered allmulticast mode [ 744.606484][T27694] netlink: 'syz.3.5659': attribute type 3 has an invalid length. [ 744.710167][T27695] __nla_validate_parse: 3 callbacks suppressed [ 744.710186][T27695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5658'. [ 744.745600][T27699] wg1 speed is unknown, defaulting to 1000 [ 744.794679][T27699] lo speed is unknown, defaulting to 1000 [ 744.805134][T27699] wg1 speed is unknown, defaulting to 1000 [ 744.812269][T27701] wg1 speed is unknown, defaulting to 1000 [ 744.821102][T27699] lo speed is unknown, defaulting to 1000 [ 744.828901][T27701] lo speed is unknown, defaulting to 1000 [ 744.843636][T27701] wg1 speed is unknown, defaulting to 1000 [ 745.203166][T27701] lo speed is unknown, defaulting to 1000 [ 745.476192][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5668'. [ 745.538002][T27738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.545318][T27738] IPv6: NLM_F_CREATE should be set when creating new route [ 745.610049][T27735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.617411][T27735] IPv6: NLM_F_CREATE should be set when creating new route [ 745.892315][T27745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5670'. [ 746.086616][T12086] net_ratelimit: 15 callbacks suppressed [ 746.086636][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 746.249758][T27755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5672'. [ 746.287725][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 746.562768][T27762] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 746.570679][T27762] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 746.580561][T27758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5673'. [ 746.636652][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 746.754819][T27770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5676'. [ 746.766215][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 746.779135][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5677'. [ 746.864355][T27776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5678'. [ 746.876054][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 746.904165][T27772] macvlan1: entered promiscuous mode [ 746.925708][T27772] macvlan1: entered allmulticast mode [ 746.937916][T27772] bond12: (slave macvlan1): Opening slave failed [ 746.986068][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 747.099123][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 747.184549][T27793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5684'. [ 747.195073][T27793] openvswitch: netlink: Flow actions attr not present in new flow. [ 747.216889][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 747.242175][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5685'. [ 747.336452][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 747.548182][T27825] xt_connbytes: Forcing CT accounting to be enabled [ 747.645307][T27831] netlink: 'syz.1.5694': attribute type 1 has an invalid length. [ 748.706589][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.716303][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.726506][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.737160][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.745228][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.752920][ T6962] batman_adv: batadv3: MLD Querier disappeared - multicast optimizations disabled [ 748.822645][ T6962] batman_adv: batadv2: MLD Querier disappeared - multicast optimizations disabled [ 748.916381][ T6962] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 748.953769][T27904] wg1 speed is unknown, defaulting to 1000 [ 748.991859][T27904] lo speed is unknown, defaulting to 1000 [ 749.021099][T27904] wg1 speed is unknown, defaulting to 1000 [ 749.065737][T27904] lo speed is unknown, defaulting to 1000 [ 749.383059][T27937] Bluetooth: MGMT ver 1.23 [ 749.515744][T27943] syzkaller0: entered promiscuous mode [ 749.522175][T27943] syzkaller0: entered allmulticast mode [ 749.704462][T27904] chnl_net:caif_netlink_parms(): no params data found [ 749.780695][T12073] batadv1: left allmulticast mode [ 749.786041][T12073] batadv1: left promiscuous mode [ 749.791311][T12073] bridge0: port 1(batadv1) entered disabled state [ 749.858511][T12073] tipc: Disabling bearer [ 750.284138][T27959] netlink: 'syz.0.5725': attribute type 11 has an invalid length. [ 750.300949][T27959] __nla_validate_parse: 4 callbacks suppressed [ 750.300963][T27959] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5725'. [ 750.786100][ T5828] Bluetooth: hci0: command tx timeout [ 751.065416][T12073] bond0 (unregistering): Released all slaves [ 751.075823][T12073] bond1 (unregistering): Released all slaves [ 751.090021][T12073] bond2 (unregistering): Released all slaves [ 751.109340][T12073] bond3 (unregistering): Released all slaves [ 751.122477][T12073] bond4 (unregistering): Released all slaves [ 751.135662][T12073] bond5 (unregistering): Released all slaves [ 751.156082][T12073] bond6 (unregistering): Released all slaves [ 751.172970][T12073] bond7 (unregistering): Released all slaves [ 751.187466][T12073] bond8 (unregistering): Released all slaves [ 751.204942][T12073] bond9 (unregistering): Released all slaves [ 751.218992][T12073] bond10 (unregistering): Released all slaves [ 751.233729][T12073] bond11 (unregistering): (slave veth13): Releasing active interface [ 751.244846][T12073] bond11 (unregistering): Released all slaves [ 751.262235][T12073] bond12 (unregistering): Released all slaves [ 751.286941][T12073] bond13 (unregistering): Released all slaves [ 751.313037][T27950] ..0ªî{X¹¦: entered promiscuous mode [ 751.324527][T27952] 8021q: VLANs not supported on nlmon0 [ 751.416439][T12071] net_ratelimit: 19 callbacks suppressed [ 751.416460][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 751.495002][T12073] 9: left promiscuous mode [ 751.536116][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5728'. [ 751.556069][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 751.599791][T27904] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.609776][T27904] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.626156][T27904] bridge_slave_0: entered allmulticast mode [ 751.641359][T27904] bridge_slave_0: entered promiscuous mode [ 751.654826][T27969] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5729'. [ 751.707123][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 751.742403][T27965] wg1 speed is unknown, defaulting to 1000 [ 751.748564][T12073] : left promiscuous mode [ 751.798929][T27980] netlink: 'syz.1.5731': attribute type 13 has an invalid length. [ 751.828654][T27967] batadv_slave_0: entered promiscuous mode [ 751.834988][T27904] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.866240][T27904] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.873522][T27904] bridge_slave_1: entered allmulticast mode [ 751.900083][T27904] bridge_slave_1: entered promiscuous mode [ 751.962941][T27965] lo speed is unknown, defaulting to 1000 [ 751.983069][T27904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.006052][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 752.024692][T12073] tipc: Left network mode [ 752.033709][T27965] wg1 speed is unknown, defaulting to 1000 [ 752.049425][T27904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.061592][ T6563] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.070340][T27981] wg1 speed is unknown, defaulting to 1000 [ 752.078588][T27965] lo speed is unknown, defaulting to 1000 [ 752.138958][T27981] lo speed is unknown, defaulting to 1000 [ 752.228742][T27981] wg1 speed is unknown, defaulting to 1000 [ 752.234690][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5735'. [ 752.263670][T27904] team0: Port device team_slave_0 added [ 752.310254][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 752.315743][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 752.328155][ T1297] aoe: packet could not be sent on bridge1. consider increasing tx_queue_len [ 752.349147][T27904] team0: Port device team_slave_1 added [ 752.366345][T27964] batadv_slave_0: left promiscuous mode [ 752.446954][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 752.458590][ T6563] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.480940][T27904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.488368][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.536423][T27904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.549531][T28010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5736'. [ 752.595977][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 752.616576][T27904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.623586][T27904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.661815][T27904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.715111][T28016] netlink: 'syz.0.5739': attribute type 58 has an invalid