last executing test programs: 1m26.997149432s ago: executing program 0 (id=2252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0xff16) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) socket$xdp(0x2c, 0x3, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000400000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) 1m26.34444306s ago: executing program 0 (id=2261): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000016000000b10000007f"], 0x48) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000000018120000000000020000", @ANYRES32=r0, @ANYBLOB="00000000000000fcf7ffffffffffff00180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1m26.084071584s ago: executing program 0 (id=2266): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYRES32=r8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, r9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 1m25.532620828s ago: executing program 0 (id=2275): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) connect$pptp(r7, &(0x7f0000000380)={0x18, 0x2, {0x2, @remote}}, 0x1e) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002700)='^', 0x1}], 0x1}}], 0x2, 0x48040) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000540)=0x9, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() close(0x4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41009000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fedbdf25180000000c000600020000000000000008000300", @ANYRES32=r3, @ANYBLOB="c8defc689eb78a26ef0300775e7c44667804eb108c17fd0000fac78090be848b4801986b43b258e525091d5618c4d6f800000000000000001794f8be"], 0x28}, 0x1, 0x0, 0x0, 0x40894}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delqdisc={0x44, 0x25, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0xe}, {0x8, 0x4}, {0x8, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_RATE={0x6, 0x5, {0x26, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x31a1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4399}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x81) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) 1m25.441335734s ago: executing program 2 (id=2276): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000080)=""/73, &(0x7f0000000000)=0x49) 1m25.290018889s ago: executing program 2 (id=2278): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xd43}, {0x6, 0x0, 0x2}]}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107070400", 0xd) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000240)=0x5b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$inet6(r5, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x8, 0x3}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xcc}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x5, 0x6, 0x7, 0x7f}, {0x5, 0x1, 0x83, 0x7fffffff}, {0xfd63, 0x17, 0x2, 0x7}, {0xfffd, 0xa, 0x6, 0x8b}, {0x7fff, 0xfc, 0x3, 0xd}, {0x48, 0x1, 0x6, 0x80}]}, 0x10) 1m25.229287851s ago: executing program 3 (id=2279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8600}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000340)='wlan1\x00', &(0x7f0000000380)=@default_ap_ssid, 0x6, 0x2) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x2}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x454}, 0x8080) 1m25.08036748s ago: executing program 0 (id=2282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x1000000000000010, 0x80802, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106004000000000005c0900000024000480130001"], 0x38}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 1m24.706830612s ago: executing program 1 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x10) 1m24.616965897s ago: executing program 1 (id=2285): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="b2eba404251882f32422f6bffeccd3"], 0x48}}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x9, 0xa, 0xe0, 0x80}, 0x6e6bbd}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in=@empty, 0x3b, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m24.545308146s ago: executing program 3 (id=2286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000080)) accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private}, &(0x7f00000000c0)=0x80) (async) r1 = accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7d, 0xa8, @random="ca067ce48a4a677975b1503ebece73b8e8d056fee44d29f608a49572ae9e39408588ed09f72876b539a6e03c3cb4bdff02b8b5a96d5941cfbcea5c4c39e09026ca8ae4cd761f76b4419905b56557a96d9e43e76bef1232cc0f258417c7f2fdfbe52cfc4293bc0479e96c545c2c91a0c8b54dd1cd64bedb5e8e"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20020810) 1m24.521242325s ago: executing program 1 (id=2288): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x67, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0x6, [{@rand_addr=0x64010102, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xa03b}], 0x1, 0x10020, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x4c}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r2 = socket$inet(0x2, 0x80000, 0x8000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @loopback}, &(0x7f0000000340)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x282}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) clock_gettime(0xfffffffffffffff6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r6, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1c, 0xffffffff, 0x7, 0x0, 0x10081, r1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @value=r6}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010100, @local}, 0x8) close(0x3) 1m24.507129939s ago: executing program 3 (id=2289): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt(r1, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0x6) write(r4, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r4}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m24.338855925s ago: executing program 2 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) 1m24.322231658s ago: executing program 2 (id=2291): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x7, 0x4, {{0x30, 0x4, 0x2, 0x8, 0xc0, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xa2, 0x1, 0x5, [{@local, 0x200}, {@broadcast, 0x9}, {@private=0xa010100, 0x7}, {@local, 0x8}, {@remote, 0x4}, {@broadcast, 0x9}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x24, 0x52, 0x0, 0x2, [0x4, 0x7, 0x4, 0x6, 0x8, 0x7c2c4fcd, 0x8, 0x6]}, @end, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x9, [{@multicast1, 0xb02}]}, @timestamp={0x44, 0x14, 0xcf, 0x0, 0x5, [0x9, 0x6, 0xb5c7, 0x1]}, @ssrr={0x89, 0xf, 0x2d, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @loopback]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0x3, [0xa29]}, @generic={0x82, 0xd, "15b6a050eb47963f105508"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0800000000000000000000000000000000000000d29f46619a48a0feef31934523fa69e8eb6068b99eca0ef2dc7cd2968cff30", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) pipe(&(0x7f00000045c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xe, &(0x7f0000002840)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x59}, 0x94) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20400, 0x20008}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/224, 0xe0}, 0x8}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 1m24.248520989s ago: executing program 3 (id=2292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @ax25={0x3, @default, 0x2}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, @vsock, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x5}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa1200000000000070100000000ffffb70200000800ffb0b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfd9, &(0x7f0000001e00)=""/4057}, 0x94) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0) 1m24.066674531s ago: executing program 0 (id=2296): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0xb, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x44000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x810, r8, 0x3000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m23.726053494s ago: executing program 3 (id=2298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r0, 0x0) recvmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000200), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000040)}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/144, 0x90}], 0x9}, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000940)="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", 0x20a}, {&(0x7f0000001300)="fafef567f00d73164d13c6fc1a27e31b6a911705000000000000", 0x1a}], 0x2, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfa, {0x0, 0x0, 0x0, r10, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xfffff1a5, 0x100, 0x3, 0x5, 0x9, 0x10000, 0x966d, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r11, 0x0, 0x2000000002ffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 1m23.688642827s ago: executing program 2 (id=2299): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000003240)='GPL\x00'}, 0xc01) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, 'veth0\x00', {0x1}, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x8088}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, 