last executing test programs: 14.968540884s ago: executing program 3 (id=3253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7, &(0x7f00000002c0)="1a00000000000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x5, 0xfffc, 0x2, 0xa8, 0x0, 0x10000, 0x2}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x49, "3947eac04668eab1b980f2bcce3ff406a3485901a509de6db6c4a2a3f852354ee776766685122db9384a8c71e5d3427f55272d069139b9d26f8d41c0d447bfcf935d83522d4c6c6366"}, &(0x7f00000001c0)=0x51) 14.783940325s ago: executing program 3 (id=3256): syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="8f4961884fc4", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x6, 0x2, 0x4}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)={0x6, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0x7, [0x1, 0x6, 0x9]}}, @pad1]}, 0x30) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x380000c1}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) 14.526778149s ago: executing program 3 (id=3259): socket(0x23, 0x0, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c000101"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x84c1}, 0x0) 14.31846495s ago: executing program 3 (id=3262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0xa}, @var={0x3, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000014c0)=""/237, 0x3b, 0xed, 0x1, 0x6}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r7, &(0x7f0000000180), 0x0}, 0x20) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_ext={0x1c, 0x1a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa66e}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000400)=""/4096, 0x40f00, 0x1e, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001600)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x5, 0x6, 0xff}, 0x10, 0x1cf40, r0, 0x4, &(0x7f0000001680)=[r7], &(0x7f00000016c0)=[{0x1, 0x2, 0xd, 0x6}, {0x2, 0x2, 0xd, 0x5}, {0x2, 0x3, 0x7, 0x2}, {0x0, 0x2, 0x9, 0xa}], 0x10, 0x596}, 0x94) 14.125136045s ago: executing program 3 (id=3266): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9992dbd700000000000fc000000000000000000000000000000ac1e00010000000000000000000000004e220000000000000a00302011000000368d23991ec77803bf81f15bf3a8a8b4197ad4a23ddaa955916ba0edc4cba7a30a224d73ba869f3c09e3cd7d3becf9dee1c591a2788dc833e414b112c4e5487e778056797769c52d6911e3faf148cba4df6bd6c1b970a95b1fe181a8031c358417763d017c72b682077a2e15084397a47400"/191, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000080000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11, 0x0, 0x22}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x5b, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.139044107s ago: executing program 1 (id=3374): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x94}}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe0}]}, 0x2c}}, 0x0) 1.726473083s ago: executing program 1 (id=3377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xff, 0x3, 0x40, @empty, @empty, 0x1, 0x8000, 0x9, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x4, 0x6, 0x500, 0x5, 0x412c0340, r9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.705280416s ago: executing program 0 (id=3378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (async) 1.597935786s ago: executing program 1 (id=3379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x240448d4}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.483166567s ago: executing program 0 (id=3381): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) recvfrom$inet6(r2, &(0x7f0000000000)=""/80, 0x50, 0x101, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000000d06010200e7ff0000000000000000000800010000000404"], 0x1c}}, 0x10) 1.434956722s ago: executing program 2 (id=3382): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 1.384486951s ago: executing program 1 (id=3383): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x1}) 1.161965701s ago: executing program 1 (id=3384): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) getpid() sendmsg$NL80211_CMD_SET_QOS_MAP(r3, 0x0, 0x24044805) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x3, 0x0) (async) gettid() (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) (async) getpid() (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, 0x0, 0x24044805) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x40000) (async) 1.160527748s ago: executing program 2 (id=3385): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=0x0, &(0x7f0000000500)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020100000b0000000000000000000000030006000020000002004e2164010101000000000000000004090300142100000000000000000000fbfffffffffffffff7ffffffffffffff020013010200000000006d0000000000"], 0x58}, 0x1, 0x7}, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000100074dfc1b1ad08ffa505ab90a9e56bc399ae387a0edf0fea50eb042409b8ae44e14b8fc13d4b8476575ed036dc85aeb68f9c284611ae014c30913498adc403ccc9009878ff0a32d50a791c", @ANYRESDEC=r1, @ANYBLOB="01000000010000001c0012000c0001006272696467650fae6810b040fe09d2b5aa04d6ff79e85871da1213551a80fff053b21bbbd84523fe413a8e24bcbe728185c1d7692a028f35f019a05ad301ce3b6713d8fc0eb47b24e8acf072193df2444164c31f6ecfffb11548ec5c5751f6c0a808bbfd6ac081dad3febea18fe40d769ac9712a0a9059411521e5e1cfc230cb9c7c23c7cdc6355bc5fd65f5fda3d0b87f244134c3b7b26f7e3893bce7891817f46ba2b261eaf934744d9b540eab18dcf176595354f5326d2e9b5a2509a96410314001fe3655155972f1ffee247602e6d2f3993c1d18b7b3e98dfafd8a2026f1bff900"], 0x3c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) getsockname$qrtr(r5, &(0x7f00000001c0), &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x40}}, 0x4000080) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r9, r8, 0x0, 0xe25) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1004}, 0x4) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$inet6(0xa, 0x800, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x2000400) r11 = socket(0x28, 0x5, 0x0) bind$inet6(r11, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000800)="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", 0xffffffffffffff8f, 0x884, 0x0, 0x0) 947.312034ms ago: executing program 1 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000780)={0xa60, 0xf, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'veth0_to_team\x00'}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) setsockopt(r3, 0x1, 0x9, &(0x7f0000000040), 0x29) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000040)=0x5d) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000042c0004802800018007000100637400001c0002800800014000000001050003000000000008000240000000110900010073797a30000000000901000073797a320000000014000000110001000000000000000a0000000000"], 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) 879.695172ms ago: executing program 3 (id=3269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/11, 0xb}], 0x3, &(0x7f0000002e00)=""/4096, 0x1000}, 0x40010000) 741.504947ms ago: executing program 4 (id=3389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in6=@initdev}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) syz_emit_ethernet(0x110, &(0x7f0000000140)={@remote, @random="9fe6d3c3640f", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x478, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {0x8}, {0x7}, {0x87a8, 0x0, 0x1}, {0x3}], @ipv4=@dccp={{0x12, 0x4, 0x1, 0x2, 0xe2, 0x66, 0x0, 0x0, 0x21, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x1f, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x86, 0xf, "ea4b403201d8ee5f5d7e1a0a59"}, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x5, "fc76ee", 0xa, "9e43b8"}, "140573b3c5e663534812db11c9041e3c8d76c36e9e72aac1e210d01b8ba05e57f0f7cbaae6526fffcf2847c4dea89aa773c5327f8c229ccef0ff3989b06488274dc25a1732d9caf98afc363e092749aac88d49d5a73e945bfa69c231d89a27d0f5ba27b5f12a225ba9f63a6aeb79112664eb85a836693924331bc2b701e6c5e2294a4768ab077295d73b"}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x88be}, @val={0x0, 0x1, 0xed3, 0x6e, 0x7f, 0x5}, @ipv4=@icmp={{0x1d, 0x4, 0x0, 0x3c, 0x125, 0x68, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@end, @ssrr={0x89, 0x7, 0xc1, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0x45, [@local]}, @noop, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x2, 0x6, "194441a5"}, {0x5, 0x8, "2f55d53699de"}, {0x1, 0x3, "9d"}, {0x0, 0x9, "b1809877b672d6"}, {0x2, 0x11, "40dc72effc5473f200a3e93ff9e3bb"}, {0x6, 0xe, "77e2a90e1d6d2d9c29109a84"}, {0x6, 0xa, "54135d88687948bb"}, {0x1, 0x6, "43f08dfa"}]}]}}, @redirect={0x5, 0x3, 0x0, @multicast2, {0x2a, 0x4, 0x1, 0x27, 0xff0a, 0x64, 0x1, 0x0, 0xc, 0x0, @broadcast, @empty, {[@end, @timestamp={0x44, 0x24, 0x54, 0x0, 0x0, [0x1, 0xbf4, 0x6e86, 0x6, 0x3c5, 0x3, 0x3ff, 0x8]}, @timestamp_prespec={0x44, 0x54, 0xeb, 0x3, 0x0, [{@private=0xa010100, 0x18000}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@loopback, 0x7}, {@broadcast, 0x7}, {@multicast1, 0xffffffff}, {@local, 0x7}, {@broadcast, 0x800}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@multicast2, 0x37e2}]}, @timestamp={0x44, 0x18, 0x25, 0x0, 0xa, [0x9, 0x2, 0x101, 0x9, 0x7]}, @end]}}, '^'}}}, 0x133) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000003c0)={0x1f, 0x0, 0x3}, 0x6) r3 = socket(0x9, 0x2, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) sendmmsg(r3, &(0x7f0000000440), 0x0, 0x499a4) syz_emit_ethernet(0xb8, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @empty, @void, {@mpls_uc={0x8847, {[{0x8}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x1}, {0xffff7, 0x0, 0x1}, {0xc}, {0x1000}, {0x2}, {0x4, 0x0, 0x1}], @ipv4=@tipc={{0x15, 0x4, 0x2, 0x10, 0x82, 0x68, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, {[@generic={0x83, 0xb, "693ce208f7ee65d8ee"}, @rr={0x7, 0xb, 0x2b, [@multicast2, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x5b, 0x1, 0x0, [{@rand_addr=0x64010100, 0x5}, {@loopback, 0x73}]}, @end, @generic={0x88, 0xd, "3c41c83ab7c2ea32b14d45"}, @ssrr={0x89, 0x7, 0xde, [@dev={0xac, 0x14, 0x14, 0x17}]}]}}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0xc, 0x0, 0x3, 0x4, 0x5, 0x2, 0x401, 0x0, 0x2, 0x4e21, 0x4e24}, 0x2, 0x1}, 0x2, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(r4, &(0x7f0000001580)=[{&(0x7f0000000540)}, {&(0x7f0000000580)="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", 0x1000}], 0x2) bind$bt_hci(r2, &(0x7f00000015c0)={0x1f, 0x2, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000001600), &(0x7f0000001680)=0x68) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb43e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x64}}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001800)={0x9, {{0xa, 0x4e20, 0x7, @loopback, 0x6}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x9fd, @empty, 0x3ff}}, {{0xa, 0x4e23, 0x1ff, @private2, 0x800}}, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {{0xa, 0x4e23, 0x10e, @private2, 0x200}}, {{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1c228c7f}}, {{0xa, 0x4e23, 0x4, @local, 0xc9a8}}, {{0xa, 0x4e22, 0xfffffffb, @local, 0xfff}}]}, 0x490) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001f00)={0x0}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001f80)={r7, 0x80000001}, &(0x7f0000001fc0)=0x8) close(r2) shutdown(r6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002000)={r4, 0x3, 0x7, 0x9}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c014) syz_genetlink_get_family_id$smc(&(0x7f0000002140), r8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002540)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f00000021c0)={0x330, 0x14, 0x8, 0x70bd27, 0x25dfdbfb, {0xb, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "acd087df600f4ec185dfe41dd99b5badf71faf3f17100e177e6d65191d0492d2071ff8cf26ce9a91324aa8927cee602adf1a715f5a114bfcadc014fe04aacb1e09e63acd357e6aca81158ee20e13c99c2ec1a041295693e6ef582b42f612b9f142fde8d6ded39f9e64e45c16f86f4993756420f229216a2cf87d23524830e23884e7351c86c14874b575e075a16e0b353a095f080f96c8a0e32baf4684385ce9c12897446a0822ed79d9caa1fb06"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "89a1945b59a17ca60aa88e338407dac54c9e7a653973d47748348b89231b45eb62817828ca2b7e8e60ff763b7c52ba1b6e1c23e9f0a7db61fe4cd285bbb1186673e1be3cdf7ab3ec65b5bf1aa1139788475088de7ccb714b585c12edbb9b8633efab421da0e6903276682783aba79e2936df55c871f2dc96cfe51d073c819e5d79137aebd80759e4"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "ea75addf1b87fa1c3dd143c3d9350411d3b9ea2c77af332ac8f0349c0c2a64a0cea7be6f0ab9e52feed3ecab46999f280461abafae58500601508467a812f121e3ef4532a53848f272093d4094cf101e7e43d91dab95ffbc6ad9fed378d27db5f81eb11fcbb1c8a88b5ef49cde2de028c1e1a79f078c3548dd1c28bbff1f6ab141a327280678b86f99ecf09e1df2547730fc307897f7898cbb045a80b873be40a10633d636ed0940ccec99963a809b856251e40fff4f98372c14bee70dfa1c001b2088605b98068075baa88cf6296a9c5c5a068017"}]}, 0x330}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x30, 0x1412, 0x600, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40) 706.816704ms ago: executing program 2 (id=3390): syz_emit_ethernet(0x22, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) r0 = epoll_create1(0x80000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000}) close(r2) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socket(0xe09257b9ebca4b05, 0x4, 0x100) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000003f000000000000000000f195", @ANYBLOB="c385", @ANYBLOB="b3aa68e8801b061c94fe7efa2c5161ca4d08381be10753ec3cd27dca8857931c0039274e5d8c0f7d141cca940486d4da22faee3408f3def7329cc7529d1df6f778c8c58ae665a76ea96fc395cf29f54619e9962cc8564728401c396fb5997d232c8c48a4a9df9019a3f5c620344708a5b55fc4919e1dfa717e31f2635affec0a619badd2b05555289be489dca5f99b3053be89f97a7c711058eadba61b40913c15e45f95469b2745a3a38c826779d12871aef8a01a8867fb0a2dc2c70eb56cf7a1539f6fd4ccbce59a748bcab3872cdb96a12e347bb6e57f173e5f05aa291e561c65726abc521c900d7deedaeb3bbd96795c6ce7aa0d0fc06eb43443b71b3aa8c0bc87187e211077d6d2d834a583aad26f40f29cdf5ea6c0172dd2a74bd099c40f83381dad67dda8dae0b148075c89392539c3307ee0cbcd77fd4894937c7b533a683982dd00460406eb54dd8f5cabe9edf781ca9d5170515b7eb19f194227d9eab02b79b6c57bc146b71513192d87ec7b5d8a36bd818cb0978c82b734383e0894c64dff12a2b22959d32d57da8b540a9847f188914a5281dda53fd65d766ee7c5f30f542252185ccbf5be5876c900021abaad891a273b4e985deef8c502ad88b6194ada7c1737a0ef9da2bc19f3a61cba7f3c635ff9f82a710cfc0c9dfacbad2e10711fa19787f818febe313efd33ef82c33c05ba05be4f0066182b9b36d11fa2c10318c4dbdf529ab7ebfa377e1b8846575aafe0e2dd158617925ff5ec7d8536cf578206a9329f150bf7908081ddc8b91958ccb24b772f57171e1a2c5cfa0fc1464bfd4b0fc70fbf0c0ab4b3dcbb57a465017785a086ec8a5515846a32065f9355e002e5a46e044fd978ddf17b0d74e122cb0d8109b1b794c4819e6aad4a8726a2abe7c2cdffa0cd6221873e0913610282fa56f3f09ae5c62026cb74d183ccd35dd1d8ed39b9fbf1a03b0fff52bd88d15b20d8ab697b5879056473f2f4ec2c8f635f5769aa41de435f7e2240cda862e77baae9f77788b5d1e101fdbc06fe07b76751edb9b422930efae8a205382b1f6bb80aeb9c12a7dfe2f4a4da72cf3a49d3e25882a0e24b61f38ce87fa56d5f43ce9a611da12cd7e97f5c7ffab0a475bcdce5c72e7b9dc7778a11e245e721c713266504d339eb284add7411a2b99fd8fa2e2c84141fcfdc84ad45f20955e9f2736b2e2ef60b5bcf35c3f350c2cfed857b132c7e7f9995185dbe628abb071505769f86f2bf608c6485322280c4ae8a3f1cf71a4078755eb18c97460c88fbf4e76fc0e9d329c88e9a769e15f6b404b95c4dc93c05d7563af5a1d01bfeb5281fba70c455286f295e8b1479a3405451272ca738fcd4d69d262bc10f8f187ea17ae1678a19991cd9f55bd96bc516b35a7ed63c28347bbd8caaa1e289ff39dc891010964fa9f0e3380b36ff394dd045187420f0127b0c2c3eb46f72d4a04c1ba373d25403816c72a9dc30e3bee185ad8152f6165c1975dd35d8ccc687221999ed57c12f3b1948272874c83884871e7f40b3cef6249884a56bc1e340489ba64fa0ec8e5bbe6a313e19dd1fdcebc5718e40270994346f46f2d1ebad6aedafee8840ea75cbd26ddb5f6276ab9e7550c27fa8849a3b46f709f868932b799129b201458c52f9364fe6f3c4ec8e09a4b66038e4f503a8b60ce71e388f9d5a83a9caaa90bf1000b3cbb48a78dd267ff7e69f68e72e7f4ec6a4570e149863dbedf28031d05f9b0dca030a56df4fdec086912e822bec01070a35005be9d996283b8c4d55bc6de0d9bf238a6eae268f6702afcaaead0ddce4f42181de1cf10628a0745dd098d6fdf14b3353b795b90ce87839143f108fa061b762d8d51debbb74433d04c57a29b5dd9107026c55be8d9da88920d69fec5f79978d0702dc4b07d6336d2923b86bd23aae2e8321b812a0c634ed76191eda36623d16edd220653e1268d34417fca06ad72f958de81ea9d52dc76da99f2db5a751b09a9c57fd29ee35b05796a9a17098c1a14acb43e491dd09eea2cc6ba01e868125ba6405c3a0713b4f96bfb622d6686fd7e502f27a08c5614ed46b9997163a242d324b4e20903ae5e181a2a77deca51ed5b864b89b781d95fd6eb62ebb107b93280b7c7fb491db760692192976135cc2f0dd5fc9e98450353e3240510f18bbaa16c5fae1a8a3c860820065f2cd687ea0391d91aa3ca80680cce1c9aff7c47d35ee2009f1dec17b1c7790b8b6b9f1f72a7b507fb2ca79c4263a5af05f445166de120dc58e16f6a0179de265a9e6b082ae2288713f0d134a402404b24198d95ce4b6ba5ac2d5278575668109198df12e39e3a98997ae5149fdf4ed81c56af2b6c7f0a473c2c0ea705c4fe00697f6efe5e36bf9c1c4cbc56273bcced7d65c7066bc5a26f03604c7d126a595f16c582e7944ec57f97ee3e27c5c01c12500dd2c6b9dde1ed7d4de2772b3113d5dab840de20d920891adc5cb2faf35a3014b2c1828eb16deb0cc4bc7f2afbeaf6ffcba0e09b2e30ffe406c439a7f2c66cbfe1e79bb13ced7fc985887ded3de08dcd11020196f75cb5072bfcf22c04621684c214db74445912ba5439f83f3724c12990e93d24839f976e940bd8101ada512e4a2bbf902607cac698b61a1ffb287afaccd242a26019d7b73b5a65da2c6679013b7c39477d0a3668e30133cebb581d44b1895cba7170972f07ce210fdaf7bc119a92d52e69cbc7ea7826ac58c3af9b3fbef1fcf48cff311c8804e8818e670b7a58355687d7072fb9d0fd39c95e0e5f290422eab14ebdd47a949a58d06131baf10478e91b75bd9291ae321f5e52f45d821a048049a336b06f57db3553920bbdc8b612b5f92a72e5f8ed7b401e007cc4ca2bbc4daca36e121945d28d0e1518a1b0f1a418f2f6c4715c1e1dd7eea16ec1ceed587e993f8d0ca76a11de92ca849a274e84a4446a1c0197003f9b40441e9c9e639c76b8cfda949c61e60348062297bcea98a27fb53b6782b7b1c338794c7cf89f7fe7de9e0bf4596eddb96e032f3d8bec589ce40ecfc7e24177d06dfa22b5a5e7b3564ce94614ea336379408cc7e31cc1096cbbac821fa51b1f7fe888e67317a0ba157cd361c6e49214690ffe62a59f74d56fee255948128be216625fb4b199d5506048a05e2b109b05a13c09993278b6a9e1361cf46a01cd1cf1af4881d343c0175c87560e570d86b2c1eead2b00b42135610f53ea62ec7e0ed10a41a2653d37a470eca8c68f32b533927bdafdfa3a913228134f02718265c2f4e757643f7743e94867b8665c5f8a45d397fab3cecfa1a4024c7b1cfa5a89e13d0fb6906f52681ca57d64f326ede3c33a9eaa84334f5ff62b2816bae76958d1010f330d12536dcb33c0a0a52f6e56e169c60ed60c5ed03b3114bc1dc589d1dccaf74e80fc5e8dfdff8430b3c6f3ef3393d4d010b787cab327aa95fc0079142b92a0654df173f60e2de04b33f0b3b0e33f9ac2ea04bd43504a3b849e285f9abc246438696d7271b777dff7fd10836ce1cc32c8d8b5ed161ea7ed42e6b70e21cec46c9426edf3f2035462b6a41361cfee1cdca6f4937de69545c6431df8df34231b959e485acfb62e39fe0e8506fae166906f614d1ccd729e2c47f3c880602feefcf08a3a16fe6d7be366c1237d061cbea36629025543e02d04be155b07fa91a9a4269c5835d8d431edb5833b8c5225cf34df0b646915752e05dff04afc145933d13b0b6f5e6f0bada2ce9638d43d4bd5ef1627e4ce140776ce3a8522014d7c2ed00b34c0a4e9b75ec46091c8c53f9ba07f857be8a83ad332326990424ad7237a73e7f36cbf2b24317bf7853a88625f2773a8c2fd0adc1c987de32ba2c6a865742ba8e73fd2942d2b3ee84778e7873d541a379375f559db0e9b769fbfef51fb4d4fb6658e7e9da06c5b813367c0fa619b1f51347733befd5ecef0e4c6592e813fd6a5b31a1c4427fc1219280a029ae39d2309f843d7df95161c5f47469782ecf7c8f01412e6f22de2d6dc961ee91b65d12b0699ccb2dd984ea1f05b2b254a131e6debf7fc56155b4cb45abc7c588ebd63884151ad0c671e454141aff617fa5106c9867170a190b9e60abe967f8da147ebafbc28f5a9ef9123c0f1c107bb3a0040cd368a575c020d4fee86a0d1818b835fc6dabef390469db9ab3f7d9c134f20c8b02625db4b105778bf975cc7203eaa6e092e6c36bc0f214f5992a26c93e1436026a6b5e55068a750592e884b111d99cf3a2a8ee39ea2cf6e4feb061cf2c963f84b68b88fc48347ca82dc3a66b3ce959f221fd72d163950d816f17d33d0d515f44b74af25fb39bd2b4f0a34d58a0a11b0da998fc7d75fa4723796b75069ad4718016b7365b649871cf6045c67ca0464a93a91c8da000d00c5c029b35d1d1aea3a4dbf3d77b0b4d0fcb158a47e9cf5283ffb04e09b7a3cba91030778b54b9ca1c8f92689bc7cb29548334fc6a6e10960e1762ad39e4e142ed62dfe7726dfad9044ec39f64ff4075b749a82154e1dd7e8a3a6f648ef9b4c3f01fe03d1a8dc132537765332e4cc74888b7f2e7b09ee491e5597cb9a8ef0c03e6d48afe258db79628b99149dba95c7bcc41dffcb7699dfb722864e8b740957ef658aee4089989d3c79ca7efb33cd460183cee1b3cb4c9e69e37db74160caa7b57a24232e754dd7491977158c86483a6acccf9c3c05a63ffc89ad1e71a9f207c23b0e6abcfb8def8e3d69b1c9525c048ad36a7f1faed796f1514f94d168bf9148228385c43bc9c541a45fa0103767a0696c47039174477ea5f98b72267126ae139ffda62efdad2e250ed5ae2f0cdfa238ccba3b117b402f39d4d2f16a618c11d8a1a78a965e29ce0129d18a4dca806bf705a2c41d6042458ecb5b75f6b91d9c560d74e5bd4a8830f6469f9ef29f04f698e36cba703a278976bd78d7f03f5beab9c9cd1f1482f43f5fd7ec194c3c1faaa6391bef2f600a23651247c21a37aa26eb7db5ef0786b0aa10845900a5e78606a7ddfc2bcfd2152bed035479629b8a5affacc34c7dc71a6d572a1993929c711220751180fa4eb3f8454237e34c48957989c45f71f8cfe6e99023305303d212a9682b5986b5de1927aec867f89568052b62cace608c02684b8f3cba0824a5ec075bdb0ebdfc880a5f5463c436cd3670c878806dc43772596d72f17e2a9821aae3d952aa328ba907bedf0f986565f65c84146053618b7b1897473b30465720bb132eceb5f3f250628e673bcbaa644dc79131c73f66112a7b2c8fcc7a88fda76dfe99076619645a3fb060e14b802a6cdbbf979bead57fcbc6c9527fe402947cf1f132fd0983b5f58c6520c602bfa78a504e80d4379315ff1d9a78415c3e120e3f05ab860fdb2d155e994dc77aa1e04123b518a5d1cdc49be54a536356876e3f1002d67ecb3e465c1028c2fee5a422935caf7f791503d9d5c82673ee66c5ade200424d97c41af892afae1c1671bbc70d2a020ef319aa104e6b55a17937632c62ae06bf31ac723bd890d22f0cf40b68ef5da171800e2d333a6f4368db8950bd1560eb85481c99c9dda245e7100fffd49a297d2ed7cd672e099895fc48b161b7c20ad7678eef6300630209f886d011bf16b20345b2548a3fbc25a432c6dbdbe1dbfe310d88cac0da68a921261b3ea10a1455719e86bd9517017864bf469f7a8d0a0f047c41d6fc40cffaf09e25614e64108ecaa2da779fe1efc38d8f0240507a37f6474433a844f35844ac55c3c742f72faa8503107bcd25a54654efed666d30e547cca885504207fc256c07cc4b56b6ca19c9dc938defc"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r8, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001080)={0x0, 