length. [ 752.744180][T28016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5739'. [ 752.806593][T27981] lo speed is unknown, defaulting to 1000 [ 752.866143][ T5828] Bluetooth: hci0: command tx timeout [ 753.031212][T27904] hsr_slave_0: entered promiscuous mode [ 753.040360][T27904] hsr_slave_1: entered promiscuous mode [ 753.054052][T27904] debugfs: 'hsr0' already exists in 'hsr' [ 753.060117][T27904] Cannot create hsr debugfs directory [ 753.172659][T28024] wg1 speed is unknown, defaulting to 1000 [ 753.194845][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 753.218219][T28024] lo speed is unknown, defaulting to 1000 [ 753.240470][T28024] wg1 speed is unknown, defaulting to 1000 [ 753.314202][T28024] lo speed is unknown, defaulting to 1000 [ 753.454573][T28035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5743'. [ 753.657534][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 753.763646][T28042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5744'. [ 754.473975][T28049] syzkaller0: entered promiscuous mode [ 754.480133][T28049] syzkaller0: entered allmulticast mode [ 754.508300][T12073] hsr_slave_0: left promiscuous mode [ 754.514926][T12073] batman_adv: batadv0: Removing interface: macvlan2 [ 754.946110][ T5828] Bluetooth: hci0: command tx timeout [ 756.146367][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 756.242727][T27904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.335844][T27904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 756.425262][T12073] IPVS: stop unused estimator thread 0... [ 756.431152][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 756.456594][T27904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 756.489891][T27904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 756.682330][T28086] veth0_to_bridge: entered promiscuous mode [ 756.719668][ T30] audit: type=1800 audit(1771391781.388:15): pid=28086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5751" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=3002 res=0 errno=0 [ 756.785652][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 756.837370][T28092] wg1 speed is unknown, defaulting to 1000 [ 756.883810][T28092] lo speed is unknown, defaulting to 1000 [ 756.904573][T27904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.956081][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 756.978085][T28092] lo speed is unknown, defaulting to 1000 [ 757.004860][T27904] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.026744][ T5828] Bluetooth: hci0: command tx timeout [ 757.098605][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.105811][T12071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.156012][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 757.176015][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.183194][ T7947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.218471][T28085] veth0_to_bridge: left promiscuous mode [ 757.386539][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 757.522276][T28122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5759'. [ 757.531410][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 757.656031][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 757.721762][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5762'. [ 757.735140][T28132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5762'. [ 757.813566][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 757.825977][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 757.834001][ C0] lec:lec_tx_timeout: lec0 [ 757.895757][T28143] netlink: 'syz.1.5763': attribute type 12 has an invalid length. [ 757.932777][T27904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.965988][ T7947] bond2: (slave bridge2): failed to get link speed/duplex [ 758.009213][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 758.032884][T28150] pimreg: entered allmulticast mode [ 758.068663][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 758.086043][ T7947] bond2: (slave bridge2): failed to get link speed/duplex [ 758.097941][T28096] netlink: 'syz.0.5753': attribute type 1 has an invalid length. [ 758.109024][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 758.126193][T28096] netlink: 'syz.0.5753': attribute type 2 has an invalid length. [ 758.149405][T27904] veth0_vlan: entered promiscuous mode [ 758.164448][T28096] netlink: 'syz.0.5753': attribute type 1 has an invalid length. [ 758.186888][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 758.199537][T27904] veth1_vlan: entered promiscuous mode [ 758.236710][T28150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5753'. [ 758.251202][T28096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5753'. [ 758.257506][T28150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5753'. [ 758.337054][T27904] veth0_macvtap: entered promiscuous mode [ 758.395893][T27904] veth1_macvtap: entered promiscuous mode [ 758.630583][T27904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.663222][T27904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.719352][ T6950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.756111][ T6950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.785488][ T6950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.819271][ T6950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.138776][T28179] wg1 speed is unknown, defaulting to 1000 [ 759.165187][T12071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.183452][T12071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.248126][T28179] lo speed is unknown, defaulting to 1000 [ 759.290688][T28179] lo speed is unknown, defaulting to 1000 [ 759.307170][ T6956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.326697][ T6956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.496604][T28203] netlink: 'syz.1.5773': attribute type 10 has an invalid length. [ 759.924236][T28215] syzkaller0: entered promiscuous mode [ 759.949975][T28215] syzkaller0: entered allmulticast mode [ 759.955606][T28222] sctp: [Deprecated]: syz.0.5778 (pid 28222) Use of int in max_burst socket option. [ 759.955606][T28222] Use struct sctp_assoc_value instead [ 760.030701][T28222] : renamed from veth0_to_bond [ 761.969898][T28252] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 762.187914][ T6956] net_ratelimit: 12 callbacks suppressed [ 762.187935][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 762.356048][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 762.448105][T28287] tipc: Enabled bearer , priority 0 [ 762.459382][T28287] syzkaller0: entered promiscuous mode [ 762.464899][T28287] syzkaller0: entered allmulticast mode [ 762.489139][T28287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 762.520440][T28287] tipc: Resetting bearer [ 762.569295][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 762.633687][T28287] tipc: Resetting bearer [ 762.704869][T28287] tipc: Disabling bearer [ 762.747235][T12086] bond2: (slave bridge2): failed to get link speed/duplex [ 762.806892][T28300] wg1 speed is unknown, defaulting to 1000 [ 762.844538][T28300] lo speed is unknown, defaulting to 1000 [ 762.856325][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 762.893367][T28300] lo speed is unknown, defaulting to 1000 [ 762.929911][T28312] wg1 speed is unknown, defaulting to 1000 [ 762.951480][T28312] lo speed is unknown, defaulting to 1000 [ 762.986060][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 763.135988][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 763.222123][T28312] lo speed is unknown, defaulting to 1000 [ 763.328780][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 763.411561][T28318] 8021q: VLANs not supported on caif0 [ 763.446667][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 763.566124][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 763.910143][T28335] __nla_validate_parse: 34 callbacks suppressed [ 763.910165][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5808'. [ 763.944910][T28335] block nbd0: not configured, cannot reconfigure [ 764.053911][T28335] nbd: socks must be embedded in a SOCK_ITEM attr [ 764.057443][T28329] wg1 speed is unknown, defaulting to 1000 [ 764.070160][T28329] lo speed is unknown, defaulting to 1000 [ 764.095857][T28329] lo speed is unknown, defaulting to 1000 [ 764.228364][T28339] netlink: 'syz.3.5809': attribute type 83 has an invalid length. [ 765.137500][T28349] netlink: 'syz.0.5812': attribute type 10 has an invalid length. [ 765.145447][T28349] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5812'. [ 765.468299][T28369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5818'. [ 765.503419][T28372] nbd: must specify a size in bytes for the device [ 765.600268][T28378] bond1: (slave bond_slave_1): Device is not our slave [ 765.609237][T28378] bond1: option active_slave: invalid value (bond_slave_1) [ 765.633304][T28378] bond1 (unregistering): Released all slaves [ 765.738097][T28389] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5824'. [ 765.843174][T28397] pim6reg1: entered allmulticast mode [ 765.866886][T28399] x_tables: duplicate underflow at hook 2 [ 766.062835][T28412] veth9: entered promiscuous mode [ 766.540010][ T30] audit: type=1804 audit(1771391791.208:16): pid=28447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5839" name="/newroot/595/memory.events" dev="tmpfs" ino=3068 res=1 errno=0 [ 766.597081][T28447] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5839'. [ 766.620840][ T30] audit: type=1800 audit(1771391791.208:17): pid=28447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5839" name="memory.events" dev="tmpfs" ino=3068 res=0 errno=0 [ 766.645822][T28450] syzkaller0: entered promiscuous mode [ 766.686047][T28450] syzkaller0: entered allmulticast mode [ 766.741253][T28464] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 766.755000][T28462] tipc: Enabled bearer , priority 0 [ 766.766293][T28462] syzkaller0: entered promiscuous mode [ 766.771878][T28462] syzkaller0: entered allmulticast mode [ 766.923043][T28472] tipc: Resetting bearer [ 766.986641][T28459] tipc: Resetting bearer [ 767.029611][T28459] tipc: Disabling bearer [ 767.196049][T28488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5849'. [ 767.218067][ T7947] net_ratelimit: 25 callbacks suppressed [ 767.218083][ T7947] bond2: (slave bridge2): failed to get link speed/duplex [ 767.263214][T28488] netlink: 'syz.3.5849': attribute type 1 has an invalid length. [ 767.275396][T28488] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5849'. [ 767.345625][T28490] wg1 speed is unknown, defaulting to 1000 [ 767.354125][T28490] lo speed is unknown, defaulting to 1000 [ 767.356470][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 767.380611][T28490] lo speed is unknown, defaulting to 1000 [ 767.455293][T28507] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5856'. [ 767.486433][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 767.505994][ T5828] Bluetooth: hci0: command tx timeout [ 767.597117][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 767.726074][ T7947] bond2: (slave bridge2): failed to get link speed/duplex [ 767.846402][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 768.121396][ T7947] bond2: (slave bridge2): failed to get link speed/duplex [ 768.316057][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 768.334123][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 768.348093][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 768.356508][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 768.365044][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 768.373173][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 768.443159][T28555] wg1 speed is unknown, defaulting to 1000 [ 768.450951][T28555] lo speed is unknown, defaulting to 1000 [ 768.460573][T28555] lo speed is unknown, defaulting to 1000 [ 768.486042][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 768.531477][T28558] wg1 speed is unknown, defaulting to 1000 [ 768.573208][T28565] openvswitch: netlink: Message has 4 unknown bytes. [ 768.607636][T28566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5868'. [ 768.769321][T28568] bridge18: entered allmulticast mode [ 768.785478][T28569] bridge19: entered allmulticast mode [ 768.831334][T28558] lo speed is unknown, defaulting to 1000 [ 768.843717][T28558] lo speed is unknown, defaulting to 1000 [ 769.466952][T28585] wg1 speed is unknown, defaulting to 1000 [ 769.518204][T28585] lo speed is unknown, defaulting to 1000 [ 769.675731][T28585] lo speed is unknown, defaulting to 1000 [ 769.691930][T28593] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 770.072967][T28558] chnl_net:caif_netlink_parms(): no params data found [ 770.149978][T28614] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 770.226870][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 770.344242][T28611] wg1 speed is unknown, defaulting to 1000 [ 770.375275][T28558] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.382698][T28558] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.390774][T28558] bridge_slave_0: entered allmulticast mode [ 770.403185][T28613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5882'. [ 770.409056][T28558] bridge_slave_0: entered promiscuous mode [ 770.436859][T28558] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.444133][T28558] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.451821][T28558] bridge_slave_1: entered allmulticast mode [ 770.459677][T28558] bridge_slave_1: entered promiscuous mode [ 770.471681][ T51] Bluetooth: hci5: command tx timeout [ 770.481619][T28611] lo speed is unknown, defaulting to 1000 [ 770.496136][T28615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5882'. [ 770.515400][T28558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.575432][T28611] lo speed is unknown, defaulting to 1000 [ 770.590182][T28558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.639363][T28628] kthread_run failed with err -4 [ 770.670023][T28633] sctp: [Deprecated]: syz.1.5888 (pid 28633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.670023][T28633] Use struct sctp_sack_info instead [ 770.775321][T28558] team0: Port device team_slave_0 added [ 770.796771][T28558] team0: Port device team_slave_1 added [ 770.853674][T28637] IPVS: Scheduler module ip_vs_sip not found [ 770.880831][T28558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.888850][T28558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.933883][T28558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.958188][T28558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.965266][T28558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.006007][T28558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.086261][T28558] hsr_slave_0: entered promiscuous mode [ 771.093120][T28558] hsr_slave_1: entered promiscuous mode [ 771.100027][T28558] debugfs: 'hsr0' already exists in 'hsr' [ 771.105834][T28558] Cannot create hsr debugfs directory [ 771.432084][T28646] vlan2: entered promiscuous mode [ 771.437379][T28646] bridge0: entered promiscuous mode [ 771.691961][T28558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.857195][T28558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.168284][T17971] lo speed is unknown, defaulting to 1000 [ 772.168299][T28657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5896'. [ 772.174053][T17971] syz2: Port: 1 Link DOWN [ 772.270277][T28666] netlink: 'syz.3.5897': attribute type 2 has an invalid length. [ 772.292675][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5897'. [ 772.323404][T28558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.395311][T28674] tipc: New replicast peer: 172.20.20.27 [ 772.412456][T28674] tipc: Enabled bearer , priority 10 [ 772.462134][T28558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.476295][T28664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5897'. [ 772.537134][ T6956] net_ratelimit: 13 callbacks suppressed [ 772.537152][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 772.557806][ T5828] Bluetooth: hci5: command tx timeout [ 772.621899][T28681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5900'. [ 772.658417][T28681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5900'. [ 772.687017][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 772.698571][T28685] ip6_vti0: Caught tx_queue_len zero misconfig [ 772.710029][T28681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5900'. [ 772.751036][T28681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5900'. [ 772.764785][T28681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5900'. [ 772.859418][T28558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 772.894752][T28558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.934252][T28558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.944549][T28558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.957678][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 773.000780][T28690] wg1 speed is unknown, defaulting to 1000 [ 773.037627][T28690] lo speed is unknown, defaulting to 1000 [ 773.047734][T28690] lo speed is unknown, defaulting to 1000 [ 773.125966][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 773.139642][T28558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.174349][T28558] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.186955][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.194125][ T6956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.218340][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.225521][ T6956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.377716][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 773.423217][T17981] tipc: Node number set to 648357931 [ 