0x0, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) accept(r9, &(0x7f0000000780)=@alg, &(0x7f0000000540)=0x80) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000380)) 1m23.524387331s ago: executing program 1 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='workqueue_queue_work\x00', r1, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000480)=0x1, 0x89b5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x3, [0xfffffffffffff502, 0x9, 0x2, 0x401, 0x9, 0x18000000000]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x13, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000711100"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xde, &(0x7f00000013c0)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r5) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010000000000fbdbdf25020010170000000008001a00080002007f000001"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x30, 0x9, 0x8}, &(0x7f0000000080)=0x18) socket$netlink(0x10, 0x3, 0xe) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000000c0)={r10, 0x1, 0x7add, 0x1}, 0x10) 1m23.384025654s ago: executing program 2 (id=2302): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x8000) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 1m23.289145426s ago: executing program 3 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async, rerun: 64) writev(r3, 0x0, 0x0) (rerun: 64) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="14c7a3a2ad5e7d474ab032dc83733c1c9f3fedf0372ed5ea45caef4e347be5485fa30000000000000000000000001a11898973383f5061b869ede9756ba886387174fb75be79109aa933a3bfa1a6b52625996df9495152f2f50604800fc61dc5a47c1c843edb1e81c0341826212354ffa7e43c8321a2546194fcd1907df382e880c7e41d74df0ee68058ce3570116c86ebf94fff", 0x94}], 0x1}}], 0x1, 0xf75fdb48c8cd8726) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) (async, rerun: 64) shutdown(r2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000003000600000000000200000000000000000000000000000002000100000000000000ff0d0000000003000500000000f701000000ac1414000000000000000000c26d81731221b3de3034844885c544cfc3495ff1b87325f1bde73405e729dc021a495ff76200562ea29302435775a93c121c23415e9c5dbbef4f578a18d130e2d7166325fc3369d077a0ef5419339492ede1a609b2b1ac8b5357cc527d7c9f1e8618762d1e83f2bae83ad0f6ed8af65bc1562d21275732aa2cabfe14934c500e17dc2fa875d40aa4b714107899b529ee455ad5715ccc9df01fb30d89ccaf2b"], 0x58}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x2c) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) (rerun: 64) 1m11.80598453s ago: executing program 1 (id=2307): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) (async) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m7.254184955s ago: executing program 32 (id=2296): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0xb, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x44000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x810, r8, 0x3000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m6.106395422s ago: executing program 33 (id=2302): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x8000) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 1m4.735644716s ago: executing program 34 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async, rerun: 64) writev(r3, 0x0, 0x0) (rerun: 64) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="14c7a3a2ad5e7d474ab032dc83733c1c9f3fedf0372ed5ea45caef4e347be5485fa30000000000000000000000001a11898973383f5061b869ede9756ba886387174fb75be79109aa933a3bfa1a6b52625996df9495152f2f50604800fc61dc5a47c1c843edb1e81c0341826212354ffa7e43c8321a2546194fcd1907df382e880c7e41d74df0ee68058ce3570116c86ebf94fff", 0x94}], 0x1}}], 0x1, 0xf75fdb48c8cd8726) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) (async, rerun: 64) shutdown(r2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000003000600000000000200000000000000000000000000000002000100000000000000ff0d0000000003000500000000f701000000ac1414000000000000000000c26d81731221b3de3034844885c544cfc3495ff1b87325f1bde73405e729dc021a495ff76200562ea29302435775a93c121c23415e9c5dbbef4f578a18d130e2d7166325fc3369d077a0ef5419339492ede1a609b2b1ac8b5357cc527d7c9f1e8618762d1e83f2bae83ad0f6ed8af65bc1562d21275732aa2cabfe14934c500e17dc2fa875d40aa4b714107899b529ee455ad5715ccc9df01fb30d89ccaf2b"], 0x58}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x2c) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) (rerun: 64) 1m4.164366515s ago: executing program 1 (id=2311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0ffffffffff60000360ffffffffff", 0x20) unshare(0x20000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r2, 0x42}], 0x1, 0x23f679b6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x1, 