0x3}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000001000000000a00400002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000080000000000000009f0a000000000000f8ffffffffffffff00000000000000000000000000000000000000000000826ea2ed85f2b19c8f8e41ca97f50000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) 639.461464ms ago: executing program 4 (id=3391): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 553.34554ms ago: executing program 2 (id=3392): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) splice(r0, &(0x7f0000000000)=0xfffffffffffffff9, r0, &(0x7f0000000080)=0x7, 0x9, 0x8) (async) splice(r0, &(0x7f0000000000)=0xfffffffffffffff9, r0, &(0x7f0000000080)=0x7, 0x9, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x0, 0x800, 0x3, 0x7}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 508.176752ms ago: executing program 0 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYBLOB="010080000d00fcdbdf2502000000080001fd", @ANYRES8=r2], 0x1c}}, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000040)="fcf9037f2fc1", 0x6}], 0x1, 0x7609, 0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x90) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000b06050000000000000900000000000053b3c064e013fa2398bdcddf3dc0306286c3ab96b5fdd3d80eb111adff5d58880bdd28507908ff31471fef4ae83cc1dbd284656bda431e12c434471db25f693dad1977ad26b3f045b6c23ba2484c72e6e242db82098ac9f0108d2216f49a821fb9ee736a3ae51913ec2b9096c19696fb44b6d7c4e8105001bf219cbabb0859a2112829f4dfc6660a81b27691290f14"], 0x14}, 0x1, 0x0, 0x0, 0x408c4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRESHEX=r5, @ANYRES8=r6, @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) 459.745293ms ago: executing program 2 (id=3394): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x3e, 0x0, 0x60}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f8, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @rand_addr=0x64010102, @rand_addr=0x64010100, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0xc0}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x2, 0x5, 0x34, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x4, 0x84}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x3, 0x65, 0x0, 0x36, 0x33, 0x9, @multicast2, @multicast1}}}}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) 337.250098ms ago: executing program 4 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) getpid() r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002001128008000100736974001400028008000300ac1414bb08000200ac14142d"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r4 = accept4(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000040)=0x80, 0x80000) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x8800) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x8, 0x3fffc, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x7, 0x6b3}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x30, 0x0, 0x30, 0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/210, 0x4a, 0xd2, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3f55}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0xa, 0xb, 0xa8c0aad119cc9514, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000640)='GPL\x00', 0x4, 0x4c, &(0x7f0000000680)=""/76, 0x41100, 0x0, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000009c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000a40)=[{0x3, 0x4, 0x5, 0x4}, {0x4, 0x2, 0x9, 0xb}, {0x0, 0x2, 0x2}, {0x5, 0x2, 0x4, 0x8}, {0x3, 0x5, 0x6}], 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) (async) getpid() (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002001128008000100736974001400028008000300ac1414bb08000200ac14142d"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) accept4(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000040)=0x80, 0x80000) (async) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x8800) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040005) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x8, 0x3fffc, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x7, 0x6b3}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x30, 0x0, 0x30, 0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/210, 0x4a, 0xd2, 0x0, 0x1}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3f55}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0xa, 0xb, 0xa8c0aad119cc9514, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000640)='GPL\x00', 0x4, 0x4c, &(0x7f0000000680)=""/76, 0x41100, 0x0, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000009c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000a40)=[{0x3, 0x4, 0x5, 0x4}, {0x4, 0x2, 0x9, 0xb}, {0x0, 0x2, 0x2}, {0x5, 0x2, 0x4, 0x8}, {0x3, 0x5, 0x6}], 0x10, 0x8}, 0x94) (async) 289.894608ms ago: executing program 0 (id=3396): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0xbc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="2000000072003303060000000400000007000000", @ANYRES32=0x0, @ANYBLOB="08000100ff06"], 0x20}}, 0x20000050) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x20c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xeb}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0xc}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2ff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0xd}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x0, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r8) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 211.065072ms ago: executing program 2 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000200)={0x48, r4, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xac, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000, 0x0, 0xfffffffffffffffd}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x70bd25, 0x34ff, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 137.730866ms ago: executing program 4 (id=3398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000feffffff0f000000050035004000000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r4, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24040800) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001080)={0x0, 0xc7, "1dbfb42e0acefd021068558ebbc3be530b56a015c0c6370a33b93e7f3a9177d5f55e73a82d8717631bc8b1f820b98ed7fa07b9502ff4cae9375b1788c31a8963b16998fc1340abc9c12eb62de0f08002626067e5617fb1c80d6bb4dbe3a5b76d796eed6d18c3de04211363718e9a087f19475182b4705cc01ed033e0994828fe59f2ddd26921428b674bafa828edfc6c0d7d600ece8f983dd48e7628535fecfe681aaab67743b4c04d326364b54f3aa7817150987168a6061731cc8034318f9b1c9b564a11a14e"}, &(0x7f0000000000)=0xcf) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x2, 0x8203, 0x10001, 0x9, 0x0, 0x400, 0x2, r6}, 0x20) 135.074564ms ago: executing program 0 (id=3399): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 117.141502ms ago: executing program 4 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0xf482, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000000000c10400000007cb74c7a61bcb4bfbb66fa6275c2f620f0fb17acd954ae344e27a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x4021) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r3, &(0x7f0000000240), &(0x7f0000000340)=0x60, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040040}, 0x24048011) 832.402µs ago: executing program 0 (id=3401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000a80)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000c60cdaebd40121172224db113fdbb15d2aab1cff9f2dffaa429f9b9397a3941d7afcf84f7364588ad9dc5f7b9ff77c83cb6d62b61ef90d2818707bcd13b24d3996a6e16049f3d18f4e881f8e19cf34d669deb13fc8db613668cdfa5ac2f6a9440a9124955e316a8ba496753cf9d34db609494208975f73035c4a4b2ec9efb570cb234c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="99df39f5d66df753b22f44d263cabf88e43836aa629b35d3def699770066112c30e529d762e8f65aeff2af5dfffad6991c6bded7a9d54198ce0add5e9bc37a7cd3cdb2fb892866e44fd6d2eef9407f4e4c8e4f881eccd45cf3e1014589e8fe5af6fd946ea3be96c5062acc1fbc93829022a57162c647", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) (async) r14 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r14, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffff8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008002) socket$inet6(0xa, 0x800, 0x8a) (async) socket$inet6(0xa, 0x800, 0x8a) 0s ago: executing program 4 (id=3402): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x188, 0xa, 0xa, 0x4, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x1c, 0xd, 0x1, 0x0, "df21fe62f1471dfde2b10d1aa92a714b815bf640b7d3a8bf"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_USERDATA={0xa5, 0xd, 0x1, 0x0, "97d9c4d4b807e1975171517fa737fbd211b72406258f4195bf300c9aa3d3e549a5c48bb4c6585b83de9d49fb7e8f6e14b5938348931ea1d1a6f77a9c6b71e6c1974170b558e52be82eb7bb8bac12cb81b1bd8234c9da2f4b747bdc38e4810ce8c31c1735f3799f6ad5f828f0955fd3d04ffac51d4dc4abc6b14e5b0ab8e5bf968c580ba0e5bb313f19a42d45c9a9efe562dd6fe84900035fd21590608506ac00a8"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_USERDATA={0x54, 0xd, 0x1, 0x0, "a06924d6246fb5b6129ce5b5e40176c35a279552aba44a4f56a760748eff8e1660e85904cdb01b3f010723da855383aa3cc4a17ade5375a6c8923593662193d82daa58631f72a35a67d8931c8bc9b515"}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000080)=r7}, 0x20) close(r0) kernel console output (not intermixed with test programs): 54.789664][T13845] netlink: 'syz.1.2296': attribute type 3 has an invalid length. [ 255.225868][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 255.466798][T13887] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2308'. [ 255.536953][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 255.578383][T13897] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2307'. [ 255.618908][T13887] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2308'. [ 255.851295][T13900] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.923344][T13916] netlink: 'syz.4.2315': attribute type 22 has an invalid length. [ 256.116635][T13929] batman_adv: batadv0: Interface deactivated: veth7 [ 256.142470][T13929] batman_adv: batadv0: Removing interface: veth7 [ 256.171418][T13929] batman_adv: batadv0: Interface deactivated: veth15 [ 256.210710][T13929] batman_adv: batadv0: Removing interface: veth15 [ 257.645429][T14009] __nla_validate_parse: 3 callbacks suppressed [ 257.645450][T14009] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2344'. [ 257.674946][T14012] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 257.715642][T14012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 257.722588][T14012] syzkaller1: linktype set to 823 [ 257.781802][T14023] IPVS: length: 85 != 8 [ 257.828392][T14026] syzkaller1: entered promiscuous mode [ 257.842791][T14026] syzkaller1: entered allmulticast mode [ 257.988219][T14034] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 257.999740][T14034] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2349'. [ 258.010491][T14034] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2349'. [ 258.139292][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 258.194680][T14043] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 258.309459][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 258.321649][T14050] openvswitch: netlink: Flow actions attr not present in new flow. [ 258.604081][T14069] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.694280][T14072] xt_CT: No such helper "pptp" [ 258.717827][T14076] tipc: Started in network mode [ 258.723037][T14076] tipc: Node identity e243c770d6a3, cluster identity 4711 [ 258.730645][T14076] tipc: Enabled bearer , priority 0 [ 258.739028][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 258.753049][T14076] syzkaller0: MTU too low for tipc bearer [ 258.762323][T14076] tipc: Disabling bearer [ 258.829040][T14080] dvmrp0: entered allmulticast mode [ 258.834718][T14081] dvmrp0: left allmulticast mode [ 258.871764][T14080] netlink: 'syz.0.2365': attribute type 1 has an invalid length. [ 258.879567][T14080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2365'. [ 259.603245][T14119] syzkaller1: entered promiscuous mode [ 259.630181][T14119] syzkaller1: entered allmulticast mode [ 259.732735][T14125] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 259.792402][T14133] tipc: Enabled bearer , priority 0 [ 259.808561][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 259.821107][T14135] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 259.832352][T14133] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 259.848669][T14133] tipc: Resetting bearer [ 259.858286][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 259.864852][T14135] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2384'. [ 259.934315][T14130] tipc: Disabling bearer [ 260.328844][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.778159][T14140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.830963][T14140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.999594][T14148] C speed is unknown, defaulting to 1000 [ 261.125060][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.231559][T14171] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 261.755934][T14194] netlink: 'syz.3.2397': attribute type 11 has an invalid length. [ 261.907615][T14200] tc_dump_action: action bad kind [ 261.940591][T14200] netlink: 'syz.4.2400': attribute type 10 has an invalid length. [ 262.566257][T14232] netlink: 'syz.4.2409': attribute type 24 has an invalid length. [ 262.598419][T14233] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 262.628555][T14233] netlink: 'syz.2.2408': attribute type 11 has an invalid length. [ 262.659461][T14233] __nla_validate_parse: 5 callbacks suppressed [ 262.673557][T14233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2408'. [ 262.814029][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 263.134816][T14255] C speed is unknown, defaulting to 1000 [ 263.573912][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2424'. [ 263.870568][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 264.042983][T14302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2431'. [ 264.168578][T14304] lo speed is unknown, defaulting to 1000 [ 264.192923][T14304] lo speed is unknown, defaulting to 1000 [ 264.199656][T14304] lo speed is unknown, defaulting to 1000 [ 264.643273][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 264.979667][T14304] infiniband sz1: set active [ 264.987524][ T24] lo speed is unknown, defaulting to 1000 [ 264.997550][T14304] infiniband sz1: added lo [ 265.121811][T14304] RDS/IB: sz1: added [ 265.126021][T14304] smc: adding ib device sz1 with port count 1 [ 265.138253][T14304] smc: ib device sz1 port 1 has no pnetid [ 265.212002][ T9] lo speed is unknown, defaulting to 1000 [ 265.220347][T14304] lo speed is unknown, defaulting to 1000 [ 265.381392][T14343] SET target dimension over the limit! [ 265.390308][T14356] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 265.399973][T14356] netlink: 'syz.3.2447': attribute type 11 has an invalid length. [ 265.407841][T14356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2447'. [ 265.707947][T14304] lo speed is unknown, defaulting to 1000 [ 265.734200][T14376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.909342][T14388] netlink: 'syz.2.2454': attribute type 10 has an invalid length. [ 265.926292][T14388] bridge0: port 1(team0) entered blocking state [ 265.936392][T14388] bridge0: port 1(team0) entered disabled state [ 265.944072][T14388] team0: entered allmulticast mode [ 265.950369][T14388] geneve0: entered allmulticast mode [ 265.971790][T14388] team0: entered promiscuous mode [ 265.977069][T14388] geneve0: entered promiscuous mode [ 266.202316][T14398] netem: change failed [ 266.335450][T14304] lo speed is unknown, defaulting to 1000 [ 266.516801][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2465'. [ 266.559637][T14423] netlink: 'syz.2.2464': attribute type 2 has an invalid length. [ 266.568389][T14423] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2464'. [ 266.645736][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2466'. [ 266.778278][T14304] lo speed is unknown, defaulting to 1000 [ 266.792095][T14435] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 266.856964][T14437] ip6gre1: entered allmulticast mode [ 267.138822][T14304] lo speed is unknown, defaulting to 1000 [ 267.534796][T14466] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 267.585031][T14460] bond0: entered promiscuous mode [ 267.603366][ T44] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.670005][ T44] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.678464][ T44] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.693959][T14472] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 267.774759][T14472] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.782485][ T44] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 267.828701][T14479] bond7: option mode: unable to set because the bond device is up [ 267.849127][T14479] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 267.896996][T14479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.943253][T14479] bond7: (slave lo): Enslaving as a backup interface with an up link [ 267.962206][T14479] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 267.983227][T14476] ÿ: renamed from team_slave_1 [ 268.000101][ T6264] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 268.030453][T14490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.050550][ T6264] bond7: (slave lo): link status up again after 0 ms [ 268.082142][ T6264] bond7: (slave lo): link status up again after 0 ms [ 268.130897][ T44] bond7: (slave lo): link status up again after 0 ms [ 268.151310][ T44] bond7: (slave lo): link status up again after 0 ms [ 268.164657][ T44] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 268.184250][ T44] bond7: (slave lo): link status up again after 0 ms [ 268.263002][T14507] __nla_validate_parse: 3 callbacks suppressed [ 