773.496186][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 773.636109][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 773.667991][T28722] ip6gretap2: entered promiscuous mode [ 773.702853][T28723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.766091][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 773.879168][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 773.910920][T28558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.007829][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 774.108304][T28736] bond0: (slave macvlan0): Opening slave failed [ 774.143592][T28735] wg1 speed is unknown, defaulting to 1000 [ 774.152864][T28735] lo speed is unknown, defaulting to 1000 [ 774.163071][T28735] lo speed is unknown, defaulting to 1000 [ 774.175263][T28727] wg1 speed is unknown, defaulting to 1000 [ 774.194057][T28727] lo speed is unknown, defaulting to 1000 [ 774.395740][T28558] veth0_vlan: entered promiscuous mode [ 774.414093][T28558] veth1_vlan: entered promiscuous mode [ 774.444072][T28727] lo speed is unknown, defaulting to 1000 [ 774.524683][T28558] veth0_macvtap: entered promiscuous mode [ 774.570367][T28558] veth1_macvtap: entered promiscuous mode [ 774.600883][T28558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.624281][T28558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.636193][ T5828] Bluetooth: hci5: command tx timeout [ 774.730836][ T6956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.752367][ T6956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.805055][ T6956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.832508][ T6956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.948488][ T6956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.962129][ T6956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.032906][T12086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.043519][T12086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.580160][T28776] xt_connbytes: Forcing CT accounting to be enabled [ 775.590840][T28776] Cannot find set identified by id 65470 to match [ 775.851224][T28795] __nla_validate_parse: 66 callbacks suppressed [ 775.851256][T28795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5924'. [ 775.875722][T28795] bridge_slave_1: left allmulticast mode [ 775.892165][T28795] bridge_slave_1: left promiscuous mode [ 775.902477][T28795] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.937785][T28795] bridge_slave_0: left allmulticast mode [ 775.943489][T28795] bridge_slave_0: left promiscuous mode [ 775.993735][T28795] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.118469][T28801] netlink: 'syz.4.5923': attribute type 4 has an invalid length. [ 776.231349][T28819] netlink: 'syz.1.5929': attribute type 1 has an invalid length. [ 776.258137][T28819] netlink: 'syz.1.5929': attribute type 2 has an invalid length. [ 776.308553][T28819] netlink: 'syz.1.5929': attribute type 1 has an invalid length. [ 776.328144][T28819] netlink: 'syz.1.5929': attribute type 3 has an invalid length. [ 776.354143][T28819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5929'. [ 776.410880][T28832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5933'. [ 776.446082][T28835] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5932'. [ 776.542180][T28837] wg1 speed is unknown, defaulting to 1000 [ 776.569510][T28837] lo speed is unknown, defaulting to 1000 [ 776.591260][T28837] lo speed is unknown, defaulting to 1000 [ 776.606252][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5935'. [ 776.713976][ T51] Bluetooth: hci5: command tx timeout [ 777.242147][T28870] veth0: entered promiscuous mode [ 777.250013][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5940'. [ 777.601440][T12081] net_ratelimit: 22 callbacks suppressed [ 777.601461][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 777.751584][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 777.770981][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5949'. [ 777.876398][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 777.984283][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5950'. [ 777.997412][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 778.044359][T28919] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5950'. [ 778.064605][T28920] netlink: 'syz.1.5953': attribute type 10 has an invalid length. [ 778.119294][T28920] veth1_macvtap: left promiscuous mode [ 778.162643][T28920] team0: Port device veth1_macvtap added [ 778.217292][T28914] wg1 speed is unknown, defaulting to 1000 [ 778.294431][T28914] lo speed is unknown, defaulting to 1000 [ 778.307528][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 778.327361][T28914] lo speed is unknown, defaulting to 1000 [ 778.412484][T28934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5956'. [ 778.436016][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 778.546554][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 778.666089][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 778.693956][T28945] wg1 speed is unknown, defaulting to 1000 [ 778.715400][T28945] lo speed is unknown, defaulting to 1000 [ 778.776026][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 778.786379][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 778.896104][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 778.950220][T28959] syzkaller0: entered promiscuous mode [ 778.964925][T28959] syzkaller0: entered allmulticast mode [ 779.000602][T28945] lo speed is unknown, defaulting to 1000 [ 779.072015][T28962] netlink: 'syz.1.5961': attribute type 33 has an invalid length. [ 779.082569][T28962] `: renamed from team0 (while UP) [ 779.248210][T28967] netlink: 'syz.1.5962': attribute type 6 has an invalid length. [ 779.874699][T28989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.507622][T29023] sctp: [Deprecated]: syz.0.5973 (pid 29023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.507622][T29023] Use struct sctp_sack_info instead [ 780.699156][T29040] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 780.779009][T29042] wg1 speed is unknown, defaulting to 1000 [ 780.789561][T29042] lo speed is unknown, defaulting to 1000 [ 780.812509][T29037] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 780.822365][T29042] lo speed is unknown, defaulting to 1000 [ 780.920391][T29053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.988074][T29053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.006783][T29053] __nla_validate_parse: 11 callbacks suppressed [ 781.006801][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5983'. [ 781.036908][T29056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5984'. [ 781.210679][T29063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5986'. [ 781.241669][T29063] netlink: 392 bytes leftover after parsing attributes in process `syz.1.5986'. [ 781.295838][T29066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5986'. [ 781.319345][T29070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5988'. [ 781.352971][T29070] 8021q: adding VLAN 0 to HW filter on device bond8 [ 781.374297][T29070] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 781.462457][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5990'. [ 781.471963][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5990'. [ 781.484185][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5990'. [ 781.681766][T29087] ip6t_srh: unknown srh invflags BA61 [ 781.689097][T29089] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5993'. [ 781.820305][T29091] syzkaller1: entered promiscuous mode [ 781.831832][T29091] syzkaller1: entered allmulticast mode [ 781.905496][T29097] x_tables: duplicate underflow at hook 2 [ 782.574837][T29131] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 782.617008][ T6962] net_ratelimit: 25 callbacks suppressed [ 782.617028][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 782.689809][T29143] netlink: 'syz.3.6012': attribute type 58 has an invalid length. [ 782.746035][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 782.867638][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 782.911806][T29138] bond0: option lp_interval: invalid value (0) [ 782.946783][T29138] bond0: option lp_interval: allowed values 1 - 2147483647 [ 783.034435][T29163] bond7: entered promiscuous mode [ 783.100458][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 783.129492][T29157] wg1 speed is unknown, defaulting to 1000 [ 783.193093][T29157] lo speed is unknown, defaulting to 1000 [ 783.211135][T29157] lo speed is unknown, defaulting to 1000 [ 783.236367][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 783.367050][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 783.476051][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 783.586040][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 783.696416][ T6956] bond2: (slave bridge2): failed to get