0x0, "8d825144afe8ddfae347d37f36cf7473d077a39ac6d398f4b7054913b3d94e2c3aad4e8a3a4f3071b05f5befb984012d4af233d664c119803bbfec961be240d86c0948e998fd56c9ffd2804b37ed00a8bf61b9925d606629d60c02b1a225f6f79ed927efa33f571183c4896d430e93b5ce2355dd89"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffc1a, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f00000001c0)=0xd, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, r8, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x15}, 0x840) 55.199297681s ago: executing program 4 (id=2313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) 49.238048933s ago: executing program 4 (id=2314): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x24, 0x401, 0x0, 0x80, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x9810) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x104) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_emit_ethernet(0x7f, &(0x7f00000001c0)={@random="72ff1b640d5f", @empty, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x3, 0x5, 0x71, 0x68, 0x0, 0x1, 0x6, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x8}, @lsrr={0x83, 0x7, 0x75, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x16, 0x3, 0x3, [{@multicast2, 0x6}, {@empty, 0x4}, {@remote}, {@loopback, 0x5}]}, @noop, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x1, 0xa, 0x0, 0x2, 0x5, 0x0, 0x3, 0x1, 0x0, 0x2, 0x7, 0xa, 0x4, 0x4e21, 0x4e21}, 0x1, 0x1}, 0x2}}, [0x0]}}}}}, 0x0) 48.052836071s ago: executing program 35 (id=2311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0ffffffffff60000360ffffffffff", 0x20) unshare(0x20000400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r2, 0x42}], 0x1, 0x23f679b6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x1, 0x0, "8d825144afe8ddfae347d37f36cf7473d077a39ac6d398f4b7054913b3d94e2c3aad4e8a3a4f3071b05f5befb984012d4af233d664c119803bbfec961be240d86c0948e998fd56c9ffd2804b37ed00a8bf61b9925d606629d60c02b1a225f6f79ed927efa33f571183c4896d430e93b5ce2355dd89"}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffc1a, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f00000001c0)=0xd, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, r8, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x15}, 0x840) 39.604010959s ago: executing program 4 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x14804}, 0x20000810) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00\v\x00', @ANYRES32=r5, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a848a35f2dd23dc3187c89859d5f96bf72"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)={0x11b4, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x3, 0x7c}, [@generic="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", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x3}, @generic="ccd19e4042db0b6bdb189664ee0d23f2f051f7b2d1435d6fa467791dbffd067ee1bc43768c4a89ffe2678759dd66e4977d1eb8afbb8cd34cd570e7c9aefacaa4acd5fd09d818cf02a4e42cf666e63cf544e6b56dd4937893451a40de27cdef883445a6e8e4ba8196579598a7dd744acfa1e6afd77ca697edac5c8e23", @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@private0}, @generic="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"]}, 0x11b4}}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000600)={r2}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000700)=0x12000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004184114ec442a0ab13f11b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="7a8a00003015010008001d0081400000"], 0x28}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 32.91386479s ago: executing program 4 (id=2317): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000002914000000240007800c"], 0x38}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r10 = socket(0x2, 0x3, 0x6) bind$inet(r10, 0x0, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$cgroup_int(r0, &(0x7f0000000980)='cpu.weight.nice\x00', 0x2, 0x0) 26.047301187s ago: executing program 4 (id=2318): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0xb00, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x140f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000380)={0x2, &(0x7f0000000100)=[{0x50, 0x1, 0x10, 0x7}, {0x6, 0x93}]}) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000480)=@id={0x1e, 0x3, 0x0, {0x4, 0x1}}, 0x10) write$ppp(r0, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 16.725392253s ago: executing program 4 (id=2319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0xffffffffffffffb9}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 36 (id=2319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0xffffffffffffffb9}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.0.1278'. [ 