268.263022][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 268.278604][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 268.302811][ T24] lo speed is unknown, defaulting to 1000 [ 268.511711][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 268.947412][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2504'. [ 268.975683][T14562] geneve3: entered promiscuous mode [ 269.118586][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 269.132925][T14570] netlink: 'syz.0.2507': attribute type 3 has an invalid length. [ 269.145407][T14575] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 269.186581][T14570] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2507'. [ 269.224096][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 269.254133][T14580] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 269.449809][T14588] C speed is unknown, defaulting to 1000 [ 269.463482][T14592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 269.464587][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 269.523956][T14594] netlink: 'syz.1.2511': attribute type 17 has an invalid length. [ 269.550130][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 269.601949][T14594] gretap0: entered promiscuous mode [ 269.652077][T14594] gretap0: left promiscuous mode [ 269.904824][T14588] lo speed is unknown, defaulting to 1000 [ 270.373269][T14635] netlink: 'syz.1.2525': attribute type 10 has an invalid length. [ 270.503617][T14643] netlink: 'syz.1.2525': attribute type 6 has an invalid length. [ 270.623381][T14647] IPVS: Error connecting to the multicast addr [ 270.723414][T14647] IPVS: Error connecting to the multicast addr [ 270.741810][ T13] net_ratelimit: 23 callbacks suppressed [ 270.741830][ T13] bond7: (slave lo): failed to get link speed/duplex [ 270.873148][ T13] bond7: (slave lo): failed to get link speed/duplex [ 270.925849][T14658] xt_hashlimit: size too large, truncated to 1048576 [ 271.145157][T14661] bond9: Removing last ns target with arp_interval on [ 271.201895][ T13] bond7: (slave lo): failed to get link speed/duplex [ 271.341214][ T60] bond7: (slave lo): failed to get link speed/duplex [ 271.460022][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 271.560017][T14687] openvswitch: netlink: Flow key attr not present in new flow. [ 271.592179][ T12] bond7: (slave lo): failed to get link speed/duplex [ 271.757451][T14694] sock: sock_timestamping_bind_phc: sock not bind to device [ 271.790095][ T60] bond7: (slave lo): failed to get link speed/duplex [ 271.906332][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 272.121432][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 272.306096][T14735] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 272.375498][T14732] syzkaller0: entered promiscuous mode [ 272.381362][T14732] syzkaller0: entered allmulticast mode [ 272.681310][T14752] 8021q: VLANs not supported on caif0 [ 272.857664][T14762] tc_dump_action: action bad kind [ 273.121080][T14775] netlink: 'syz.1.2564': attribute type 139 has an invalid length. [ 273.561086][T14798] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 273.570975][T14798] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 274.013285][T14816] netlink: 'syz.3.2572': attribute type 29 has an invalid length. [ 274.085844][T14816] netlink: 'syz.3.2572': attribute type 29 has an invalid length. [ 274.465282][T14833] C speed is unknown, defaulting to 1000 [ 274.772661][T14833] lo speed is unknown, defaulting to 1000 [ 275.049278][T14854] __nla_validate_parse: 22 callbacks suppressed [ 275.049302][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2584'. [ 275.230984][T14862] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 275.299150][T14862] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 275.346513][T14871] netlink: 'syz.2.2589': attribute type 30 has an invalid length. [ 275.383377][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2589'. [ 275.429657][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2591'. [ 275.453747][T14876] netlink: 'syz.4.2591': attribute type 21 has an invalid length. [ 275.483932][T14876] netlink: 'syz.4.2591': attribute type 6 has an invalid length. [ 275.492853][T14876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2591'. [ 275.750326][ T33] net_ratelimit: 25 callbacks suppressed [ 275.750350][ T33] bond7: (slave lo): failed to get link speed/duplex [ 275.891421][ T44] bond7: (slave lo): failed to get link speed/duplex [ 276.019983][ T44] bond7: (slave lo): failed to get link speed/duplex [ 276.052045][T14889] ip6tnl0: Caught tx_queue_len zero misconfig [ 276.144275][ T33] bond7: (slave lo): failed to get link speed/duplex [ 276.261455][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 276.366713][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2599'. [ 276.380063][ T44] bond7: (slave lo): failed to get link speed/duplex [ 276.499981][ T33] bond7: (slave lo): failed to get link speed/duplex [ 276.610288][ T33] bond7: (slave lo): failed to get link speed/duplex [ 276.671468][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2604'. [ 276.720541][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 276.840705][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 277.079507][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2613'. [ 277.446397][T14948] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 277.615242][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 277.718540][T14957] vlan0: entered promiscuous mode [ 277.741164][T14957] vlan0: entered allmulticast mode [ 277.753074][T14957] hsr_slave_1: entered allmulticast mode [ 277.843274][T14966] geneve1: Caught tx_queue_len zero misconfig [ 277.886112][T14966] netlink: 'syz.0.2623': attribute type 32 has an invalid length. [ 277.945314][T14969] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 278.066511][T14981] bond4: (slave gretap3): making interface the new active one [ 278.078720][T14981] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 278.109013][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.116644][T14982] team0: Cannot enslave team device to itself [ 278.178983][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 278.715423][T15019] bond10: ARP target 1.0.0.0 is already present [ 278.723066][T15022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2639'. [ 278.732787][T15019] bond10: option arp_ip_target: invalid value (1) [ 278.751727][T15019] bond10 (unregistering): Released all slaves [ 278.795899][T15023] netdevsim netdevsim0: Direct firmware load for H failed with error -2 [ 278.834008][T15023] netdevsim netdevsim0: Falling back to sysfs fallback for: H [ 279.123175][T15046] dvmrp6: entered allmulticast mode [ 279.198827][T15052] netlink: 'syz.4.2647': attribute type 8 has an invalid length. [ 279.220569][T15055] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 279.381544][T15055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.390125][T15063] netlink: 'syz.1.2651': attribute type 7 has an invalid length. [ 279.752983][T15087] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 279.776444][T15087] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 280.224313][T15116] __nla_validate_parse: 5 callbacks suppressed [ 280.224337][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 280.367155][T15124] syzkaller0: entered promiscuous mode [ 280.373362][T15124] syzkaller0: entered allmulticast mode [ 280.453456][T15124] IPVS: length: 24 != 1368 [ 280.458402][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 280.513237][T15134] tipc: Enabled bearer , priority 0 [ 280.573807][T15122] tipc: Resetting bearer [ 280.673170][T15122] tipc: Disabling bearer [ 280.850063][T10638] net_ratelimit: 26 callbacks suppressed [ 280.850086][T10638] bond7: (slave lo): failed to get link speed/duplex [ 280.871843][T15146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2679'. [ 280.933704][T15146] IPv6: sit2: Disabled Multicast RS [ 280.940183][T15146] sit2: entered allmulticast mode [ 281.009952][ T13] bond7: (slave lo): failed to get link speed/duplex [ 281.190737][T10386] bond7: (slave lo): failed to get link speed/duplex [ 281.340004][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 281.385938][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'. [ 281.431744][T15173] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2689'. [ 281.462888][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 281.474426][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'. [ 281.499639][T15178] pimreg: entered allmulticast mode [ 281.538918][T15178] pimreg3: entered allmulticast mode [ 281.556080][T15179] syzkaller0: entered promiscuous mode [ 281.563848][T15179] syzkaller0: entered allmulticast mode [ 281.712131][T10386] bond7: (slave lo): failed to get link speed/duplex [ 281.754446][T15191] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 281.825612][ T13] bond7: (slave lo): failed to get link speed/duplex [ 281.951183][ T13] bond7: (slave lo): failed to get link speed/duplex [ 282.073565][T10386] bond7: (slave lo): failed to get link speed/duplex [ 282.168376][T15220] netlink: 'syz.4.2701': attribute type 10 has an invalid length. [ 282.201929][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 282.215160][T15218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2700'. [ 282.225704][ T13] bond7: (slave lo): failed to get link speed/duplex [ 282.438225][T15231] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2703'. [ 282.585654][T15238] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2707'. [ 282.887260][T15248] netlink: 'syz.4.2710': attribute type 5 has an invalid length. [ 283.448466][T15284] C: renamed from team_slave_0 [ 283.470986][T15284] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 283.882594][T15307] batman_adv: batadv0: Adding interface: veth5 [ 283.888837][T15307] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.920556][T15307] batman_adv: batadv0: Not using interface veth5 (retrying later): interface not active [ 283.946879][T15314] netlink: 'syz.4.2726': attribute type 4 has an invalid length. [ 284.055503][T15317] netlink: 'syz.0.2730': attribute type 7 has an invalid length. [ 284.100750][T15317] netlink: 'syz.0.2730': attribute type 8 has an invalid length. [ 284.147706][T15317] batadv_slave_1: entered promiscuous mode [ 284.176919][T15317] batadv_slave_1: left promiscuous mode [ 284.234231][T15327] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 284.270833][T15327] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 284.667646][T15351] dvmrp1: entered allmulticast mode [ 285.077805][T15364] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 285.266702][T15372] sctp: [Deprecated]: syz.2.2749 (pid 15372) Use of int in max_burst socket option. [ 285.266702][T15372] Use struct sctp_assoc_value instead [ 285.354831][T15384] raw_sendmsg: syz.4.2750 forgot to set AF_INET. Fix it! [ 285.676387][T15403] __nla_validate_parse: 15 callbacks suppressed [ 285.676408][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 285.725907][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2757'. [ 285.837029][T15409] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 285.890596][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 285.890631][ T60] net_ratelimit: 29 callbacks suppressed [ 285.890671][ T60] bond7: (slave lo): failed to get link speed/duplex [ 286.067067][ T60] bond7: (slave lo): failed to get link speed/duplex [ 286.142603][T15424] netlink: 'syz.3.2766': attribute type 33 has an invalid length. [ 286.183902][T15424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2766'. [ 286.200504][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 286.311006][ T44] bond7: (slave lo): failed to get link speed/duplex [ 286.320140][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 286.420070][ T60] bond7: (slave lo): failed to get link speed/duplex [ 286.530500][ T44] bond7: (slave lo): failed to get link speed/duplex [ 286.640145][ T60] bond7: (slave lo): failed to get link speed/duplex [ 286.750092][ T44] bond7: (slave lo): failed to get link speed/duplex [ 286.860512][ T60] bond7: (slave lo): failed to get link speed/duplex [ 286.970353][ T60] bond7: (slave lo): failed to get link speed/duplex [ 290.960214][T10386] net_ratelimit: 35 callbacks suppressed [ 290.960237][T10386] bond7: (slave lo): failed to get link speed/duplex [ 291.080146][T10386] bond7: (slave lo): failed to get link speed/duplex [ 291.190136][ T33] bond7: (slave lo): failed to get link speed/duplex [ 291.300279][ T33] bond7: (slave lo): failed to get link speed/duplex [ 291.410116][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 291.520232][ T33] bond7: (slave lo): failed to get link speed/duplex [ 291.630096][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 291.740201][ T33] bond7: (slave lo): failed to get link speed/duplex [ 291.850133][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 291.960861][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 296.040448][ T33] net_ratelimit: 36 callbacks suppressed [ 296.040484][ T33] bond7: (slave lo): failed to get link speed/duplex [ 296.160729][ T33] bond7: (slave lo): failed to get link speed/duplex [ 296.270058][ T60] bond7: (slave lo): failed to get link speed/duplex [ 296.380307][ T44] bond7: (slave lo): failed to get link speed/duplex [ 296.490250][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 296.600241][ T60] bond7: (slave lo): failed to get link speed/duplex [ 296.710156][T10633] bond7: (slave lo): failed to get link speed/duplex [ 296.820485][ T33] bond7: (slave lo): failed to get link speed/duplex [ 296.930097][ T60] bond7: (slave lo): failed to get link speed/duplex [ 297.040297][ T44] bond7: (slave lo): failed to get link speed/duplex [ 301.121273][ T44] net_ratelimit: 36 callbacks suppressed [ 301.121296][ T44] bond7: (slave lo): failed to get link speed/duplex [ 301.240326][ T12] bond7: (slave lo): failed to get link speed/duplex [ 301.350423][ T12] bond7: (slave lo): failed to get link speed/duplex [ 301.460141][T10386] bond7: (slave lo): failed to get link speed/duplex [ 301.580845][T10633] bond7: (slave lo): failed to get link speed/duplex [ 301.690170][ T12] bond7: (slave lo): failed to get link speed/duplex [ 301.800113][T10633] bond7: (slave lo): failed to get link speed/duplex [ 301.910103][ T44] bond7: (slave lo): failed to get link speed/duplex [ 302.020135][T10633] bond7: (slave lo): failed to get link speed/duplex [ 302.130276][T10386] bond7: (slave lo): failed to get link speed/duplex [ 306.210270][ T3498] net_ratelimit: 36 callbacks suppressed [ 306.210293][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 306.330079][T10386] bond7: (slave lo): failed to get link speed/duplex [ 306.440082][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 306.550107][ T60] bond7: (slave lo): failed to get link speed/duplex [ 306.660110][ T33] bond7: (slave lo): failed to get link speed/duplex [ 306.770096][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 306.880785][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 306.990215][T10386] bond7: (slave lo): failed to get link speed/duplex [ 307.100102][T10386] bond7: (slave lo): failed to get link speed/duplex [ 307.210058][ T33] bond7: (slave lo): failed to get link speed/duplex [ 311.281145][ T33] net_ratelimit: 36 callbacks suppressed [ 311.281169][ T33] bond7: (slave lo): failed to get link speed/duplex [ 311.400275][T10633] bond7: (slave lo): failed to get link speed/duplex [ 311.510108][ T60] bond7: (slave lo): failed to get link speed/duplex [ 311.620049][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 311.730036][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 311.842107][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 311.950328][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 312.060293][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 312.170269][ T33] bond7: (slave lo): failed to get link speed/duplex [ 312.280188][ T60] bond7: (slave lo): failed to get link speed/duplex [ 316.370194][ T44] net_ratelimit: 36 callbacks suppressed [ 316.370217][ T44] bond7: (slave lo): failed to get link speed/duplex [ 316.490131][ T12] bond7: (slave lo): failed to get link speed/duplex [ 316.600131][ T12] bond7: (slave lo): failed to get link speed/duplex [ 316.710059][ T60] bond7: (slave lo): failed to get link speed/duplex [ 316.820547][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 316.930012][ T12] bond7: (slave lo): failed to get link speed/duplex [ 317.052061][ T12] bond7: (slave lo): failed to get link speed/duplex [ 317.160467][ T60] bond7: (slave lo): failed to get link speed/duplex [ 317.270161][ T60] bond7: (slave lo): failed to get link speed/duplex [ 317.380018][ T60] bond7: (slave lo): failed to get link speed/duplex [ 321.390210][ T44] net_ratelimit: 35 callbacks suppressed [ 321.390234][ T44] bond7: (slave lo): failed to get link speed/duplex [ 321.510060][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 321.620311][ T44] bond7: (slave lo): failed to get link speed/duplex [ 321.730391][ T33] bond7: (slave lo): failed to get link speed/duplex [ 321.840424][ T44] bond7: (slave lo): failed to get link speed/duplex [ 321.950242][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 322.060432][ T33] bond7: (slave lo): failed to get link speed/duplex [ 322.170062][ T33] bond7: (slave lo): failed to get link speed/duplex [ 322.280281][ T33] bond7: (slave lo): failed to get link speed/duplex [ 322.390382][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 322.563483][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.480463][ T60] net_ratelimit: 36 callbacks suppressed [ 326.480485][ T60] bond7: (slave lo): failed to get link speed/duplex [ 326.600444][ T44] bond7: (slave lo): failed to get link speed/duplex [ 326.710266][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 326.820050][ T44] bond7: (slave lo): failed to get link speed/duplex [ 326.930323][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 327.040082][ T33] bond7: (slave lo): failed to get link speed/duplex [ 327.150101][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 327.260340][ T33] bond7: (slave lo): failed to get link speed/duplex [ 327.370040][ T44] bond7: (slave lo): failed to get link speed/duplex [ 327.480312][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 331.560170][ T44] net_ratelimit: 36 callbacks suppressed [ 331.560194][ T44] bond7: (slave lo): failed to get link speed/duplex [ 331.690194][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 331.810194][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 331.921614][ T44] bond7: (slave lo): failed to get link speed/duplex [ 332.030365][ T33] bond7: (slave lo): failed to get link speed/duplex [ 332.140136][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 332.250368][ T44] bond7: (slave lo): failed to get link speed/duplex [ 332.360388][ T33] bond7: (slave lo): failed to get link speed/duplex [ 332.470252][ T33] bond7: (slave lo): failed to get link speed/duplex [ 332.580104][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 336.660143][ T44] net_ratelimit: 36 callbacks suppressed [ 336.660166][ T44] bond7: (slave lo): failed to get link speed/duplex [ 336.780022][ T44] bond7: (slave lo): failed to get link speed/duplex [ 336.890036][ T44] bond7: (slave lo): failed to get link speed/duplex [ 337.000240][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 337.110086][ T60] bond7: (slave lo): failed to get link speed/duplex [ 337.220282][ T44] bond7: (slave lo): failed to get link speed/duplex [ 337.330175][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 337.440107][ T60] bond7: (slave lo): failed to get link speed/duplex [ 337.550318][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 