link speed/duplex [ 783.789393][T29197] wg1 speed is unknown, defaulting to 1000 [ 783.816412][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 783.848240][T29203] IPVS: length: 132 != 8 [ 783.936605][T29197] lo speed is unknown, defaulting to 1000 [ 784.230797][T29197] lo speed is unknown, defaulting to 1000 [ 784.743420][T29246] bond9: entered promiscuous mode [ 784.776282][T29246] bond9: entered allmulticast mode [ 784.807672][T29246] 8021q: adding VLAN 0 to HW filter on device bond9 [ 785.507350][T29267] team0 (unregistering): Port device team_slave_0 removed [ 785.561486][T29267] team0 (unregistering): Port device team_slave_1 removed [ 786.126873][T29279] wg1 speed is unknown, defaulting to 1000 [ 786.134525][T29279] lo speed is unknown, defaulting to 1000 [ 786.142399][T29279] lo speed is unknown, defaulting to 1000 [ 786.193447][T29285] netlink: 'syz.3.6039': attribute type 5 has an invalid length. [ 786.201646][T29285] __nla_validate_parse: 13 callbacks suppressed [ 786.201664][T29285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6039'. [ 786.589395][T29294] tipc: Started in network mode [ 786.594315][T29294] tipc: Node identity 2271c77f2226, cluster identity 4711 [ 786.616368][T29294] tipc: Enabled bearer , priority 0 [ 786.637228][T29294] syzkaller0: entered promiscuous mode [ 786.642746][T29294] syzkaller0: entered allmulticast mode [ 786.726354][T29294] tipc: Resetting bearer [ 786.770943][T29293] tipc: Resetting bearer [ 786.799431][T29293] tipc: Disabling bearer [ 787.012414][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 787.035789][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 787.045798][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 787.066375][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 787.370519][T29312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6048'. [ 787.636212][T29331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6053'. [ 787.653819][T29330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6052'. [ 787.677833][ T6950] net_ratelimit: 21 callbacks suppressed [ 787.677850][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 787.759697][T29334] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 787.897149][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 787.958902][T29348] netlink: 'syz.4.6059': attribute type 21 has an invalid length. [ 787.979127][T29340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'. [ 787.999454][T29340] netlink: 'syz.1.6055': attribute type 22 has an invalid length. [ 788.008716][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 788.025171][T29340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6055'. [ 788.108182][T29361] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 788.116606][T29358] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 788.153230][T29358] syzkaller0: entered promiscuous mode [ 788.160178][T29358] syzkaller0: entered allmulticast mode [ 788.315978][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 788.329142][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 788.338730][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 788.349002][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 788.358293][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 788.367555][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 788.436018][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 788.461717][T29367] wg1 speed is unknown, defaulting to 1000 [ 788.472417][T29367] lo speed is unknown, defaulting to 1000 [ 788.480074][T29367] lo speed is unknown, defaulting to 1000 [ 788.676136][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 788.897003][T29378] wg1 speed is unknown, defaulting to 1000 [ 788.915045][T29378] lo speed is unknown, defaulting to 1000 [ 788.933917][T29378] lo speed is unknown, defaulting to 1000 [ 788.987149][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 789.055087][T29367] chnl_net:caif_netlink_parms(): no params data found [ 789.240576][T29367] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.256356][T29367] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.272982][T29367] bridge_slave_0: entered allmulticast mode [ 789.304974][T29367] bridge_slave_0: entered promiscuous mode [ 789.374002][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 789.504963][T29367] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.519953][T29367] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.551900][T29367] bridge_slave_1: entered allmulticast mode [ 789.574696][T29367] bridge_slave_1: entered promiscuous mode [ 789.600567][ T8926] lec:lec_start_xmit: lec0:No lecd attached [ 789.650506][T29408] xt_TCPMSS: Only works on TCP SYN packets [ 789.736016][T29367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.767206][T29367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.857171][T29367] team0: Port device team_slave_0 added [ 789.864852][T29367] team0: Port device team_slave_1 added [ 789.894014][T29367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.901972][T29367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.928840][T29367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.950675][T29367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.958220][T29367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.985271][T29367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.047613][T29414] bond10 (unregistering): Released all slaves [ 790.087517][T29367] hsr_slave_0: entered promiscuous mode [ 790.093945][T29367] hsr_slave_1: entered promiscuous mode [ 790.111316][T29367] debugfs: 'hsr0' already exists in 'hsr' [ 790.117573][T29367] Cannot create hsr debugfs directory [ 790.224196][T29367] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 790.256141][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 790.274322][T29367] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 790.331786][T29367] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 790.373191][T29367] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 790.396144][ T5828] Bluetooth: hci4: command tx timeout [ 791.035039][T29351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 791.058908][T29367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 791.134352][T29367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 791.191888][T29367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 791.241305][T29432] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 791.251194][T29367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 791.377189][T29437] __nla_validate_parse: 1 callbacks suppressed [ 791.377208][T29437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6072'. [ 791.427284][T29457] netlink: 'syz.4.6075': attribute type 10 has an invalid length. [ 791.478697][T29457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6075'. [ 791.487817][T29460] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.6075'. [ 791.495330][T29460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6075'. [ 791.580917][T29457] team0: Failed to send options change via netlink (err -105) [ 791.590235][T29457] team0: Port device geneve0 added [ 791.642984][T29367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.701125][T29367] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.735053][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.742274][ T6962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.798530][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.805697][ T6956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.299036][T29367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.439839][T29367] veth0_vlan: entered promiscuous mode [ 792.466121][ T5828] Bluetooth: hci4: command tx timeout [ 792.473048][T29367] veth1_vlan: entered promiscuous mode [ 792.744916][T29507] wg1 speed is unknown, defaulting to 1000 [ 792.783138][T29367] veth0_macvtap: entered promiscuous mode [ 792.794201][T29507] lo speed is unknown, defaulting to 1000 [ 792.802155][ T6950] net_ratelimit: 12 callbacks suppressed [ 792.802174][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 792.820855][T29367] veth1_macvtap: entered promiscuous mode [ 792.828680][T29507] lo speed is unknown, defaulting to 1000 [ 792.858869][T29367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.893198][T29367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.922770][T12081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.944530][T12081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.005210][T12081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.046129][T12081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.157412][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 793.184969][T12081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.214253][T12081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.268015][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 