195.214979][T10424] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 195.387366][T10430] bond5: invalid ARP target 0.0.0.0 specified for addition [ 195.396382][T10430] bond5: option arp_ip_target: invalid value (0) [ 195.423677][T10430] bond5 (unregistering): Released all slaves [ 195.922394][T10463] tipc: Enabled bearer , priority 0 [ 195.937298][T10468] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 195.954249][T10463] syzkaller0: entered promiscuous mode [ 195.964577][T10463] syzkaller0: entered allmulticast mode [ 195.965331][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 195.989317][T10463] tipc: Resetting bearer [ 195.998484][T10458] tipc: Resetting bearer [ 196.044426][T10458] tipc: Disabling bearer [ 196.116750][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 196.125870][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1291'. [ 196.177158][T10486] sctp: [Deprecated]: syz.0.1295 (pid 10486) Use of int in max_burst socket option deprecated. [ 196.177158][T10486] Use struct sctp_assoc_value instead [ 196.293660][T10497] lo speed is unknown, defaulting to 1000 [ 196.310478][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 196.401380][T10503] netlink: 'syz.4.1301': attribute type 3 has an invalid length. [ 196.409570][T10503] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 196.417452][T10503] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.450684][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1302'. [ 196.550648][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.562030][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.634277][T10516] netlink: 'syz.3.1304': attribute type 11 has an invalid length. [ 196.642887][T10516] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1304'. [ 196.709230][T10519] FAULT_INJECTION: forcing a failure. [ 196.709230][T10519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.743765][T10519] CPU: 1 UID: 0 PID: 10519 Comm: syz.3.1305 Not tainted syzkaller #0 PREEMPT(full) [ 196.743792][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.743804][T10519] Call Trace: [ 196.743812][T10519] [ 196.743820][T10519] dump_stack_lvl+0x189/0x250 [ 196.743851][T10519] ? __pfx____ratelimit+0x10/0x10 [ 196.743874][T10519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.743899][T10519] ? __pfx__printk+0x10/0x10 [ 196.743920][T10519] ? __might_fault+0xb0/0x130 [ 196.743958][T10519] should_fail_ex+0x414/0x560 [ 196.743993][T10519] _copy_from_iter+0x1de/0x1790 [ 196.744012][T10519] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 196.744039][T10519] ? kmalloc_reserve+0xbd/0x290 [ 196.744070][T10519] ? __pfx__copy_from_iter+0x10/0x10 [ 196.744087][T10519] ? __alloc_skb+0x2f1/0x430 [ 196.744108][T10519] ? __pfx___alloc_skb+0x10/0x10 [ 196.744128][T10519] ? netlink_sendmsg+0x642/0xb30 [ 196.744150][T10519] ? skb_put+0x11b/0x210 [ 196.744173][T10519] netlink_sendmsg+0x6b2/0xb30 [ 196.744207][T10519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.744233][T10519] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.744263][T10519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.744280][T10519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.744305][T10519] __sock_sendmsg+0x21c/0x270 [ 196.744335][T10519] ____sys_sendmsg+0x505/0x830 [ 196.744365][T10519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.744399][T10519] ? import_iovec+0x74/0xa0 [ 196.744425][T10519] ___sys_sendmsg+0x21f/0x2a0 [ 196.744450][T10519] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.744506][T10519] ? __fget_files+0x2a/0x420 [ 196.744523][T10519] ? __fget_files+0x3a0/0x420 [ 196.744552][T10519] __x64_sys_sendmsg+0x19b/0x260 [ 196.744580][T10519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.744615][T10519] ? __pfx_ksys_write+0x10/0x10 [ 196.744646][T10519] ? do_syscall_64+0xbe/0xfa0 [ 196.744671][T10519] do_syscall_64+0xfa/0xfa0 [ 196.744692][T10519] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.744726][T10519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.744743][T10519] ? clear_bhb_loop+0x60/0xb0 [ 196.744766][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.744784][T10519] RIP: 0033:0x7faf7458f749 [ 196.744801][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.744818][T10519] RSP: 002b:00007faf7542a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.744839][T10519] RAX: ffffffffffffffda RBX: 00007faf747e5fa0 RCX: 00007faf7458f749 [ 196.744853][T10519] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 196.744865][T10519] RBP: 