337.660479][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 341.760334][ T2047] net_ratelimit: 36 callbacks suppressed [ 341.760358][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 341.880081][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 341.990406][ T60] bond7: (slave lo): failed to get link speed/duplex [ 342.100038][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 342.210046][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 342.320241][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 342.430196][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 342.540260][ T44] bond7: (slave lo): failed to get link speed/duplex [ 342.650135][ T44] bond7: (slave lo): failed to get link speed/duplex [ 342.760087][T10386] bond7: (slave lo): failed to get link speed/duplex [ 346.840556][ T33] net_ratelimit: 36 callbacks suppressed [ 346.840575][ T33] bond7: (slave lo): failed to get link speed/duplex [ 346.960027][ T60] bond7: (slave lo): failed to get link speed/duplex [ 347.070317][ T60] bond7: (slave lo): failed to get link speed/duplex [ 347.180085][T10633] bond7: (slave lo): failed to get link speed/duplex [ 347.290055][T10633] bond7: (slave lo): failed to get link speed/duplex [ 347.400641][ T12] bond7: (slave lo): failed to get link speed/duplex [ 347.422591][T15446] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2770'. [ 347.434101][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 347.517729][T15446] netlink: 'syz.1.2770': attribute type 3 has an invalid length. [ 347.534122][T15449] netlink: 'syz.3.2772': attribute type 3 has an invalid length. [ 347.549192][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2772'. [ 347.551345][T15446] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2770'. [ 347.569473][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2772'. [ 347.600216][ T60] bond7: (slave lo): failed to get link speed/duplex [ 347.662973][T15457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.740164][ T33] bond7: (slave lo): failed to get link speed/duplex [ 347.748702][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 347.779045][T15462] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 347.846536][T15470] netlink: 'syz.2.2780': attribute type 11 has an invalid length. [ 347.859958][T15470] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2780'. [ 347.910517][T10386] bond7: (slave lo): failed to get link speed/duplex [ 348.066899][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 348.098266][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 348.331221][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 348.704598][T15495] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 348.716947][T15509] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 348.922304][T15529] siw: device registration error -23 [ 349.131080][T15544] netlink: 'syz.4.2803': attribute type 5 has an invalid length. [ 349.156483][T15548] bond0: entered promiscuous mode [ 349.166612][T15548] !€ÿ: entered promiscuous mode [ 349.173504][T15548] bond_slave_1: entered promiscuous mode [ 349.200678][T15548] dummy0: entered promiscuous mode [ 349.213181][T15548] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 349.231472][T15548] bridge_slave_1: entered promiscuous mode [ 349.353787][T15559] tap0: tun_chr_ioctl cmd 1074025672 [ 349.359167][T15559] tap0: ignored: set checksum disabled [ 349.473521][T15574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 349.708060][T15589] Cannot find add_set index 65532 as target [ 349.752328][T15588] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.831954][T15593] syzkaller1: entered allmulticast mode [ 350.045480][T15602] 8021q: adding VLAN 0 to HW filter on device bond11 [ 350.161592][T15613] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 350.583569][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.603159][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.613804][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.618672][T15632] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002 [ 350.630820][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.642867][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.699436][T15627] C speed is unknown, defaulting to 1000 [ 350.843326][T15641] netlink: 'syz.1.2838': attribute type 11 has an invalid length. [ 350.922209][T15639] nbd1: detected capacity change from 0 to 63 [ 350.942757][T15642] block nbd0: NBD_DISCONNECT [ 350.966313][T15642] block nbd0: Send disconnect failed -32 [ 351.014858][ T5830] block nbd1: Receive control failed (result -104) [ 351.447251][ T4563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.475675][ T4563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.504630][T15627] lo speed is unknown, defaulting to 1000 [ 351.530308][T15667] netlink: 'syz.1.2847': attribute type 10 has an invalid length. [ 351.539261][T15667] bridge0: port 1(syz_tun) entered blocking state [ 351.558607][T15667] bridge0: port 1(syz_tun) entered disabled state [ 351.569497][T15667] syz_tun: entered allmulticast mode [ 351.576718][T15667] syz_tun: entered promiscuous mode [ 351.747248][ T4563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.774759][ T4563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.850307][ T12] net_ratelimit: 21 callbacks suppressed [ 351.850329][ T12] bond7: (slave lo): failed to get link speed/duplex [ 352.097622][ T4563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.150990][ T4563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.243480][T10386] bond7: (slave lo): failed to get link speed/duplex [ 352.473804][ T4563] bond0: (slave netdevsim0): Releasing backup interface [ 352.491908][ T4563] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 352.507660][ T4563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.519011][ T4563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.539779][T15692] batadv_slave_0: entered promiscuous mode [ 352.546633][T15697] __nla_validate_parse: 12 callbacks suppressed [ 352.546648][T15697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2853'. [ 352.563189][T15697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2853'. [ 352.584155][T15695] vlan3: entered promiscuous mode [ 352.589565][T15695] bridge0: entered promiscuous mode [ 352.617669][T15695] netlink: 'syz.0.2854': attribute type 30 has an invalid length. [ 352.631576][T15691] batadv_slave_0: left promiscuous mode [ 352.661287][T15701] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.2856'. [ 352.670898][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 352.704180][T15701] tipc: Enabling of bearer rejected, already enabled [ 352.723074][ T5830] Bluetooth: hci5: command tx timeout [ 353.119034][T15729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2861'. [ 353.171243][T10633] bond7: (slave lo): failed to get link speed/duplex [ 353.200698][ T4563] bridge_slave_0: left allmulticast mode [ 353.214209][ T4563] bridge_slave_0: left promiscuous mode [ 353.232806][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.923134][ T4563] bond2 (unregistering): (slave gretap2): Releasing active interface [ 353.961472][ T4563] bond4 (unregistering): (slave gretap3): Releasing active interface [ 354.100331][ T4563] dvmrp0 (unregistering): left allmulticast mode [ 354.141065][ T4563] dvmrp1 (unregistering): left allmulticast mode [ 354.236776][ T4563] team0: Port device geneve0 removed [ 354.800138][ T5830] Bluetooth: hci5: command tx timeout [ 354.842506][T15749] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 354.890626][ T4563] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 354.901427][ T4563] !€ÿ: left promiscuous mode [ 354.909592][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.920825][ T4563] bond_slave_1: left promiscuous mode [ 354.931075][ T4563] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 354.941309][ T4563] dummy0: left promiscuous mode [ 354.949728][ T4563] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 354.961125][ T4563] bridge_slave_1: left promiscuous mode [ 354.962037][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2866'. [ 354.968473][ T4563] bond0 (unregistering): Released all slaves [ 355.104726][ T4563] bond1 (unregistering): (slave veth5): Releasing active interface [ 355.115560][ T4563] bond1 (unregistering): Released all slaves [ 355.283131][ T4563] bond2 (unregistering): Released all slaves [ 355.535382][ T4563] bond3 (unregistering): Released all slaves [ 355.554939][ T4563] bond4 (unregistering): Released all slaves [ 355.690063][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 355.733434][T15749] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 355.943620][T15627] chnl_net:caif_netlink_parms(): no params data found [ 355.985822][T15758] syzkaller0: entered promiscuous mode [ 356.004713][T15758] syzkaller0: entered allmulticast mode [ 356.042871][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2868'. [ 356.060091][ T12] bond7: (slave lo): failed to get link speed/duplex [ 356.182392][T15763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.238566][T15766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.447788][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 356.741287][T15774] bond11: Removing last ns target with arp_interval on [ 356.750797][T15781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2875'. [ 356.894955][ T5830] Bluetooth: hci5: command tx timeout [ 356.984954][T15627] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.000781][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.015572][T15627] bridge_slave_0: entered allmulticast mode [ 357.034244][T15627] bridge_slave_0: entered promiscuous mode [ 357.055566][T15627] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.090265][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.110064][T15627] bridge_slave_1: entered allmulticast mode [ 357.128728][T15627] bridge_slave_1: entered promiscuous mode [ 357.135772][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 357.168610][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 357.370836][ T4563] : left promiscuous mode [ 357.463523][T15627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.492623][ T60] bond7: (slave lo): failed to get link speed/duplex [ 357.505336][T15800] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 357.543536][T15627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.685252][ T4563] tipc: Left network mode [ 357.748461][T15627] team0: Port device team_slave_0 added [ 357.820774][T15627] team0: Port device team_slave_1 added [ 357.848123][T15818] __nla_validate_parse: 1 callbacks suppressed [ 357.848142][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 357.956503][T15826] x_tables: duplicate underflow at hook 1 [ 358.102845][T15627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.115494][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.144112][T15627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.161171][T10637] bond7: (slave lo): failed to get link speed/duplex [ 358.180240][T15627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.188149][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.215230][T15627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.522416][T15627] hsr_slave_0: entered promiscuous mode [ 358.551261][T15627] hsr_slave_1: entered promiscuous mode [ 358.558368][T15627] debugfs: 'hsr0' already exists in 'hsr' [ 358.574976][T15627] Cannot create hsr debugfs directory [ 358.678477][T15847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2895'. [ 358.711065][T15847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2895'. [ 358.740971][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2898'. [ 358.961725][ T5830] Bluetooth: hci5: command tx timeout [ 359.009326][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'. [ 359.093872][ T30] audit: type=1107 audit(1766191389.016:5): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 359.402603][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'. [ 359.442086][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 359.459613][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'. [ 359.542141][T15888] vxcan6: entered allmulticast mode [ 359.652810][T15892] vxcan6: entered allmulticast mode [ 359.715484][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 359.724987][ T4563] hsr_slave_0: left promiscuous mode [ 359.732258][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.744163][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.755218][ T4563] veth1_vlan: left allmulticast mode [ 359.761642][ T4563] veth0_vlan: left promiscuous mode [ 359.842027][T15904] netlink: 'syz.0.2907': attribute type 23 has an invalid length. [ 359.959533][ T4563] team0 (unregistering): Port device batadv2 removed [ 360.020834][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 360.282520][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 360.326642][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 360.338900][ T2983] smc: removing ib device !yz! [ 361.035153][T10638] bond7: (slave lo): failed to get link speed/duplex [ 361.115305][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'. [ 361.306393][T15933] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 361.340055][ T33] bond7: (slave lo): failed to get link speed/duplex [ 361.536339][T15941] netlink: 'syz.2.2919': attribute type 1 has an invalid length. [ 361.797765][T15960] netlink: 'syz.0.2923': attribute type 10 has an invalid length. [ 361.840585][T15941] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.955618][T15952] bond10: (slave veth21): Enslaving as an active interface with a down link [ 361.981362][T15953] vlan2: entered allmulticast mode [ 361.986722][T15953] veth1: entered allmulticast mode [ 362.039341][T15965] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 362.118185][T15965] team0: left allmulticast mode [ 362.144975][T15965] team_slave_0: left allmulticast mode [ 362.163985][T15965] ÿ: left allmulticast mode [ 362.186003][T15965] dummy0: left allmulticast mode [ 362.209224][T15965] geneve0: left allmulticast mode [ 362.222952][T15965] team0: left promiscuous mode [ 362.234796][T15965] team_slave_0: left promiscuous mode [ 362.243588][T15965] ÿ: left promiscuous mode [ 362.248587][T15965] dummy0: left promiscuous mode [ 362.256125][T15965] geneve0: left promiscuous mode [ 362.262145][T15965] bridge0: port 3(team0) entered disabled state [ 362.278691][T15965] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.307512][T15965] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.360500][ T44] bond7: (slave lo): failed to get link speed/duplex [ 362.489997][ T44] bond7: (slave lo): failed to get link speed/duplex [ 362.860389][T10386] bond7: (slave lo): failed to get link speed/duplex [ 362.928589][T15627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.000882][T15999] __nla_validate_parse: 7 callbacks suppressed [ 363.000903][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 363.056060][T15627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.253703][T16002] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 363.302215][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 363.313046][T15627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.492338][T16002] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 363.536098][T15627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.619655][T16007] syzkaller0: entered promiscuous mode [ 363.625425][T16007] syzkaller0: entered allmulticast mode [ 363.711204][T16002] bond14: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 363.732832][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 363.767216][T16002] bond15: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 363.804257][T16035] bond12: option xmit_hash_policy: invalid value (64) [ 363.813741][T16035] bond12 (unregistering): Released all slaves [ 363.901594][T16002] bond16: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 363.944929][ T4563] IPVS: stop unused estimator thread 0... [ 364.126458][ T30] audit: type=1800 audit(1766191394.046:6): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2947" name="memory.events" dev="tmpfs" ino=3165 res=0 errno=0 [ 364.148450][ T30] audit: type=1804 audit(1766191394.056:7): pid=16065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2947" name="/newroot/618/memory.events" dev="tmpfs" ino=3165 res=1 errno=0 [ 365.621563][T16062] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 365.631617][T16062] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 365.741893][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 365.852658][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 365.864733][T15627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.924248][T16083] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 365.985138][T16081] vlan0: left promiscuous mode [ 366.089767][T16088] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 366.112346][T16091] bond17: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.143678][T16091] bond17: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 366.190200][T16091] bond17: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 366.312702][T15627] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.354397][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.361636][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.451709][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.458911][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.533987][T16119] syz.1.2960: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.543278][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 366.555860][T16119] CPU: 0 UID: 0 PID: 16119 Comm: syz.1.2960 Not tainted syzkaller #0 PREEMPT(full) [ 366.555916][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.555938][T16119] Call Trace: [ 366.555948][T16119] [ 366.555957][T16119] dump_stack_lvl+0x189/0x250 [ 366.555994][T16119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.556021][T16119] ? __pfx__printk+0x10/0x10 [ 366.556053][T16119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.556078][T16119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.556104][T16119] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 366.556130][T16119] warn_alloc+0x214/0x310 [ 366.556154][T16119] ? stack_trace_save+0x9c/0xe0 [ 366.556189][T16119] ? __pfx_warn_alloc+0x10/0x10 [ 366.556220][T16119] ? kasan_save_track+0x4f/0x80 [ 366.556247][T16119] ? kasan_save_track+0x3e/0x80 [ 366.556266][T16119] ? __kasan_kmalloc+0x93/0xb0 [ 366.556288][T16119] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 366.556308][T16119] ? xskq_create+0x56/0x170 [ 366.556339][T16119] ? xsk_setsockopt+0x4dc/0x8d0 [ 366.556366][T16119] ? do_sock_setsockopt+0x17c/0x1b0 [ 366.556393][T16119] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 366.556416][T16119] ? do_syscall_64+0xfa/0xf80 [ 366.556442][T16119] __vmalloc_node_range_noprof+0x134/0x16a0 [ 366.556501][T16119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.556531][T16119] ? __kasan_kmalloc+0x93/0xb0 [ 366.556561][T16119] vmalloc_user_noprof+0xad/0xf0 [ 366.556582][T16119] ? xskq_create+0xbf/0x170 [ 366.556614][T16119] xskq_create+0xbf/0x170 [ 366.556649][T16119] xsk_init_queue+0xb0/0x110 [ 366.556683][T16119] xsk_setsockopt+0x4dc/0x8d0 [ 366.556715][T16119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.556747][T16119] ? __pfx_aa_sk_perm+0x10/0x10 [ 366.556775][T16119] ? aa_sock_opt_perm+0xff/0x1a0 [ 366.556806][T16119] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 366.556826][T16119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.556858][T16119] do_sock_setsockopt+0x17c/0x1b0 [ 366.556888][T16119] __x64_sys_setsockopt+0x13f/0x1b0 [ 