793.280117][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.285626][T29527] sctp: [Deprecated]: syz.1.6092 (pid 29527) Use of int in max_burst socket option. [ 793.285626][T29527] Use struct sctp_assoc_value instead [ 793.314655][T29530] vcan0: tx address claim with dlc 0 [ 793.360358][T12071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.368661][T12071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.416066][T12073] bond2: (slave bridge2): failed to get link speed/duplex [ 793.576091][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 793.599796][T29543] tipc: Enabled bearer , priority 0 [ 793.653819][T29535] syzkaller0: entered promiscuous mode [ 793.692656][T29535] syzkaller0: entered allmulticast mode [ 793.750669][T29535] netlink: 38 bytes leftover after parsing attributes in process `syz.4.6094'. [ 793.784496][T29563] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 793.802378][T29554] ip6tnl0: Caught tx_queue_len zero misconfig [ 793.809420][T29556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6097'. [ 793.818758][T29556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6097'. [ 793.847613][T29535] tipc: Resetting bearer [ 793.916617][T29561] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 794.006260][T29533] tipc: Resetting bearer [ 794.049084][T29533] tipc: Disabling bearer [ 794.156127][ T6950] bond2: (slave bridge2): failed to get link speed/duplex [ 794.227691][T29570] wg1 speed is unknown, defaulting to 1000 [ 794.237949][T29570] lo speed is unknown, defaulting to 1000 [ 794.255235][T29576] netlink: 'syz.1.6104': attribute type 15 has an invalid length. [ 794.272689][T29570] lo speed is unknown, defaulting to 1000 [ 794.284912][T29576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6104'. [ 794.289779][ T6962] bond2: (slave bridge2): failed to get link speed/duplex [ 794.491133][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 794.546055][ T5828] Bluetooth: hci4: command tx timeout [ 794.623220][T12081] bond2: (slave bridge2): failed to get link speed/duplex [ 794.635129][T29587] netlink: 'syz.3.6107': attribute type 29 has an invalid length. [ 794.650212][T29587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6107'. [ 794.681233][T29588] syzkaller0: entered promiscuous mode [ 794.687344][T29588] syzkaller0: entered allmulticast mode [ 794.865999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 794.874184][ C0] lec:lec_tx_timeout: lec0 [ 795.102210][T29604] syzkaller1: entered promiscuous mode [ 795.111629][T29604] syzkaller1: entered allmulticast mode [ 795.246383][T29612] netlink: 'syz.2.6113': attribute type 12 has an invalid length. [ 795.290616][T29612] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6113'. [ 795.350294][T29612] xt_bpf: check failed: parse error [ 795.377221][T29627] netlink: 'syz.1.6116': attribute type 1 has an invalid length. [ 795.777911][T29650] xt_CT: No such helper "syz0" [ 795.897581][T29661] netlink: 'syz.4.6125': attribute type 11 has an invalid length. [ 795.908071][T29662] netlink: 'syz.4.6125': attribute type 11 has an invalid length. [ 796.079686][T29667] wg1 speed is unknown, defaulting to 1000 [ 796.103925][T29667] lo speed is unknown, defaulting to 1000 [ 796.148659][T29667] lo speed is unknown, defaulting to 1000 [ 796.367189][T29692] netlink: 'syz.1.6130': attribute type 3 has an invalid length. [ 796.385284][T29692] netlink: 'syz.1.6130': attribute type 1 has an invalid length. [ 796.436014][T29692] __nla_validate_parse: 2 callbacks suppressed [ 796.436032][T29692] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6130'. [ 796.531338][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 796.596069][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 796.628133][ T5828] Bluetooth: hci4: command tx timeout [ 796.773026][T29697] wg1 speed is unknown, defaulting to 1000 [ 796.808445][T29697] lo speed is unknown, defaulting to 1000 [ 796.829917][T29700] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6131'. [ 796.857789][T29700] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6131'. [ 796.870459][T29700] netlink: 'syz.2.6131': attribute type 5 has an invalid length. [ 796.880814][T29700] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6131'. [ 797.022243][T29706] wg1 speed is unknown, defaulting to 1000 [ 797.037849][T29706] lo speed is unknown, defaulting to 1000 [ 797.088470][T29697] lo speed is unknown, defaulting to 1000 [ 797.428603][T29706] lo speed is unknown, defaulting to 1000 [ 797.867603][T12071] net_ratelimit: 24 callbacks suppressed [ 797.867622][T12071] bond2: (slave bridge2): failed to get link speed/duplex [ 798.238693][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 798.344609][T29740] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 798.359852][T29740] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 798.370881][T29740] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 798.467359][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 798.587335][ T6952] bond2: (slave bridge2): failed to get link speed/duplex [ 798.706981][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 798.906403][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 798.950792][T29761] netlink: 'syz.3.6145': attribute type 18 has an invalid length. [ 799.033145][T29761] wg1 speed is unknown, defaulting to 1000 [ 799.039387][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 799.056359][T29761] lo speed is unknown, defaulting to 1000 [ 799.064346][T29761] lo speed is unknown, defaulting to 1000 [ 799.080780][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.092988][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.112722][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.138792][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.158447][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.167084][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 799.264879][T29764] wg1 speed is unknown, defaulting to 1000 [ 799.276005][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 799.298560][T29764] lo speed is unknown, defaulting to 1000 [ 799.386353][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 799.519275][T29764] lo speed is unknown, defaulting to 1000 [ 800.144393][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6155'. [ 800.200965][T29787] [ 800.203360][T29787] ====================================================== [ 800.210398][T29787] WARNING: possible circular locking dependency detected [ 800.217434][T29787] syzkaller #0 Not tainted [ 800.221875][T29787] ------------------------------------------------------ [ 800.228905][T29787] syz.4.6154/29787 is trying to acquire lock: [ 800.234992][T29787] ffff8880261a2238 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 800.244444][T29787] [ 800.244444][T29787] but task is already holding lock: [ 800.251818][T29787] ffff8880261a1cf8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 800.262040][T29787] [ 800.262040][T29787] which lock already depends on the new lock. [ 800.262040][T29787] [ 800.272444][T29787] [ 800.272444][T29787] the existing dependency chain (in reverse order) is: [ 800.281474][T29787] [ 800.281474][T29787] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 800.290114][T29787] blk_alloc_queue+0x546/0x680 [ 800.295423][T29787] __blk_mq_alloc_disk+0x197/0x390 [ 800.301079][T29787] nbd_dev_add+0x499/0xb50 [ 800.306058][T29787] nbd_init+0x168/0x1f0 [ 800.310758][T29787] do_one_initcall+0x250/0x840 [ 800.316071][T29787] do_initcall_level+0x104/0x190 [ 800.321549][T29787] do_initcalls+0x59/0xa0 [ 800.326414][T29787] kernel_init_freeable+0x2a6/0x3d0 [ 800.332165][T29787] kernel_init+0x1d/0x1d0 [ 800.337034][T29787] ret_from_fork+0x51e/0xb90 [ 800.342169][T29787] ret_from_fork_asm+0x1a/0x30 [ 800.347476][T29787] [ 800.347476][T29787] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 800.354701][T29787] fs_reclaim_acquire+0x71/0x100 [ 800.360203][T29787] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 800.366546][T29787] __alloc_skb+0x1d0/0x7d0 [ 800.371499][T29787] __ip6_append_data+0x2a44/0x3c50 [ 800.377150][T29787] ip6_append_data+0x10f/0x280 [ 800.382453][T29787] rawv6_sendmsg+0x12d3/0x18e0 [ 800.387755][T29787] ____sys_sendmsg+0x894/0xad0 [ 800.393071][T29787] ___sys_sendmsg+0x2a5/0x360 [ 800.398297][T29787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 800.403768][T29787] do_syscall_64+0x14d/0xf80 [ 800.408888][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.415321][T29787] [ 800.415321][T29787] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 800.423083][T29787] lock_sock_nested+0x48/0x100 [ 800.428390][T29787] inet_shutdown+0x6a/0x390 [ 800.433437][T29787] nbd_mark_nsock_dead+0x2e9/0x560 [ 800.439086][T29787] sock_shutdown+0x15e/0x260 [ 800.444212][T29787] nbd_clear_sock+0x24/0x170 [ 800.449335][T29787] nbd_config_put+0x2dd/0x580 [ 800.454550][T29787] nbd_genl_connect+0x19d5/0x1cf0 [ 800.460153][T29787] genl_family_rcv_msg_doit+0x22a/0x330 [ 800.466249][T29787] genl_rcv_msg+0x61c/0x7a0 [ 800.471303][T29787] netlink_rcv_skb+0x232/0x4b0 [ 800.476603][T29787] genl_rcv+0x28/0x40 [ 800.481125][T29787] netlink_unicast+0x80f/0x9b0 [ 800.486450][T29787] netlink_sendmsg+0x813/0xb40 [ 800.491750][T29787] ____sys_sendmsg+0xa68/0xad0 [ 800.497066][T29787] ___sys_sendmsg+0x2a5/0x360 [ 800.502298][T29787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 800.507787][T29787] do_syscall_64+0x14d/0xf80 [ 800.512923][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.519348][T29787] [ 800.519348][T29787] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 800.527005][T29787] __mutex_lock+0x19f/0x1300 [ 800.532138][T29787] nbd_queue_rq+0x37b/0x1100 [ 800.537288][T29787] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 800.543388][T29787] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 800.550250][T29787] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.556767][T29787] blk_mq_run_hw_queue+0x348/0x4f0 [ 800.562417][T29787] blk_mq_dispatch_list+0xd16/0xe10 [ 800.568164][T29787] blk_mq_flush_plug_list+0x48d/0x570 [ 800.574185][T29787] __blk_flush_plug+0x3ed/0x4d0 [ 800.579587][T29787] __submit_bio+0x28d/0x580 [ 800.584628][T29787] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 800.590794][T29787] block_read_full_folio+0x599/0x830 [ 800.596618][T29787] filemap_read_folio+0x137/0x3b0 [ 800.602186][T29787] do_read_cache_folio+0x358/0x590 [ 800.607837][T29787] read_part_sector+0xb6/0x2b0 [ 800.613159][T29787] adfspart_check_ICS+0xa5/0xa40 [ 800.618626][T29787] bdev_disk_changed+0x7ba/0x1550 [ 800.624307][T29787] blkdev_get_whole+0x380/0x510 [ 800.629695][T29787] bdev_open+0x31e/0xd30 [ 800.634497][T29787] blkdev_open+0x470/0x610 [ 800.639453][T29787] do_dentry_open+0x785/0x14e0 [ 800.644761][T29787] vfs_open+0x3b/0x340 [ 800.649359][T29787] path_openat+0x2e08/0x3860 [ 800.654484][T29787] do_file_open+0x23e/0x4a0 [ 800.659519][T29787] do_sys_openat2+0x113/0x200 [ 800.664722][T29787] __x64_sys_openat+0x138/0x170 [ 800.670113][T29787] do_syscall_64+0x14d/0xf80 [ 800.675244][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.681664][T29787] [ 800.681664][T29787] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 800.688892][T29787] __mutex_lock+0x19f/0x1300 [ 800.694021][T29787] nbd_queue_rq+0xc6/0x1100 [ 800.699106][T29787] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 800.705195][T29787] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 800.712058][T29787] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.718585][T29787] blk_mq_run_hw_queue+0x348/0x4f0 [ 800.724262][T29787] blk_mq_dispatch_list+0xd16/0xe10 [ 800.730004][T29787] blk_mq_flush_plug_list+0x48d/0x570 [ 800.735925][T29787] __blk_flush_plug+0x3ed/0x4d0 [ 800.741321][T29787] __submit_bio+0x28d/0x580 [ 800.746357][T29787] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 800.752525][T29787] block_read_full_folio+0x599/0x830 [ 800.758351][T29787] filemap_read_folio+0x137/0x3b0 [ 800.764003][T29787] do_read_cache_folio+0x358/0x590 [ 800.769647][T29787] read_part_sector+0xb6/0x2b0 [ 800.774940][T29787] adfspart_check_ICS+0xa5/0xa40 [ 800.780406][T29787] bdev_disk_changed+0x7ba/0x1550 [ 800.785967][T29787] blkdev_get_whole+0x380/0x510 [ 800.791362][T29787] bdev_open+0x31e/0xd30 [ 800.796134][T29787] blkdev_open+0x470/0x610 [ 800.801112][T29787] do_dentry_open+0x785/0x14e0 [ 800.806413][T29787] vfs_open+0x3b/0x340 [ 800.811010][T29787] path_openat+0x2e08/0x3860 [ 800.816131][T29787] do_file_open+0x23e/0x4a0 [ 800.821161][T29787] do_sys_openat2+0x113/0x200 [ 800.826373][T29787] __x64_sys_openat+0x138/0x170 [ 800.831755][T29787] do_syscall_64+0x14d/0xf80 [ 800.836909][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.843340][T29787] [ 800.843340][T29787] -> #1 (set->srcu){.+.+}-{0:0}: [ 800.850484][T29787] __synchronize_srcu+0xca/0x3e0 [ 800.855952][T29787] elevator_switch+0x1e8/0x7a0 [ 800.861252][T29787] elevator_change+0x2cc/0x450 [ 800.866543][T29787] elevator_set_default+0x36c/0x430 [ 800.872276][T29787] blk_register_queue+0x34e/0x3f0 [ 800.877835][T29787] __add_disk+0x677/0xd50 [ 800.882699][T29787] add_disk_fwnode+0xfb/0x480 [ 800.887929][T29787] nbd_dev_add+0x72c/0xb50 [ 800.892875][T29787] nbd_init+0x168/0x1f0 [ 800.897570][T29787] do_one_initcall+0x250/0x840 [ 800.902866][T29787] do_initcall_level+0x104/0x190 [ 800.908337][T29787] do_initcalls+0x59/0xa0 [ 800.913220][T29787] kernel_init_freeable+0x2a6/0x3d0 [ 800.918955][T29787] kernel_init+0x1d/0x1d0 [ 800.923809][T29787] ret_from_fork+0x51e/0xb90 [ 800.928933][T29787] ret_from_fork_asm+0x1a/0x30 [ 800.934253][T29787] [ 800.934253][T29787] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 800.942083][T29787] __lock_acquire+0x15a5/0x2cf0 [ 800.947470][T29787] lock_acquire+0x106/0x330 [ 800.952511][T29787] __mutex_lock+0x19f/0x1300 [ 800.957647][T29787] elevator_change+0x1b3/0x450 [ 800.962942][T29787] elevator_set_none+0xb5/0x140 [ 800.968325][T29787] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 800.974663][T29787] nbd_start_device+0x17f/0xb10 [ 800.980040][T29787] nbd_genl_connect+0x165b/0x1cf0 [ 800.985601][T29787] genl_family_rcv_msg_doit+0x22a/0x330 [ 800.991683][T29787] genl_rcv_msg+0x61c/0x7a0 [ 800.996742][T29787] netlink_rcv_skb+0x232/0x4b0 [ 801.002030][T29787] genl_rcv+0x28/0x40 [ 801.006551][T29787] netlink_unicast+0x80f/0x9b0 [ 801.011861][T29787] netlink_sendmsg+0x813/0xb40 [ 801.017164][T29787] ____sys_sendmsg+0xa68/0xad0 [ 801.022483][T29787] ___sys_sendmsg+0x2a5/0x360 [ 801.027704][T29787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 801.033205][T29787] do_syscall_64+0x14d/0xf80 [ 801.038333][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.044762][T29787] [ 801.044762][T29787] other info that might help us debug this: [ 801.044762][T29787] [ 801.055001][T29787] Chain exists of: [ 801.055001][T29787] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 801.055001][T29787] [ 801.068750][T29787] Possible unsafe locking scenario: [ 801.068750][T29787] [ 801.076297][T29787] CPU0 CPU1 [ 801.081671][T29787] ---- ---- [ 801.087038][T29787] lock(&q->q_usage_counter(io)#49); [ 801.092436][T29787] lock(fs_reclaim); [ 801.098964][T29787] lock(&q->q_usage_counter(io)#49); [ 801.106886][T29787] lock(&q->elevator_lock); [ 801.111503][T29787] [ 801.111503][T29787] *** DEADLOCK *** [ 801.111503][T29787] [ 801.119672][T29787] 6 locks held by syz.4.6154/29787: [ 801.124904][T29787] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.133117][T29787] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 801.142214][T29787] #2: ffff8880262341d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 801.153741][T29787] #3: ffff8880262340d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 801.164727][T29787] #4: ffff8880261a1cf8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 801.175360][T29787] #5: ffff8880261a1d30 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 801.186271][T29787] [ 801.186271][T29787] stack backtrace: [ 801.192180][T29787] CPU: 1 UID: 0 PID: 29787 Comm: syz.4.6154 Not tainted syzkaller #0 PREEMPT(full) [ 801.192203][T29787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.192216][T29787] Call Trace: [ 801.192223][T29787] [ 801.192232][T29787] dump_stack_lvl+0xe8/0x150 [ 801.192265][T29787] print_circular_bug+0x2e1/0x300 [ 801.192291][T29787] check_noncircular+0x12e/0x150 [ 801.192316][T29787] __lock_acquire+0x15a5/0x2cf0 [ 801.192345][T29787] ? elevator_change+0x1b3/0x450 [ 801.192363][T29787] lock_acquire+0x106/0x330 [ 801.192380][T29787] ? elevator_change+0x1b3/0x450 [ 801.192404][T29787] __mutex_lock+0x19f/0x1300 [ 801.192428][T29787] ? elevator_change+0x1b3/0x450 [ 801.192448][T29787] ? rcu_is_watching+0x15/0xb0 [ 801.192469][T29787] ? elevator_change+0x1b3/0x450 [ 801.192489][T29787] ? __pfx___mutex_lock+0x10/0x10 [ 801.192511][T29787] ? enable_work+0x17f/0x230 [ 801.192534][T29787] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.192559][T29787] ? __cancel_work_sync+0xf7/0x110 [ 801.192581][T29787] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 801.192604][T29787] elevator_change+0x1b3/0x450 [ 801.192625][T29787] elevator_set_none+0xb5/0x140 [ 801.192643][T29787] ? __pfx_elevator_set_none+0x10/0x10 [ 801.192664][T29787] ? xa_load+0x1db/0x210 [ 801.192689][T29787] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 801.192718][T29787] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 801.192741][T29787] ? kernfs_add_one+0x477/0x5c0 [ 801.192766][T29787] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 801.192793][T29787] ? sysfs_add_file_mode_ns+0x259/0x300 [ 801.192816][T29787] nbd_start_device+0x17f/0xb10 [ 801.192836][T29787] ? device_create_file+0xf4/0x1b0 [ 801.192854][T29787] nbd_genl_connect+0x165b/0x1cf0 [ 