00007faf7542a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.744878][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.744889][T10519] R13: 00007faf747e6038 R14: 00007faf747e5fa0 R15: 00007ffe28cc90d8 [ 196.744923][T10519] [ 196.787413][T10521] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.992304][T10526] tipc: Enabled bearer , priority 0 [ 197.095994][T10526] syzkaller0: entered promiscuous mode [ 197.101908][T10526] syzkaller0: entered allmulticast mode [ 197.153857][T10526] tipc: Resetting bearer [ 197.169691][T10524] tipc: Resetting bearer [ 197.199317][T10524] tipc: Disabling bearer [ 197.524639][T10546] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 197.565839][T10550] netlink: 'syz.0.1316': attribute type 4 has an invalid length. [ 197.576304][T10521] lo speed is unknown, defaulting to 1000 [ 197.582753][T10550] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1316'. [ 197.753225][T10562] FAULT_INJECTION: forcing a failure. [ 197.753225][T10562] name failslab, interval 1, probability 0, space 0, times 1 [ 197.768083][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.1.1320 Not tainted syzkaller #0 PREEMPT(full) [ 197.768110][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.768121][T10562] Call Trace: [ 197.768129][T10562] [ 197.768137][T10562] dump_stack_lvl+0x189/0x250 [ 197.768178][T10562] ? __pfx____ratelimit+0x10/0x10 [ 197.768200][T10562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.768227][T10562] ? __pfx__printk+0x10/0x10 [ 197.768250][T10562] ? __pfx___might_resched+0x10/0x10 [ 197.768277][T10562] ? fs_reclaim_acquire+0x7d/0x100 [ 197.768301][T10562] should_fail_ex+0x414/0x560 [ 197.768334][T10562] should_failslab+0xa8/0x100 [ 197.768355][T10562] kmem_cache_alloc_node_noprof+0x77/0x710 [ 197.768382][T10562] ? __alloc_skb+0x255/0x430 [ 197.768407][T10562] ? napi_skb_cache_get+0x4a5/0x790 [ 197.768427][T10562] ? napi_skb_cache_get+0x151/0x790 [ 197.768452][T10562] __alloc_skb+0x255/0x430 [ 197.768475][T10562] ? __pfx___alloc_skb+0x10/0x10 [ 197.768504][T10562] netlink_dump+0x1b7/0xe90 [ 197.768535][T10562] ? __netlink_lookup+0xbd/0x8a0 [ 197.768564][T10562] ? __pfx_netlink_dump+0x10/0x10 [ 197.768584][T10562] ? __netlink_lookup+0x7db/0x8a0 [ 197.768637][T10562] ? netlink_lookup+0x30/0x200 [ 197.768659][T10562] ? netlink_lookup+0x30/0x200 [ 197.768678][T10562] ? netlink_lookup+0x30/0x200 [ 197.768707][T10562] __netlink_dump_start+0x5cb/0x7e0 [ 197.768740][T10562] rtnetlink_rcv_msg+0x9eb/0xb70 [ 197.768763][T10562] ? __pfx_rtnl_dump_all+0x10/0x10 [ 197.768784][T10562] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 197.768803][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.768821][T10562] ? __pfx_rtnl_dumpit+0x10/0x10 [ 197.768841][T10562] ? __pfx_rtnl_dump_all+0x10/0x10 [ 197.768883][T10562] netlink_rcv_skb+0x208/0x470 [ 197.768904][T10562] ? __lock_acquire+0xab9/0xd20 [ 197.768924][T10562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.768946][T10562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.768982][T10562] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.769015][T10562] netlink_unicast+0x82f/0x9e0 [ 197.769046][T10562] ? __pfx_netlink_unicast+0x10/0x10 [ 197.769070][T10562] ? netlink_sendmsg+0x642/0xb30 [ 197.769092][T10562] ? skb_put+0x11b/0x210 [ 197.769117][T10562] netlink_sendmsg+0x805/0xb30 [ 197.769152][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.769181][T10562] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.769211][T10562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.769231][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.769256][T10562] __sock_sendmsg+0x21c/0x270 [ 197.769289][T10562] ____sys_sendmsg+0x505/0x830 [ 197.769319][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.769354][T10562] ? import_iovec+0x74/0xa0 [ 197.769383][T10562] ___sys_sendmsg+0x21f/0x2a0 [ 197.769410][T10562] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.769475][T10562] ? __fget_files+0x2a/0x420 [ 197.769491][T10562] ? __fget_files+0x3a0/0x420 [ 197.769521][T10562] __x64_sys_sendmsg+0x19b/0x260 [ 197.769548][T10562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.769583][T10562] ? __pfx_ksys_write+0x10/0x10 [ 197.769619][T10562] ? do_syscall_64+0xbe/0xfa0 [ 197.769646][T10562] do_syscall_64+0xfa/0xfa0 [ 197.769667][T10562] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.769690][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.769709][T10562] ? clear_bhb_loop+0x60/0xb0 [ 197.769733][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.769751][T10562] RIP: 0033:0x7f9d0358f749 [ 197.769768][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.769785][T10562] RSP: 