366.556919][T16119] do_syscall_64+0xfa/0xf80 [ 366.556943][T16119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.556963][T16119] ? clear_bhb_loop+0x60/0xb0 [ 366.556989][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.557016][T16119] RIP: 0033:0x7f3d8f38f749 [ 366.557036][T16119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.557055][T16119] RSP: 002b:00007f3d9025c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.557078][T16119] RAX: ffffffffffffffda RBX: 00007f3d8f5e6090 RCX: 00007f3d8f38f749 [ 366.557094][T16119] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 366.557107][T16119] RBP: 00007f3d8f413f91 R08: 0000000000000004 R09: 0000000000000000 [ 366.557121][T16119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.557134][T16119] R13: 00007f3d8f5e6128 R14: 00007f3d8f5e6090 R15: 00007ffd25e7bf78 [ 366.557170][T16119] [ 366.557269][T16119] Mem-Info: [ 366.680496][ T13] bond7: (slave lo): failed to get link speed/duplex [ 366.799946][T16119] active_anon:4707 inactive_anon:0 isolated_anon:0 [ 366.799946][T16119] active_file:3144 inactive_file:39971 isolated_file:0 [ 366.799946][T16119] unevictable:768 dirty:117 writeback:0 [ 366.799946][T16119] slab_reclaimable:12060 slab_unreclaimable:105461 [ 366.799946][T16119] mapped:29110 shmem:1356 pagetables:1089 [ 366.799946][T16119] sec_pagetables:0 bounce:0 [ 366.799946][T16119] kernel_misc_reclaimable:0 [ 366.799946][T16119] free:1317808 free_pcp:14264 free_cma:0 [ 367.007707][T16119] Node 0 active_anon:18928kB inactive_anon:0kB active_file:12576kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116540kB dirty:464kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13940kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 367.117021][T15627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.128887][T16133] netlink: 'syz.3.2964': attribute type 30 has an invalid length. [ 367.152485][T16119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 367.207126][T16119] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.262109][T16139] bridge0: port 3(veth0_to_bridge) entered blocking state [ 367.271394][T16139] bridge0: port 3(veth0_to_bridge) entered disabled state [ 367.278824][T16139] veth0_to_bridge: entered allmulticast mode [ 367.280417][T16119] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 367.296843][T16119] Node 0 DMA32 free:1367096kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18936kB inactive_anon:0kB active_file:12576kB inactive_file:159684kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:41360kB local_pcp:21044kB free_cma:0kB [ 367.313412][T16141] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 367.331746][T16119] lowmem_reserve[]: 0 0 1 1 1 [ 367.346944][T16119] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.377084][T16119] lowmem_reserve[]: 0 0 0 0 0 [ 367.382237][T16119] Node 1 Normal free:3889676kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15232kB local_pcp:8992kB free_cma:0kB [ 367.416660][T16139] veth0_to_bridge: entered promiscuous mode [ 367.444958][T16119] lowmem_reserve[]: 0 0 0 0 0 [ 367.450270][T16119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 367.464514][T16119] Node 0 DMA32: 6004*4kB (UM) 3807*8kB (UME) 1470*16kB (UME) 626*32kB (UME) 241*64kB (UME) 182*128kB (UME) 120*256kB (UM) 107*512kB (UME) 68*1024kB (UM) 31*2048kB (UME) 247*4096kB (UM) = 1367080kB [ 367.481327][T10386] bond7: (slave lo): failed to get link speed/duplex [ 367.562312][T16119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.602855][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 367.623004][T16119] Node 1 Normal: 159*4kB (UME) 38*8kB (UME) 32*16kB (UME) 139*32kB (UME) 36*64kB (UME) 8*128kB (UM) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3889676kB [ 367.656253][T16119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.697969][T16119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.735201][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 367.749923][T16119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.817444][T16119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.850128][ T12] bond7: (slave lo): failed to get link speed/duplex [ 367.869281][T16119] 44469 total pagecache pages [ 367.877541][T16119] 0 pages in swap cache [ 367.890454][T16119] Free swap = 124996kB [ 367.909962][T16119] Total swap = 124996kB [ 367.914234][T16119] 2097051 pages RAM [ 367.928315][T16119] 0 pages HighMem/MovableOnly [ 367.948627][T16119] 425122 pages reserved [ 367.952963][T16119] 0 pages cma reserved [ 367.960718][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 368.074438][T15627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.120330][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 368.251509][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 368.371408][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 368.480422][T10386] bond7: (slave lo): failed to get link speed/duplex [ 368.544276][T16187] netlink: 'syz.2.2979': attribute type 2 has an invalid length. [ 368.558163][T16187] netlink: 'syz.2.2979': attribute type 8 has an invalid length. [ 368.573740][T16187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2979'. [ 368.597644][T16191] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 368.602119][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 368.720426][ T2047] bond7: (slave lo): failed to get link speed/duplex [ 368.822638][T15627] veth0_vlan: entered promiscuous mode [ 368.855906][T15627] veth1_vlan: entered promiscuous mode [ 368.901552][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 368.933445][T16207] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 368.983383][T15627] veth0_macvtap: entered promiscuous mode [ 368.994112][T15627] veth1_macvtap: entered promiscuous mode [ 369.012406][ T12] bond7: (slave lo): failed to get link speed/duplex [ 369.044351][T15627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.065335][T15627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.090922][T16212] team0 (unregistering): Port device wireguard0 removed [ 369.128831][ T2983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.138755][ T2983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.160477][ T2983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.199515][ T2983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.320611][ T44] bond7: (slave lo): failed to get link speed/duplex [ 369.464396][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.490873][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.565359][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.583786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.679004][T16231] tunl0: Caught tx_queue_len zero misconfig [ 369.784842][T16238] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2995'. [ 370.171449][T16251] x_tables: duplicate underflow at hook 3 [ 370.220780][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.243802][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.252839][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.261240][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.269020][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.335151][T16255] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2998'. [ 370.377101][T16252] lo speed is unknown, defaulting to 1000 [ 370.385098][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 370.590362][T16265] netlink: 16199 bytes leftover after parsing attributes in process `syz.4.3001'. [ 370.603850][T16267] block nbd0: Unsupported socket: should be TCP or UNIX. [ 370.618555][T16266] netlink: 16199 bytes leftover after parsing attributes in process `syz.4.3001'. [ 370.881155][T16280] netlink: 'syz.3.3004': attribute type 13 has an invalid length. [ 370.889075][T16280] netlink: 'syz.3.3004': attribute type 58 has an invalid length. [ 370.921008][T16280] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3004'. [ 371.131709][T16288] bond0: Device is already in use. [ 371.137741][T16287] bond0: Device is already in use. [ 371.302017][T16252] chnl_net:caif_netlink_parms(): no params data found [ 371.527940][T16252] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.535429][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.543455][T16252] bridge_slave_0: entered allmulticast mode [ 371.551996][T16252] bridge_slave_0: entered promiscuous mode [ 371.570779][T16252] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.587016][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.602554][T16252] bridge_slave_1: entered allmulticast mode [ 371.641806][T16252] bridge_slave_1: entered promiscuous mode [ 371.691884][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3013'. [ 371.926594][T16252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.975566][T16252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.001872][T16324] pim6reg1: entered promiscuous mode [ 372.007263][T16324] pim6reg1: entered allmulticast mode [ 372.107125][T16329] IPVS: persistence engine module ip_vs_pe_À not found [ 372.221448][T16252] team0: Port device team_slave_0 added [ 372.234583][T16333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3016'. [ 372.234892][T16252] team0: Port device team_slave_1 added [ 372.320393][ T5830] Bluetooth: hci0: command tx timeout [ 372.372640][T16252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.390048][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.459913][T16252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.502491][T16252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.509493][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.536958][T16252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.748273][T16252] hsr_slave_0: entered promiscuous mode [ 372.755567][T16252] hsr_slave_1: entered promiscuous mode [ 372.817137][T16252] debugfs: 'hsr0' already exists in 'hsr' [ 372.826521][T16252] Cannot create hsr debugfs directory [ 372.846192][T16358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3024'. [ 373.202591][T16371] 8021q: VLANs not supported on tunl0 [ 373.293595][T16376] netlink: 'syz.1.3029': attribute type 1 has an invalid length. [ 373.438287][T16252] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.480235][T16252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.498640][T16252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.551682][T10638] net_ratelimit: 15 callbacks suppressed [ 373.551749][T10638] bond7: (slave lo): failed to get link speed/duplex [ 373.632707][T16252] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.662750][T16252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.685943][T16252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.724345][T16382] pimreg: entered allmulticast mode [ 373.741178][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 373.783002][T16252] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.800106][T16252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.827611][T16252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.946269][T16252] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.966277][T16252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.003272][T16252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 374.100107][ T33] bond7: (slave lo): failed to get link speed/duplex [ 374.210420][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 374.380095][ T33] bond7: (slave lo): failed to get link speed/duplex [ 374.407505][ T5830] Bluetooth: hci0: command tx timeout [ 374.438417][T16252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.488385][T16252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.522643][T16252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.564633][T16252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.640131][T10386] bond7: (slave lo): failed to get link speed/duplex [ 374.648281][T16441] __nla_validate_parse: 4 callbacks suppressed [ 374.648300][T16441] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3045'. [ 374.761318][ T33] bond7: (slave lo): failed to get link speed/duplex [ 374.834252][T16458] netlink: 'syz.4.3050': attribute type 13 has an invalid length. [ 374.845193][T16252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.848265][T16458] netlink: 'syz.4.3050': attribute type 58 has an invalid length. [ 374.861765][T16458] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3050'. [ 374.901464][T16252] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.927062][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.934332][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.961899][T16419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.972556][T16419] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 374.981580][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 375.001476][T16465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.019157][T16419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.033189][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.040435][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.058995][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 375.068841][T16419] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 375.083849][T16466] chnl_net:caif_netlink_parms(): no params data found [ 375.092782][T16419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.106323][T16419] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 375.151222][T10633] bond7: (slave lo): failed to get link speed/duplex [ 375.185855][T16419] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 375.227708][T16419] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 375.350957][T16481] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 375.401751][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 375.404782][T16419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.418258][T10633] bond7: (slave lo): failed to get link speed/duplex [ 375.425187][T16481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3057'. [ 375.460872][T16419] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 375.653519][T16252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.825506][T16252] veth0_vlan: entered promiscuous mode [ 375.865645][T16252] veth1_vlan: entered promiscuous mode [ 375.906282][T16499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3062'. [ 375.959701][T16510] Bluetooth: MGMT ver 1.23 [ 375.966443][T16510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3065'. [ 376.012280][T16252] veth0_macvtap: entered promiscuous mode [ 376.051197][T16252] veth1_macvtap: entered promiscuous mode [ 376.123239][T16252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.139010][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 376.160901][T16252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.203950][T10638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.238289][T10638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.268717][T10638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.310789][T10638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.562989][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.573388][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.672164][T10638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.698193][T10638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.856765][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 376.860308][T16548] veth0: entered promiscuous mode [ 376.888153][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 376.931769][T16552] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 377.065264][T16552] bond11: entered promiscuous mode [ 377.101929][T16552] 8021q: adding VLAN 0 to HW filter on device bond11 [ 377.112020][T16548] veth0: left promiscuous mode [ 377.300559][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.319712][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.328603][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.338616][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.346942][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.467022][T16574] lo speed is unknown, defaulting to 1000 [ 377.974467][ T5834] syz_tun (unregistering): left allmulticast mode [ 377.995249][ T5834] syz_tun (unregistering): left promiscuous mode [ 378.021683][ T5834] bridge0: port 1(syz_tun) entered disabled state [ 378.065932][T16609] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 378.442990][T16625] team0: Cannot enslave team device to itself [ 378.539703][T16633] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.585625][T16574] chnl_net:caif_netlink_parms(): no params data found [ 379.056023][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.076890][T16574] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.092556][T16574] bridge_slave_0: entered allmulticast mode [ 379.101362][T16574] bridge_slave_0: entered promiscuous mode [ 379.112332][T16665] syzkaller0: entered promiscuous mode [ 379.123584][T16665] syzkaller0: entered allmulticast mode [ 379.164429][T16574] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.172757][T16574] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.180197][T16574] bridge_slave_1: entered allmulticast mode [ 379.188342][T16574] bridge_slave_1: entered promiscuous mode [ 379.254632][T16666] tipc: Enabled bearer , priority 0 [ 379.331985][T16678] !: renamed from dummy0 (while UP) [ 379.355952][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.380015][ T44] net_ratelimit: 21 callbacks suppressed [ 379.380410][ T44] bond7: (slave lo): failed to get link speed/duplex [ 379.411557][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.443565][ T5839] Bluetooth: hci4: command tx timeout [ 379.543524][T16574] team0: Port device team_slave_0 added [ 379.553997][T16574] team0: Port device team_slave_1 added [ 379.646703][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.700169][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.760575][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.774723][T16700] tipc: Started in network mode [ 379.783539][T16700] tipc: Node identity e0000001, cluster identity 4711 [ 379.810325][T16700] tipc: Enabling of bearer rejected, failed to enable media [ 379.820778][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.838455][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.870975][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.903455][T16663] tipc: Resetting bearer [ 379.917158][T16712] sctp: [Deprecated]: syz.3.3125 (pid 16712) Use of int in max_burst socket option. [ 379.917158][T16712] Use struct sctp_assoc_value instead [ 379.955780][T16663] tipc: Disabling bearer [ 380.023367][T16714] macsec1: entered promiscuous mode [ 380.118555][T16715] macsec1: entered promiscuous mode [ 380.284895][T16574] hsr_slave_0: entered promiscuous mode [ 380.305733][T16574] hsr_slave_1: entered promiscuous mode [ 380.321420][T16574] debugfs: 'hsr0' already exists in 'hsr' [ 380.340360][T16732] __nla_validate_parse: 4 callbacks suppressed [ 380.340380][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3129'. [ 380.356137][T16574] Cannot create hsr debugfs directory [ 380.370154][T10638] bond7: (slave lo): failed to get link speed/duplex [ 380.623151][T16748] netlink: 'syz.3.3134': attribute type 1 has an invalid length. [ 380.635557][T16746] netlink: 'syz.3.3134': attribute type 1 has an invalid length. [ 380.635557][T16749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3135'. [ 380.670069][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 380.678525][T16749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3135'. [ 380.688543][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 380.857077][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 380.930371][T10633] bond7: (slave lo): failed to get link speed/duplex [ 