801.192875][T29787] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.192895][T29787] ? rcu_is_watching+0x15/0xb0 [ 801.192917][T29787] ? __nla_parse+0x40/0x60 [ 801.192934][T29787] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 801.192962][T29787] genl_family_rcv_msg_doit+0x22a/0x330 [ 801.192990][T29787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.193018][T29787] ? __lock_acquire+0x6b5/0x2cf0 [ 801.193040][T29787] genl_rcv_msg+0x61c/0x7a0 [ 801.193063][T29787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.193085][T29787] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.193106][T29787] netlink_rcv_skb+0x232/0x4b0 [ 801.193123][T29787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.193145][T29787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.193175][T29787] ? genl_rcv+0x19/0x40 [ 801.193202][T29787] ? down_read+0x272/0x2e0 [ 801.193234][T29787] ? genl_rcv+0xd/0x40 [ 801.193260][T29787] genl_rcv+0x28/0x40 [ 801.193278][T29787] netlink_unicast+0x80f/0x9b0 [ 801.193304][T29787] ? __pfx_netlink_unicast+0x10/0x10 [ 801.193327][T29787] ? netlink_sendmsg+0x650/0xb40 [ 801.193342][T29787] ? skb_put+0x11b/0x210 [ 801.193360][T29787] netlink_sendmsg+0x813/0xb40 [ 801.193380][T29787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.193397][T29787] ? aa_sock_msg_perm+0xf1/0x1b0 [ 801.193419][T29787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 801.193441][T29787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.193456][T29787] ____sys_sendmsg+0xa68/0xad0 [ 801.193476][T29787] ? __might_fault+0xaf/0x130 [ 801.193497][T29787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.193538][T29787] ? import_iovec+0x73/0xa0 [ 801.193555][T29787] ___sys_sendmsg+0x2a5/0x360 [ 801.193575][T29787] ? __lock_acquire+0x6b5/0x2cf0 [ 801.193594][T29787] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.193629][T29787] ? futex_wait+0x29a/0x380 [ 801.193658][T29787] ? __fget_files+0x2a/0x420 [ 801.193673][T29787] ? __fget_files+0x3a0/0x420 [ 801.193692][T29787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 801.193712][T29787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.193736][T29787] ? rcu_is_watching+0x15/0xb0 [ 801.193758][T29787] do_syscall_64+0x14d/0xf80 [ 801.193778][T29787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.193794][T29787] ? trace_irq_disable+0x37/0x100 [ 801.193811][T29787] ? clear_bhb_loop+0x40/0x90 [ 801.193828][T29787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.193844][T29787] RIP: 0033:0x7fc7dcd9c629 [ 801.193859][T29787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.193874][T29787] RSP: 002b:00007fc7ddc56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.193891][T29787] RAX: ffffffffffffffda RBX: 00007fc7dd015fa0 RCX: 00007fc7dcd9c629 [ 801.193903][T29787] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 801.193914][T29787] RBP: 00007fc7dce32b39 R08: 0000000000000000 R09: 0000000000000000 [ 801.193925][T29787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.193935][T29787] R13: 00007fc7dd016038 R14: 00007fc7dd015fa0 R15: 00007ffc8ba530e8 [ 801.193953][T29787] [ 801.654621][ T5828] Bluetooth: hci3: command tx timeout [ 801.688945][T29798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6154'. [ 801.970993][T29764] chnl_net:caif_netlink_parms(): no params data found [ 802.042377][ T5828] block nbd0: Receive control failed (result -32) [ 802.049039][ T51] block nbd0: Receive control failed (result -32) [ 802.081746][T29764] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.089185][T29764] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.097505][T29764] bridge_slave_0: entered allmulticast mode [ 802.104415][T29764] bridge_slave_0: entered promiscuous mode [ 802.114653][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.122117][T29764] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.129733][T29764] bridge_slave_1: entered allmulticast mode [ 802.137006][T29764] bridge_slave_1: entered promiscuous mode [ 802.158783][T29764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.170623][T29764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.193455][T29764] team0: Port device team_slave_0 added [ 802.200778][T29764] team0: Port device team_slave_1 added [ 802.219254][T29764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.228075][T29764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.254779][T29764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.266919][T29764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.274154][T29764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.300571][T29764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.331361][T29764] hsr_slave_0: entered promiscuous mode [ 802.337897][T29764] hsr_slave_1: entered promiscuous mode [ 802.343895][T29764] debugfs: 'hsr0' already exists in 'hsr' [ 802.349874][T29764] Cannot create hsr debugfs directory [ 802.594298][T29764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.603368][T29764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.620424][T29764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.629559][T29764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.649777][T29764] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.656953][T29764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.664352][T29764] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.671506][T29764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.713863][T29764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.728070][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.735631][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.748546][T29764] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.762712][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.769890][T12085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.778707][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.785786][T12085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.912548][T29764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.945950][T12085] net_ratelimit: 8 callbacks suppressed [ 802.945966][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 802.959583][T29764] veth0_vlan: entered promiscuous mode [ 802.969379][T29764] veth1_vlan: entered promiscuous mode [ 802.990776][T29764] veth0_macvtap: entered promiscuous mode [ 803.000107][T29764] veth1_macvtap: entered promiscuous mode [ 803.013897][T29764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.025597][T29764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.037342][T12085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.046840][T12085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.057157][T12085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.066404][T12085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.094682][T29764] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 803.118769][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.122852][T29764] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 803.128482][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.159314][ T6958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.167665][ T6958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.196611][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 803.305993][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 803.416046][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 803.506059][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.546059][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 803.656092][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 803.666069][ T5828] Bluetooth: hci3: command tx timeout [ 803.766264][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 803.875988][ T49] bond2: (slave bridge2): failed to get link speed/duplex [ 804.006233][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 804.116657][ T6952] bond2: (slave bridge2): failed to get link speed/duplex [ 805.746206][ T5828] Bluetooth: hci3: command tx timeout [ 807.347759][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 807.826223][ T5828] Bluetooth: hci3: command tx timeout [ 807.996171][T12085] net_ratelimit: 34 callbacks suppressed [ 807.996199][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 808.116116][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 808.226274][T12087] bond2: (slave bridge2): failed to get link speed/duplex [ 808.336298][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 808.445970][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 808.555970][T12085] bond2: (slave bridge2): failed to get link speed/duplex [ 808.666232][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 808.776001][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 808.886019][ T6958] bond2: (slave bridge2): failed to get link speed/duplex [ 808.995970][T12087] bond2: (slave bridge2): failed to get link speed/duplex