380.948953][T16574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.026182][T16765] netlink: 'syz.3.3140': attribute type 39 has an invalid length. [ 381.052644][T16574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.134354][T16767] bridge_slave_0: left allmulticast mode [ 381.141167][T16767] bridge_slave_0: left promiscuous mode [ 381.147466][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.167517][T16767] bridge_slave_1: left allmulticast mode [ 381.188826][T16767] bridge_slave_1: left promiscuous mode [ 381.198328][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.218778][T16767] bond0: (slave bond_slave_0): Releasing backup interface [ 381.236524][T16767] bond0: (slave bond_slave_1): Releasing backup interface [ 381.259622][T16767] team0: Port device team_slave_0 removed [ 381.273386][T16767] team0: Port device team_slave_1 removed [ 381.282321][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.289743][T16767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.299305][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.307130][T16767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.317798][T16767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.349955][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 381.448998][ T25] block nbd1: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 30 seconds [ 381.461992][ T25] block nbd1: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 30 seconds [ 381.473494][ T25] block nbd1: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 30 seconds [ 381.486924][ T25] block nbd1: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 30 seconds [ 381.515009][T16574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.533332][ T5839] Bluetooth: hci4: command tx timeout [ 381.554298][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 381.646200][T16574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.719995][ T33] bond7: (slave lo): failed to get link speed/duplex [ 381.843265][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 382.054327][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 382.096011][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 382.108047][T16574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.130759][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 382.175626][T16574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.197178][T16574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.226210][T16574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.252250][T10386] bond7: (slave lo): failed to get link speed/duplex [ 382.335582][T16832] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 382.444369][T16832] syzkaller0: entered promiscuous mode [ 382.450240][T16832] syzkaller0: entered allmulticast mode [ 382.608032][T16574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.664052][T16574] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.726207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.733483][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.793494][T16857] veth0_virt_wifi: entered promiscuous mode [ 382.802799][T16857] macvtap1: entered allmulticast mode [ 382.808661][T16857] veth0_virt_wifi: entered allmulticast mode [ 382.878812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.886051][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.213748][T16879] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 383.531363][T16891] syzkaller0: entered promiscuous mode [ 383.536929][T16891] syzkaller0: entered allmulticast mode [ 383.612759][ T5839] Bluetooth: hci4: command tx timeout [ 383.707980][T16908] netlink: 'syz.4.3175': attribute type 4 has an invalid length. [ 383.717854][T16902] bond14: entered allmulticast mode [ 383.860596][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3176'. [ 383.874905][T16906] ip6gretap1: entered allmulticast mode [ 383.891133][T16906] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 383.922857][T16899] netem: unknown loss type 0 [ 383.937749][T16899] netem: change failed [ 384.016637][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.116779][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.289321][T16574] veth0_vlan: entered promiscuous mode [ 384.304254][T16574] veth1_vlan: entered promiscuous mode [ 384.340883][T16574] veth0_macvtap: entered promiscuous mode [ 384.354049][T16574] veth1_macvtap: entered promiscuous mode [ 384.373241][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.388576][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.404734][T10633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.416671][T10633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.427390][T10633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.438270][T10633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.471736][T10386] net_ratelimit: 8 callbacks suppressed [ 384.471756][T10386] bond7: (slave lo): failed to get link speed/duplex [ 384.533631][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.550373][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.583936][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.592847][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.621749][ T13] bond7: (slave lo): failed to get link speed/duplex [ 384.730087][ T13] bond7: (slave lo): failed to get link speed/duplex [ 384.840369][ T33] bond7: (slave lo): failed to get link speed/duplex [ 384.950335][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 385.061194][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 385.170394][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 385.280566][T10641] bond7: (slave lo): failed to get link speed/duplex [ 385.390445][T10641] bond7: (slave lo): failed to get link speed/duplex [ 385.500112][T10641] bond7: (slave lo): failed to get link speed/duplex [ 385.682802][ T5839] Bluetooth: hci4: command tx timeout [ 389.580074][ T13] net_ratelimit: 36 callbacks suppressed [ 389.580096][ T13] bond7: (slave lo): failed to get link speed/duplex [ 389.700009][ T33] bond7: (slave lo): failed to get link speed/duplex [ 389.810321][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 389.921307][ T33] bond7: (slave lo): failed to get link speed/duplex [ 390.030129][ T44] bond7: (slave lo): failed to get link speed/duplex [ 390.140339][ T33] bond7: (slave lo): failed to get link speed/duplex [ 390.250086][ T33] bond7: (slave lo): failed to get link speed/duplex [ 390.360289][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 390.470498][ T33] bond7: (slave lo): failed to get link speed/duplex [ 390.580099][ T33] bond7: (slave lo): failed to get link speed/duplex [ 394.670322][ T4563] net_ratelimit: 36 callbacks suppressed [ 394.670399][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 394.800298][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 394.910342][T10641] bond7: (slave lo): failed to get link speed/duplex [ 395.020119][ T33] bond7: (slave lo): failed to get link speed/duplex [ 395.130268][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 395.240407][ T33] bond7: (slave lo): failed to get link speed/duplex [ 395.350122][ T33] bond7: (slave lo): failed to get link speed/duplex [ 395.460366][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 395.570123][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 395.680134][T10641] bond7: (slave lo): failed to get link speed/duplex [ 399.760445][ T4418] net_ratelimit: 36 callbacks suppressed [ 399.760469][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 399.880068][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 399.990314][T10641] bond7: (slave lo): failed to get link speed/duplex [ 400.100338][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 400.210066][ T13] bond7: (slave lo): failed to get link speed/duplex [ 400.320435][ T44] bond7: (slave lo): failed to get link speed/duplex [ 400.430353][ T13] bond7: (slave lo): failed to get link speed/duplex [ 400.540068][ T13] bond7: (slave lo): failed to get link speed/duplex [ 400.650313][T10641] bond7: (slave lo): failed to get link speed/duplex [ 400.760107][ T12] bond7: (slave lo): failed to get link speed/duplex [ 404.840846][ T44] net_ratelimit: 36 callbacks suppressed [ 404.840870][ T44] bond7: (slave lo): failed to get link speed/duplex [ 404.960061][ T12] bond7: (slave lo): failed to get link speed/duplex [ 405.070460][ T44] bond7: (slave lo): failed to get link speed/duplex [ 405.180060][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 405.290543][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 405.400351][ T12] bond7: (slave lo): failed to get link speed/duplex [ 405.510050][ T44] bond7: (slave lo): failed to get link speed/duplex [ 405.620099][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 405.730292][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 405.840515][ T44] bond7: (slave lo): failed to get link speed/duplex [ 409.931290][ T44] net_ratelimit: 36 callbacks suppressed [ 409.931308][ T44] bond7: (slave lo): failed to get link speed/duplex [ 410.050471][ T12] bond7: (slave lo): failed to get link speed/duplex [ 410.160635][ T33] bond7: (slave lo): failed to get link speed/duplex [ 410.271548][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 410.380166][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 410.491266][ T13] bond7: (slave lo): failed to get link speed/duplex [ 410.600374][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 410.710171][ T44] bond7: (slave lo): failed to get link speed/duplex [ 410.820488][ T13] bond7: (slave lo): failed to get link speed/duplex [ 410.930597][ T44] bond7: (slave lo): failed to get link speed/duplex [ 411.526178][ T25] block nbd1: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 60 seconds [ 411.537111][ T25] block nbd1: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 60 seconds [ 411.549386][ T25] block nbd1: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 60 seconds [ 411.560942][ T25] block nbd1: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 60 seconds [ 411.604156][ T5199] udevd[5199]: worker [15451] /devices/virtual/block/nbd1 is taking a long time [ 415.021272][ T13] net_ratelimit: 36 callbacks suppressed [ 415.021297][ T13] bond7: (slave lo): failed to get link speed/duplex [ 415.140297][T10641] bond7: (slave lo): failed to get link speed/duplex [ 415.250197][ T44] bond7: (slave lo): failed to get link speed/duplex [ 415.361997][ T13] bond7: (slave lo): failed to get link speed/duplex [ 415.470528][ T44] bond7: (slave lo): failed to get link speed/duplex [ 415.580022][ T13] bond7: (slave lo): failed to get link speed/duplex [ 415.690929][ T33] bond7: (slave lo): failed to get link speed/duplex [ 415.800312][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 415.910153][ T33] bond7: (slave lo): failed to get link speed/duplex [ 416.020060][ T13] bond7: (slave lo): failed to get link speed/duplex [ 420.100068][ T33] net_ratelimit: 36 callbacks suppressed [ 420.100092][ T33] bond7: (slave lo): failed to get link speed/duplex [ 420.220095][T10386] bond7: (slave lo): failed to get link speed/duplex [ 420.330475][T10641] bond7: (slave lo): failed to get link speed/duplex [ 420.440138][T10641] bond7: (slave lo): failed to get link speed/duplex [ 420.550068][T10386] bond7: (slave lo): failed to get link speed/duplex [ 420.670452][T10386] bond7: (slave lo): failed to get link speed/duplex [ 420.780111][T10641] bond7: (slave lo): failed to get link speed/duplex [ 420.890028][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 421.000429][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 421.110244][T10641] bond7: (slave lo): failed to get link speed/duplex [ 425.190345][ T4418] net_ratelimit: 36 callbacks suppressed [ 425.190368][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 425.310052][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 425.420518][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 425.530069][T10633] bond7: (slave lo): failed to get link speed/duplex [ 425.640014][ T44] bond7: (slave lo): failed to get link speed/duplex [ 425.750298][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 425.860001][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 425.970295][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 426.080645][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 426.190372][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 430.260016][ T3498] net_ratelimit: 36 callbacks suppressed [ 430.260043][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 430.380244][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 430.490255][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 430.600349][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 430.710047][ T44] bond7: (slave lo): failed to get link speed/duplex [ 430.820263][ T13] bond7: (slave lo): failed to get link speed/duplex [ 430.930266][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 431.040181][ T44] bond7: (slave lo): failed to get link speed/duplex [ 431.150344][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 431.260045][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 435.270597][ T44] net_ratelimit: 35 callbacks suppressed [ 435.270621][ T44] bond7: (slave lo): failed to get link speed/duplex [ 435.390322][ T13] bond7: (slave lo): failed to get link speed/duplex [ 435.500046][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 435.612380][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 435.730314][ T44] bond7: (slave lo): failed to get link speed/duplex [ 435.851390][ T44] bond7: (slave lo): failed to get link speed/duplex [ 435.960186][ T44] bond7: (slave lo): failed to get link speed/duplex [ 436.070403][ T44] bond7: (slave lo): failed to get link speed/duplex [ 436.180172][ T44] bond7: (slave lo): failed to get link speed/duplex [ 436.300916][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 440.381279][ T13] net_ratelimit: 36 callbacks suppressed [ 440.381302][ T13] bond7: (slave lo): failed to get link speed/duplex [ 440.500254][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 440.609967][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 440.720016][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 440.830231][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 440.940270][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 441.050219][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 441.159957][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 441.270018][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 441.380834][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 441.601532][ T25] block nbd1: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 90 seconds [ 441.612412][ T25] block nbd1: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 90 seconds [ 441.623437][ T25] block nbd1: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 90 seconds [ 441.634956][ T25] block nbd1: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 90 seconds [ 445.443641][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.470430][ T4563] net_ratelimit: 36 callbacks suppressed [ 445.470453][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 445.590330][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 445.700200][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 445.810158][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 445.920553][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 446.030127][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 446.140024][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 446.250276][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 446.360229][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 446.470126][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 449.329353][T16940] netlink: 'syz.3.3184': attribute type 10 has an invalid length. [ 449.348545][T16940] bridge_slave_1: left allmulticast mode [ 449.368732][T16940] bridge_slave_1: left promiscuous mode [ 449.398010][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.512233][T16940] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 449.556041][T16950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3182'. [ 449.611124][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.621769][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.631170][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.644719][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.655178][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.774345][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3188'. [ 449.831278][T16952] lo speed is unknown, defaulting to 1000 [ 449.990741][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 450.045833][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 450.070119][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3190'. [ 450.543510][T16988] vxcan1: tx address claim with dlc 0 [ 450.900462][ T4563] net_ratelimit: 31 callbacks suppressed [ 450.900482][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 450.990398][T16952] chnl_net:caif_netlink_parms(): no params data found [ 451.356065][T17037] openvswitch: netlink: Duplicate or invalid key (type 0). [ 451.377259][T16952] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.405253][T17037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.425013][T16952] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.459561][T16952] bridge_slave_0: entered allmulticast mode [ 451.489539][T16952] bridge_slave_0: entered promiscuous mode [ 451.529329][T16952] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.548467][T16952] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.569558][T16952] bridge_slave_1: entered allmulticast mode [ 451.590343][T16952] bridge_slave_1: entered promiscuous mode [ 451.650810][T17046] netlink: 'syz.1.3208': attribute type 2 has an invalid length. [ 451.676846][T17046] netlink: 'syz.1.3208': attribute type 8 has an invalid length. [ 451.698233][T17046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3208'. [ 451.763856][ T5839] Bluetooth: hci2: command tx timeout [ 451.775958][T16952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.803366][T16952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.892770][T16952] team0: Port device team_slave_0 added [ 451.907554][T16952] team0: Port device team_slave_1 added [ 452.001979][T16952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.025077][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.120021][T16952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.141717][T16952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.148726][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.269372][T16952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.286581][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.299397][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.348810][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.408612][T17075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 452.414093][T16952] hsr_slave_0: entered promiscuous mode [ 452.426905][T16952] hsr_slave_1: entered promiscuous mode [ 452.434635][T16952] debugfs: 'hsr0' already exists in 'hsr' [ 452.442356][T16952] Cannot create hsr debugfs directory [ 452.462211][ T33] bond7: (slave lo): failed to get link speed/duplex [ 452.585476][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.612200][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.636579][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.670574][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.701659][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.734240][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.792652][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.825858][T17075] wg1 speed is unknown, defaulting to 1000 [ 452.945829][T16952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.968016][T16952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.000356][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 453.107609][T16952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.138439][T16952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.202257][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 453.253757][T17123] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.294081][T16952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.311359][T16952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.334119][T17124] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 453.356543][T17124] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 453.434956][T16952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.455019][T16952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.488782][T17124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3227'. [ 453.512221][T17124] ksmbd: Unknown IPC event: 3, ignore. [ 453.532801][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 453.603436][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3231'. [ 453.661613][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 453.723106][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 453.733285][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 453.841512][ T5839] Bluetooth: hci2: command tx timeout [ 453.950754][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 453.967293][T17145] vxcan1: tx drop: invalid da for name 0x0000000000000006 [ 454.158506][T16952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.184647][T17153] xt_socket: unknown flags 0xe4 [ 454.194303][T16952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.248459][T16952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.274512][T17159] netlink: 'syz.4.3239': attribute type 21 has an invalid length. [ 454.305011][T16952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.437872][T17172] tipc: Enabling of bearer rejected, failed to enable media [ 454.739093][T16952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.771426][T16952] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.788789][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.796092][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.846554][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.853975][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.239477][T16952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.259161][T17209] netlink: 'syz.1.3251': attribute type 83 has an invalid length. [ 455.344572][T16952] veth0_vlan: entered promiscuous mode [ 455.359389][T16952] veth1_vlan: entered promiscuous mode [ 455.467569][T16952] veth0_macvtap: entered promiscuous mode [ 455.507239][T16952] veth1_macvtap: entered promiscuous mode [ 455.542957][T16952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.566842][T16952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.602653][T17226] __nla_validate_parse: 2 callbacks suppressed [ 455.602675][T17226] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3257'. [ 455.638861][T10633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.658628][T10633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.679155][T10633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.709918][T10633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.896837][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.916822][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.930162][ T5839] Bluetooth: hci2: command tx timeout [ 455.941824][T17235] x_tables: duplicate underflow at hook 1 [ 456.012936][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.021055][ T3450] net_ratelimit: 11 callbacks suppressed [ 456.021074][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 456.049867][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.172208][ T3450] bond7: (slave lo): failed to get link speed/duplex [ 456.198043][T17249] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3265'. [ 456.236995][T17251] No such timeout policy "syz0" [ 456.292384][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 456.302171][ T44] bond7: (slave lo): failed to get link speed/duplex [ 456.329379][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 456.435013][ T44] bond7: (slave lo): failed to get link speed/duplex [ 456.641356][ T4563] bond7: (slave lo): failed to get link speed/duplex [ 456.734145][T17269] syzkaller1: entered allmulticast mode [ 456.957997][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 457.014905][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.027301][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.035589][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.048890][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.059257][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.150886][ T33] bond7: (slave lo): failed to get link speed/duplex [ 457.208403][ T6167] IPVS: starting estimator thread 0... [ 457.224248][T17288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.238406][T17279] lo speed is unknown, defaulting to 1000 [ 457.260725][ T33] bond7: (slave lo): failed to get link speed/duplex [ 457.286026][T17292] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3276'. [ 457.310190][T17289] IPVS: using max 26 ests per chain, 62400 per kthread [ 457.338398][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'. [ 457.414511][ T12] bond7: (slave lo): failed to get link speed/duplex [ 457.431966][ T5839] block nbd0: Receive control failed (result -107) [ 457.555979][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 457.601048][T10386] bond7: (slave lo): failed to get link speed/duplex [ 457.631502][T17304] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 457.833148][T17304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.936638][T17310] bond1: (slave geneve2): making interface the new active one [ 457.973329][T17310] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 458.003258][T17302] syzkaller0: entered promiscuous mode [ 458.008800][T17302] syzkaller0: entered allmulticast mode [ 458.011111][ T5839] Bluetooth: hci2: command tx timeout [ 458.056613][T17279] wg1 speed is unknown, defaulting to 1000 [ 458.250958][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 458.491878][T17345] FAULT_INJECTION: forcing a failure. [ 458.491878][T17345] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 458.535852][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3291'. [ 458.549989][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.0.3290 Not tainted syzkaller #0 PREEMPT(full) [ 458.550035][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.550056][T17345] Call Trace: [ 458.550066][T17345] [ 458.550075][T17345] dump_stack_lvl+0x189/0x250 [ 458.550108][T17345] ? __pfx____ratelimit+0x10/0x10 [ 458.550128][T17345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.550153][T17345] ? __pfx__printk+0x10/0x10 [ 458.550182][T17345] ? __might_fault+0xb0/0x130 [ 458.550227][T17345] should_fail_ex+0x414/0x560 [ 458.550266][T17345] _copy_from_user+0x2d/0xb0 [ 458.550293][T17345] ___sys_recvmsg+0x12e/0x510 [ 458.550327][T17345] ? __pfx____sys_recvmsg+0x10/0x10 [ 458.550387][T17345] ? __fget_files+0x3a0/0x420 [ 458.550426][T17345] __x64_sys_recvmsg+0x198/0x260 [ 458.550456][T17345] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 458.550494][T17345] ? __pfx_ksys_write+0x10/0x10 [ 458.550520][T17345] ? do_syscall_64+0xbe/0xf80 [ 458.550546][T17345] do_syscall_64+0xfa/0xf80 [ 458.550569][T17345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.550591][T17345] ? clear_bhb_loop+0x60/0xb0 [ 458.550616][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.550637][T17345] RIP: 0033:0x7f7f9c38f749 [ 458.550656][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.550675][T17345] RSP: 002b:00007f7f9d2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 458.550698][T17345] RAX: ffffffffffffffda RBX: 00007f7f9c5e5fa0 RCX: 00007f7f9c38f749 [ 458.550713][T17345] RDX: 0000000040010723 RSI: 00002000000001c0 RDI: 0000000000000003 [ 458.550728][T17345] RBP: 00007f7f9d2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 458.550741][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.550753][T17345] R13: 00007f7f9c5e6038 R14: 00007f7f9c5e5fa0 R15: 00007ffd2c7e0888 [ 458.550789][T17345] [ 458.873527][T17354] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 458.923344][T17354] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 458.957409][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'. [ 459.077956][T17279] chnl_net:caif_netlink_parms(): no params data found [ 459.120533][ T5839] Bluetooth: hci1: command tx timeout [ 459.396084][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.426051][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.426073][T17385] FAULT_INJECTION: forcing a failure. [ 459.426073][T17385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.447306][T17385] CPU: 0 UID: 0 PID: 17385 Comm: syz.2.3302 Not tainted syzkaller #0 PREEMPT(full) [ 459.447344][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.447357][T17385] Call Trace: [ 459.447366][T17385] [ 459.447375][T17385] dump_stack_lvl+0x189/0x250 [ 459.447406][T17385] ? __pfx____ratelimit+0x10/0x10 [ 459.447427][T17385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.447453][T17385] ? __pfx__printk+0x10/0x10 [ 459.447497][T17385] should_fail_ex+0x414/0x560 [ 459.447535][T17385] _copy_to_user+0x31/0xb0 [ 459.447563][T17385] simple_read_from_buffer+0xe1/0x170 [ 459.447595][T17385] proc_fail_nth_read+0x1b3/0x220 [ 459.447622][T17385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.447648][T17385] ? rw_verify_area+0x2a6/0x4d0 [ 459.447668][T17385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.447692][T17385] vfs_read+0x200/0xa30 [ 459.447711][T17385] ? fdget_pos+0x247/0x320 [ 459.447741][T17385] ? __pfx___mutex_lock+0x10/0x10 [ 459.447765][T17385] ? __pfx_vfs_read+0x10/0x10 [ 459.447786][T17385] ? __fget_files+0x2a/0x420 [ 459.447817][T17385] ? __fget_files+0x3a0/0x420 [ 459.447842][T17385] ? __fget_files+0x2a/0x420 [ 459.447878][T17385] ksys_read+0x145/0x250 [ 459.447901][T17385] ? __pfx_ksys_read+0x10/0x10 [ 459.447926][T17385] ? do_syscall_64+0xbe/0xf80 [ 459.447953][T17385] do_syscall_64+0xfa/0xf80 [ 459.447976][T17385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.447995][T17385] ? clear_bhb_loop+0x60/0xb0 [ 459.448019][T17385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.448039][T17385] RIP: 0033:0x7fceffb8e15c [ 459.448058][T17385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 459.448076][T17385] RSP: 002b:00007fcf00a93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.448098][T17385] RAX: ffffffffffffffda RBX: 00007fceffde5fa0 RCX: 00007fceffb8e15c [ 459.448113][T17385] RDX: 000000000000000f RSI: 00007fcf00a930a0 RDI: 0000000000000004 [ 459.448125][T17385] RBP: 00007fcf00a93090 R08: 0000000000000000 R09: 0000000000000000 [ 459.448138][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.448150][T17385] R13: 00007fceffde6038 R14: 00007fceffde5fa0 R15: 00007ffcd26bffe8 [ 459.448186][T17385] [ 459.676393][T17279] bridge_slave_0: entered allmulticast mode [ 459.685289][T17279] bridge_slave_0: entered promiscuous mode [ 459.696462][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.703772][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.712072][T17279] bridge_slave_1: entered allmulticast mode [ 459.720550][T17279] bridge_slave_1: entered promiscuous mode [ 459.890323][T10386] veth0_to_bridge: left allmulticast mode [ 459.896241][T10386] veth0_to_bridge: left promiscuous mode [ 459.926309][T10386] bridge0: port 3(veth0_to_bridge) entered disabled state [ 459.943505][T10386] bridge_slave_0: left allmulticast mode [ 459.949400][T10386] bridge_slave_0: left promiscuous mode [ 459.955685][T10386] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.990855][T17383] block nbd0: NBD_DISCONNECT [ 459.996055][T17383] block nbd0: Send disconnect failed -32 [ 460.011168][T17383] block nbd0: shutting down sockets [ 460.085107][T10386] bond14 (unregistering): (slave ip6gretap1): Releasing backup interface [ 460.097839][T10386] ip6gretap1 (unregistering): left allmulticast mode [ 460.399273][T10386] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 460.429504][T10386] bond5 (unregistering): (slave gretap2): Releasing active interface [ 460.485908][T10386] dvmrp6 (unregistering): left allmulticast mode [ 460.516220][T10386] bond3 (unregistering): (slave geneve2): Releasing active interface [ 460.556838][T10386] team0: Port device geneve0 removed [ 461.060896][T10386] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 461.200365][ T5839] Bluetooth: hci1: command tx timeout [ 461.497248][T10386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.510554][T10386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.523896][T10386] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 461.536660][T10386] bond0 (unregistering): (slave team0): Releasing backup interface [ 461.547537][T10386] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.562926][T10386] bond0 (unregistering): Released all slaves [ 461.664719][T10386] bond1 (unregistering): (slave bond2): Releasing backup interface [ 461.673773][T10386] bond1 (unregistering): Released all slaves [ 461.776326][T10386] bond2 (unregistering): Released all slaves [ 461.790334][T10386] bond3 (unregistering): Released all slaves [ 461.804980][T10386] bond4 (unregistering): Released all slaves [ 461.818847][T10386] bond5 (unregistering): Released all slaves [ 461.927649][T10386] bond6 (unregistering): Released all slaves [ 461.943724][T10386] bond7 (unregistering): Released all slaves [ 462.046532][T10386] bond8 (unregistering): Released all slaves [ 462.061986][T10386] bond9 (unregistering): Released all slaves [ 462.160929][T10386] bond10 (unregistering): Released all slaves [ 462.179359][T10386] bond11 (unregistering): Released all slaves [ 462.193784][T10386] bond12 (unregistering): Released all slaves [ 462.212529][T10386] bond13 (unregistering): Released all slaves [ 462.227868][T10386] bond14 (unregistering): Released all slaves [ 462.248459][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.289566][ T12] net_ratelimit: 5 callbacks suppressed [ 462.289589][ T12] bond7: (slave lo): failed to get link speed/duplex [ 462.340050][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.527250][T17279] team0: Port device team_slave_0 added [ 462.569092][T17279] team0: Port device team_slave_1 added [ 462.755417][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.788656][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.892010][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.910823][T17447] __nla_validate_parse: 1 callbacks suppressed [ 462.910842][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 462.920317][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.934178][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.964071][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.976272][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3316'. [ 463.016387][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'. [ 463.034537][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'. [ 463.051611][T10641] bond7: (slave lo): failed to get link speed/duplex [ 463.217239][T17279] hsr_slave_0: entered promiscuous mode [ 463.241817][T17279] hsr_slave_1: entered promiscuous mode [ 463.261351][T17279] debugfs: 'hsr0' already exists in 'hsr' [ 463.272790][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 463.275205][T17279] Cannot create hsr debugfs directory [ 463.283880][ T5839] Bluetooth: hci1: command tx timeout [ 463.580790][T17479] netlink: 'syz.4.3328': attribute type 29 has an invalid length. [ 463.637333][T17473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 463.716776][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 463.797113][T17479] netlink: 'syz.4.3328': attribute type 29 has an invalid length. [ 463.819327][T17487] hsr_slave_0: left promiscuous mode [ 463.828005][T17487] hsr_slave_1: left promiscuous mode [ 463.879070][T17479] netlink: 'syz.4.3328': attribute type 29 has an invalid length. [ 463.942078][T17497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 463.952864][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 464.107051][T17500] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 464.345914][ T4516] bond7: (slave lo): failed to get link speed/duplex [ 464.358948][T10386] tipc: Disabling bearer [ 464.378705][T10386] tipc: Left network mode [ 464.493344][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 464.518255][T17519] netlink: 'syz.0.3340': attribute type 1 has an invalid length. [ 464.541722][T17519] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3340'. [ 464.772378][ T4516] bond7: (slave lo): failed to get link speed/duplex [ 464.971701][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 465.140051][ T4418] bond7: (slave lo): failed to get link speed/duplex [ 465.207099][T17279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.360466][ T5839] Bluetooth: hci1: command tx timeout [ 465.385451][T17279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.403743][T17551] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 465.441047][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 465.538355][T17551] bond1: entered promiscuous mode [ 465.548914][T17551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.558800][T17279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.658892][T17279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.926196][T10386] hsr_slave_0: left promiscuous mode [ 465.941925][T10386] hsr_slave_1: left promiscuous mode [ 465.948243][T10386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.964522][T10386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.013990][T10386] pimreg3 (unregistering): left allmulticast mode [ 466.052577][T10386] pimreg (unregistering): left allmulticast mode [ 466.280286][T17596] IPv6: addrconf: prefix option has invalid lifetime [ 466.648310][T10386] team0 (unregistering): Port device ÿ removed [ 466.707198][T10386] team0 (unregistering): Port device team_slave_0 removed [ 466.944046][T10386] team0 (unregistering): Port device dummy0 removed [ 467.138454][T17601] vlan2: entered allmulticast mode [ 467.172399][T17601] gretap0: entered allmulticast mode [ 467.292971][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 467.347438][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.424330][T10636] bond7: (slave lo): failed to get link speed/duplex [ 467.442706][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.494052][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.501380][T10634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.560014][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 467.572674][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.579907][T10634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.671498][ T3498] bond7: (slave lo): failed to get link speed/duplex [ 467.765730][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.811242][T10641] bond7: (slave lo): failed to get link speed/duplex [ 467.848227][T10386] IPVS: stop unused estimator thread 0... [ 467.930049][T10633] bond7: (slave lo): failed to get link speed/duplex [ 468.049895][T10633] bond7: (slave lo): failed to get link speed/duplex [ 468.180242][T10633] bond7: (slave lo): failed to get link speed/duplex [ 468.226081][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.334425][T17279] veth0_vlan: entered promiscuous mode [ 468.343678][ T60] bond7: (slave lo): failed to get link speed/duplex [ 468.377588][T17279] veth1_vlan: entered promiscuous mode [ 468.458353][T17279] veth0_macvtap: entered promiscuous mode [ 468.487479][T10386] bond7: (slave lo): failed to get link speed/duplex [ 468.519391][T17279] veth1_macvtap: entered promiscuous mode [ 468.583543][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.618094][T17643] __nla_validate_parse: 7 callbacks suppressed [ 468.618117][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 468.663456][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.701647][ T6264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.726902][ T6264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.757422][ T6264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.803993][ T6264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.947916][T17677] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 468.984159][T17680] netlink: 'syz.1.3383': attribute type 1 has an invalid length. [ 469.075197][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.098491][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.169211][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.188099][T17686] sctp: [Deprecated]: syz.2.3385 (pid 17686) Use of int in maxseg socket option. [ 469.188099][T17686] Use struct sctp_assoc_value instead [ 469.207000][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.226134][T17688] netlink: 'syz.4.3386': attribute type 9 has an invalid length. [ 469.238471][T17688] netlink: 'syz.4.3386': attribute type 11 has an invalid length. [ 469.247990][T17688] netlink: 'syz.4.3386': attribute type 12 has an invalid length. [ 469.257152][T17688] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3386'. [ 469.268379][T17687] veth3: entered allmulticast mode [ 469.286043][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3386'. [ 469.327646][T17685] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 469.344373][T17685] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 469.519049][T17705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3387'. [ 469.539586][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.547538][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.571169][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 469.623697][T17708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3390'. [ 469.689625][T17710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.696969][T17710] IPv6: NLM_F_CREATE should be set when creating new route [ 469.704441][T17710] IPv6: NLM_F_CREATE should be set when creating new route [ 469.711760][T17710] IPv6: NLM_F_CREATE should be set when creating new route [ 469.734324][T17712] bond0: (slave rose0): Error: Device can not be enslaved while up [ 469.745723][T17714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.856790][T17716] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3393'. [ 469.874183][T17721] syzkaller1: entered promiscuous mode [ 469.880185][T17721] syzkaller1: entered allmulticast mode [ 469.964667][T17723] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 469.972494][T17723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3395'. [ 469.989532][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'. [ 470.001795][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3395'. [ 470.055205][T17728] netem: change failed [ 470.191778][T17735] IPv6: sit1: Disabled Multicast RS [ 470.281527][T17733] [ 470.283939][T17733] ====================================================== [ 470.290975][T17733] WARNING: possible circular locking dependency detected [ 470.298107][T17733] syzkaller #0 Not tainted [ 470.302540][T17733] ------------------------------------------------------ [ 470.309582][T17733] syz.2.3397/17733 is trying to acquire lock: [ 470.315715][T17733] ffff88814135ee78 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450 [ 470.325171][T17733] [ 470.325171][T17733] but task is already holding lock: [ 470.332565][T17733] ffff88814135e938 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 470.342784][T17733] [ 470.342784][T17733] which lock already depends on the new lock. [ 470.342784][T17733] [ 470.353198][T17733] [ 470.353198][T17733] the existing dependency chain (in reverse order) is: [ 470.362229][T17733] [ 470.362229][T17733] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 470.370872][T17733] blk_alloc_queue+0x52f/0x610 [ 470.376185][T17733] __blk_mq_alloc_disk+0x15c/0x340 [ 470.381894][T17733] nbd_dev_add+0x46c/0xae0 [ 470.386906][T17733] nbd_init+0x168/0x1f0 [ 470.391618][T17733] do_one_initcall+0x1fb/0x820 [ 470.396936][T17733] do_initcall_level+0x104/0x190 [ 470.402415][T17733] do_initcalls+0x59/0xa0 [ 470.407292][T17733] kernel_init_freeable+0x334/0x4b0 [ 470.413066][T17733] kernel_init+0x1d/0x1d0 [ 470.417952][T17733] ret_from_fork+0x599/0xb30 [ 470.423174][T17733] ret_from_fork_asm+0x1a/0x30 [ 470.428581][T17733] [ 470.428581][T17733] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 470.435828][T17733] fs_reclaim_acquire+0x72/0x100 [ 470.441330][T17733] kmem_cache_alloc_node_noprof+0x48/0x720 [ 470.447709][T17733] __alloc_skb+0x255/0x430 [ 470.452673][T17733] __ip6_append_data+0x2c16/0x3f30 [ 470.458336][T17733] ip6_append_data+0x1c1/0x380 [ 470.463638][T17733] rawv6_sendmsg+0x1286/0x1830 [ 470.468955][T17733] __sock_sendmsg+0x19c/0x270 [ 470.474181][T17733] ____sys_sendmsg+0x505/0x820 [ 470.479485][T17733] ___sys_sendmsg+0x21f/0x2a0 [ 470.484701][T17733] __x64_sys_sendmsg+0x19b/0x260 [ 470.490176][T17733] do_syscall_64+0xfa/0xf80 [ 470.495226][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.501666][T17733] [ 470.501666][T17733] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 470.509420][T17733] lock_sock_nested+0x48/0x100 [ 470.514732][T17733] inet_shutdown+0x6a/0x390 [ 470.519778][T17733] nbd_mark_nsock_dead+0x2e9/0x560 [ 470.525441][T17733] recv_work+0x1b38/0x1c50 [ 470.530391][T17733] process_scheduled_works+0xad1/0x1770 [ 470.536567][T17733] worker_thread+0x8a0/0xda0 [ 470.541700][T17733] kthread+0x711/0x8a0 [ 470.546310][T17733] ret_from_fork+0x599/0xb30 [ 470.551480][T17733] ret_from_fork_asm+0x1a/0x30 [ 470.556882][T17733] [ 470.556882][T17733] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 470.564561][T17733] __mutex_lock+0x187/0x1350 [ 470.569706][T17733] nbd_queue_rq+0x257/0xf10 [ 470.574760][T17733] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 470.580848][T17733] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 470.587724][T17733] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 470.594251][T17733] blk_mq_run_hw_queue+0x348/0x4f0 [ 470.599934][T17733] blk_mq_dispatch_list+0xd0b/0xe00 [ 470.605695][T17733] blk_mq_flush_plug_list+0x469/0x550 [ 470.611622][T17733] __blk_flush_plug+0x3d3/0x4b0 [ 470.617030][T17733] __submit_bio+0x2d0/0x5a0 [ 470.622091][T17733] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 470.628285][T17733] block_read_full_folio+0x599/0x830 [ 470.634119][T17733] filemap_read_folio+0x117/0x380 [ 470.639684][T17733] do_read_cache_folio+0x358/0x590 [ 470.645342][T17733] read_part_sector+0xb6/0x2b0 [ 470.650654][T17733] adfspart_check_ICS+0xa4/0xa50 [ 470.656134][T17733] bdev_disk_changed+0x75f/0x14b0 [ 470.661706][T17733] blkdev_get_whole+0x380/0x510 [ 470.667105][T17733] bdev_open+0x31e/0xd30 [ 470.671990][T17733] blkdev_open+0x457/0x600 [ 470.676960][T17733] do_dentry_open+0x7ce/0x1420 [ 470.682265][T17733] vfs_open+0x3b/0x340 [ 470.686877][T17733] path_openat+0x340e/0x3dd0 [ 470.692011][T17733] do_filp_open+0x1fa/0x410 [ 470.697055][T17733] do_sys_openat2+0x121/0x200 [ 470.702277][T17733] __x64_sys_openat+0x138/0x170 [ 470.707671][T17733] do_syscall_64+0xfa/0xf80 [ 470.712711][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.719157][T17733] [ 470.719157][T17733] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 470.726423][T17733] __mutex_lock+0x187/0x1350 [ 470.731570][T17733] nbd_queue_rq+0xc8/0xf10 [ 470.736554][T17733] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 470.742651][T17733] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 470.749536][T17733] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 470.756071][T17733] blk_mq_run_hw_queue+0x348/0x4f0 [ 470.761728][T17733] blk_mq_dispatch_list+0xd0b/0xe00 [ 470.767497][T17733] blk_mq_flush_plug_list+0x469/0x550 [ 470.773418][T17733] __blk_flush_plug+0x3d3/0x4b0 [ 470.778823][T17733] __submit_bio+0x2d0/0x5a0 [ 470.783873][T17733] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 470.790058][T17733] block_read_full_folio+0x599/0x830 [ 470.795901][T17733] filemap_read_folio+0x117/0x380 [ 470.801479][T17733] do_read_cache_folio+0x358/0x590 [ 470.807139][T17733] read_part_sector+0xb6/0x2b0 [ 470.812460][T17733] adfspart_check_ICS+0xa4/0xa50 [ 470.817948][T17733] bdev_disk_changed+0x75f/0x14b0 [ 470.823515][T17733] blkdev_get_whole+0x380/0x510 [ 470.828919][T17733] bdev_open+0x31e/0xd30 [ 470.833713][T17733] blkdev_open+0x457/0x600 [ 470.838693][T17733] do_dentry_open+0x7ce/0x1420 [ 470.844002][T17733] vfs_open+0x3b/0x340 [ 470.848616][T17733] path_openat+0x340e/0x3dd0 [ 470.853744][T17733] do_filp_open+0x1fa/0x410 [ 470.858780][T17733] do_sys_openat2+0x121/0x200 [ 470.863998][T17733] __x64_sys_openat+0x138/0x170 [ 470.869396][T17733] do_syscall_64+0xfa/0xf80 [ 470.874448][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.880895][T17733] [ 470.880895][T17733] -> #1 (set->srcu){.+.+}-{0:0}: [ 470.888043][T17733] __synchronize_srcu+0x96/0x390 [ 470.893616][T17733] elevator_switch+0x12b/0x5f0 [ 470.898924][T17733] elevator_change+0x2cd/0x450 [ 470.904228][T17733] elevator_set_default+0x1af/0x2b0 [ 470.909979][T17733] blk_register_queue+0x34e/0x3f0 [ 470.915561][T17733] __add_disk+0x677/0xd50 [ 470.920448][T17733] add_disk_fwnode+0xfc/0x480 [ 470.925690][T17733] nbd_dev_add+0x717/0xae0 [ 470.930672][T17733] nbd_init+0x168/0x1f0 [ 470.935376][T17733] do_one_initcall+0x1fb/0x820 [ 470.940686][T17733] do_initcall_level+0x104/0x190 [ 470.946162][T17733] do_initcalls+0x59/0xa0 [ 470.951028][T17733] kernel_init_freeable+0x334/0x4b0 [ 470.956766][T17733] kernel_init+0x1d/0x1d0 [ 470.961640][T17733] ret_from_fork+0x599/0xb30 [ 470.966772][T17733] ret_from_fork_asm+0x1a/0x30 [ 470.972083][T17733] [ 470.972083][T17733] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 470.979967][T17733] __lock_acquire+0x15a6/0x2cf0 [ 470.985369][T17733] lock_acquire+0x117/0x340 [ 470.990416][T17733] __mutex_lock+0x187/0x1350 [ 470.995559][T17733] elevator_change+0x1b4/0x450 [ 471.000872][T17733] elevator_set_none+0x98/0x110 [ 471.006267][T17733] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 471.012623][T17733] nbd_start_device+0x17f/0xb10 [ 471.018055][T17733] nbd_genl_connect+0x1353/0x1900 [ 471.023627][T17733] genl_family_rcv_msg_doit+0x215/0x300 [ 471.029711][T17733] genl_rcv_msg+0x60e/0x790 [ 471.034748][T17733] netlink_rcv_skb+0x208/0x470 [ 471.040058][T17733] genl_rcv+0x28/0x40 [ 471.044582][T17733] netlink_unicast+0x82f/0x9e0 [ 471.049896][T17733] netlink_sendmsg+0x805/0xb30 [ 471.055206][T17733] __sock_sendmsg+0x21c/0x270 [ 471.060434][T17733] ____sys_sendmsg+0x505/0x820 [ 471.065743][T17733] ___sys_sendmsg+0x21f/0x2a0 [ 471.070959][T17733] __x64_sys_sendmsg+0x19b/0x260 [ 471.076444][T17733] do_syscall_64+0xfa/0xf80 [ 471.081504][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.087941][T17733] [ 471.087941][T17733] other info that might help us debug this: [ 471.087941][T17733] [ 471.098186][T17733] Chain exists of: [ 471.098186][T17733] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 471.098186][T17733] [ 471.111961][T17733] Possible unsafe locking scenario: [ 471.111961][T17733] [ 471.119425][T17733] CPU0 CPU1 [ 471.124810][T17733] ---- ---- [ 471.130186][T17733] lock(&q->q_usage_counter(io)#49); [ 471.135594][T17733] lock(fs_reclaim); [ 471.142121][T17733] lock(&q->q_usage_counter(io)#49); [ 471.150044][T17733] lock(&q->elevator_lock); [ 471.154650][T17733] [ 471.154650][T17733] *** DEADLOCK *** [ 471.154650][T17733] [ 471.162806][T17733] 6 locks held by syz.2.3397/17733: [ 471.168020][T17733] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.176230][T17733] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 471.185222][T17733] #2: ffff888024e509d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80 [ 471.196664][T17733] #3: ffff888024e508d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80 [ 471.207664][T17733] #4: ffff88814135e938 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 471.218355][T17733] #5: ffff88814135e970 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x199/0x450 [ 471.229280][T17733] [ 471.229280][T17733] stack backtrace: [ 471.235186][T17733] CPU: 0 UID: 0 PID: 17733 Comm: syz.2.3397 Not tainted syzkaller #0 PREEMPT(full) [ 471.235207][T17733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.235218][T17733] Call Trace: [ 471.235226][T17733] [ 471.235234][T17733] dump_stack_lvl+0x189/0x250 [ 471.235258][T17733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.235278][T17733] ? __pfx__printk+0x10/0x10 [ 471.235304][T17733] ? print_lock_name+0xde/0x100 [ 471.235329][T17733] print_circular_bug+0x2e2/0x300 [ 471.235352][T17733] check_noncircular+0x12e/0x150 [ 471.235376][T17733] __lock_acquire+0x15a6/0x2cf0 [ 471.235395][T17733] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.235425][T17733] ? elevator_change+0x1b4/0x450 [ 471.235451][T17733] lock_acquire+0x117/0x340 [ 471.235466][T17733] ? elevator_change+0x1b4/0x450 [ 471.235489][T17733] ? work_grab_pending+0x44f/0x990 [ 471.235512][T17733] __mutex_lock+0x187/0x1350 [ 471.235530][T17733] ? elevator_change+0x1b4/0x450 [ 471.235554][T17733] ? enable_work+0x1b9/0x2b0 [ 471.235575][T17733] ? elevator_change+0x1b4/0x450 [ 471.235595][T17733] ? enable_work+0x21a/0x2b0 [ 471.235616][T17733] ? __pfx___mutex_lock+0x10/0x10 [ 471.235638][T17733] ? __cancel_work_sync+0xf7/0x110 [ 471.235659][T17733] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 471.235684][T17733] elevator_change+0x1b4/0x450 [ 471.235709][T17733] elevator_set_none+0x98/0x110 [ 471.235730][T17733] ? __pfx_elevator_set_none+0x10/0x10 [ 471.235753][T17733] ? xa_load+0x1ea/0x210 [ 471.235775][T17733] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 471.235806][T17733] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 471.235825][T17733] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 471.235855][T17733] ? sysfs_add_file_mode_ns+0x259/0x300 [ 471.235885][T17733] nbd_start_device+0x17f/0xb10 [ 471.235914][T17733] ? device_create_file+0xf4/0x1b0 [ 471.235942][T17733] nbd_genl_connect+0x1353/0x1900 [ 471.235970][T17733] ? __pfx_nbd_genl_connect+0x10/0x10 [ 471.235996][T17733] ? rcu_is_watching+0x15/0xb0 [ 471.236019][T17733] ? __nla_parse+0x40/0x60 [ 471.236038][T17733] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 471.236059][T17733] genl_family_rcv_msg_doit+0x215/0x300 [ 471.236079][T17733] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.236099][T17733] ? __lock_acquire+0x6b6/0x2cf0 [ 471.236119][T17733] genl_rcv_msg+0x60e/0x790 [ 471.236136][T17733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.236151][T17733] ? __pfx_nbd_genl_connect+0x10/0x10 [ 471.236180][T17733] netlink_rcv_skb+0x208/0x470 [ 471.236204][T17733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.236219][T17733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.236246][T17733] ? down_read+0x274/0x2e0 [ 471.236264][T17733] ? genl_rcv+0xd/0x40 [ 471.236278][T17733] genl_rcv+0x28/0x40 [ 471.236292][T17733] netlink_unicast+0x82f/0x9e0 [ 471.236313][T17733] ? __pfx_netlink_unicast+0x10/0x10 [ 471.236332][T17733] ? plist_check_list+0x2f4/0x310 [ 471.236355][T17733] ? netlink_sendmsg+0x642/0xb30 [ 471.236376][T17733] ? skb_put+0x11b/0x210 [ 471.236396][T17733] netlink_sendmsg+0x805/0xb30 [ 471.236422][T17733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.236450][T17733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.236473][T17733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.236488][T17733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.236510][T17733] __sock_sendmsg+0x21c/0x270 [ 471.236537][T17733] ____sys_sendmsg+0x505/0x820 [ 471.236560][T17733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.236583][T17733] ? import_iovec+0x74/0xa0 [ 471.236604][T17733] ___sys_sendmsg+0x21f/0x2a0 [ 471.236625][T17733] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.236647][T17733] ? futex_wait+0x285/0x360 [ 471.236679][T17733] ? __fget_files+0x2a/0x420 [ 471.236700][T17733] ? __fget_files+0x3a0/0x420 [ 471.236725][T17733] __x64_sys_sendmsg+0x19b/0x260 [ 471.236746][T17733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.236773][T17733] ? do_syscall_64+0xbe/0xf80 [ 471.236792][T17733] do_syscall_64+0xfa/0xf80 [ 471.236810][T17733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.236826][T17733] ? clear_bhb_loop+0x60/0xb0 [ 471.236845][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.236861][T17733] RIP: 0033:0x7fceffb8f749 [ 471.236877][T17733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.236891][T17733] RSP: 002b:00007fcf00a93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.236909][T17733] RAX: ffffffffffffffda RBX: 00007fceffde5fa0 RCX: 00007fceffb8f749 [ 471.236921][T17733] RDX: 0000000020000800 RSI: 0000200000000000 RDI: 0000000000000007 [ 471.236932][T17733] RBP: 00007fceffc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.236943][T17733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.236953][T17733] R13: 00007fceffde6038 R14: 00007fceffde5fa0 R15: 00007ffcd26bffe8 [ 471.236972][T17733] [ 471.738269][ T25] block nbd1: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 120 seconds [ 471.749607][ T25] block nbd1: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 120 seconds [ 471.761023][ T25] block nbd1: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 120 seconds [ 471.772268][ T25] block nbd1: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 120 seconds [ 471.807630][T17744] !: renamed from dummy0 (while UP) [ 471.846113][T17740] syzkaller0: entered promiscuous mode [ 471.853371][T17740] syzkaller0: entered allmulticast mode [ 471.884527][ T5830] block nbd0: Receive control failed (result -32) [ 471.891209][ T5839] block nbd0: Receive control failed (result -32) [ 472.320132][ T12] net_ratelimit: 17 callbacks suppressed [ 472.320154][ T12] bond7: (slave lo): failed to get link speed/duplex [ 472.439971][ T12] bond7: (slave lo): failed to get link speed/duplex [ 472.549975][ T12] bond7: (slave lo): failed to get link speed/duplex [ 472.660218][T10641] bond7: (slave lo): failed to get link speed/duplex [ 472.769956][T10641] bond7: (slave lo): failed to get link speed/duplex [ 472.880363][ T12] bond7: (slave lo): failed to get link speed/duplex [ 472.990074][ T12] bond7: (slave lo): failed to get link speed/duplex [ 473.099884][ T12] bond7: (slave lo): failed to get link speed/duplex [ 473.209914][ T2983] bond7: (slave lo): failed to get link speed/duplex [ 473.319906][ T12] bond7: (slave lo): failed to get link speed/duplex [ 477.409898][T10634] net_ratelimit: 36 callbacks suppressed [ 477.409926][T10634] bond7: (slave lo): failed to get link speed/duplex [ 477.529958][ T60] bond7: (slave lo): failed to get link speed/duplex [ 477.640320][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 477.749902][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 477.860061][ T4516] bond7: (slave lo): failed to get link speed/duplex [ 477.969937][ T4516] bond7: (slave lo): failed to get link speed/duplex [ 478.080528][ T60] bond7: (slave lo): failed to get link speed/duplex [ 478.189906][ T60] bond7: (slave lo): failed to get link speed/duplex [ 478.300013][ T6264] bond7: (slave lo): failed to get link speed/duplex [ 478.410140][T10636] bond7: (slave lo): failed to get link speed/duplex