002b:00007f9d044bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.769806][T10562] RAX: ffffffffffffffda RBX: 00007f9d037e5fa0 RCX: 00007f9d0358f749 [ 197.769821][T10562] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 197.769834][T10562] RBP: 00007f9d044bd090 R08: 0000000000000000 R09: 0000000000000000 [ 197.769846][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.769858][T10562] R13: 00007f9d037e6038 R14: 00007f9d037e5fa0 R15: 00007ffffe1050d8 [ 197.769893][T10562] [ 198.213850][T10558] netlink: 'syz.3.1318': attribute type 14 has an invalid length. [ 198.500437][T10564] netlink: 'syz.2.1321': attribute type 11 has an invalid length. [ 199.030876][T10589] macvlan0: entered allmulticast mode [ 199.036454][T10589] veth1_vlan: entered allmulticast mode [ 199.490493][T10608] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.519945][T10611] netlink: 'syz.4.1333': attribute type 5 has an invalid length. [ 199.766907][T10627] netlink: 'syz.2.1339': attribute type 23 has an invalid length. [ 200.158361][T10608] lo speed is unknown, defaulting to 1000 [ 200.305971][T10611] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.441078][T10663] tipc: Enabled bearer , priority 0 [ 200.629834][T10665] syzkaller0: entered promiscuous mode [ 200.635636][T10665] syzkaller0: entered allmulticast mode [ 200.942936][T10663] tipc: Resetting bearer [ 200.968452][T10662] tipc: Resetting bearer [ 201.013812][T10662] tipc: Disabling bearer [ 201.024813][T10611] lo speed is unknown, defaulting to 1000 [ 201.304357][T10704] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 201.317171][T10704] __nla_validate_parse: 17 callbacks suppressed [ 201.317192][T10704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1361'. [ 201.363741][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 201.383494][T10704] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 201.463959][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 201.521550][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 201.559224][T10711] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.693813][T10718] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 201.717421][T10722] tipc: Enabling of bearer rejected, already enabled [ 201.741923][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 201.914289][T10726] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.933008][T10711] lo speed is unknown, defaulting to 1000 [ 202.511548][T10726] lo speed is unknown, defaulting to 1000 [ 202.547225][T10744] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1375'. [ 202.620299][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'. [ 202.959767][T10754] bond16 (unregistering): Released all slaves [ 224.968202][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.691803][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698290][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.078586][T10763] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 308.474218][T10789] tipc: Enabled bearer , priority 10 [ 308.612752][T10795] No such timeout policy "syz0" [ 309.366690][T10825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1396'. [ 309.418283][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1396'. [ 309.466995][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1399'. [ 309.947231][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 310.107383][T10880] tipc: Enabled bearer , priority 0 [ 310.116507][T10888] x_tables: duplicate underflow at hook 1 [ 310.123812][T10880] syzkaller0: entered promiscuous mode [ 310.132558][T10880] syzkaller0: entered allmulticast mode [ 310.252192][T10880] tipc: Resetting bearer [ 310.264666][T10879] tipc: Resetting bearer [ 310.283454][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 310.318716][T10879] tipc: Disabling bearer [ 310.498759][T10906] xt_connbytes: Forcing CT accounting to be enabled [ 310.659707][T10914] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 310.984944][T10931] xt_time: unknown flags 0xf4 [ 311.009904][T10929] syzkaller0: left promiscuous mode [ 311.016980][T10929] syzkaller0: left allmulticast mode [ 311.460794][T10955] netdevrim0: renamed from erspan0 (while UP) [ 311.481542][T10955] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 311.860192][T10988] netlink: 'syz.4.1442': attribute type 13 has an invalid length. [ 311.930690][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1442'. [ 312.389700][T11018] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 312.457798][T11004] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.512442][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 312.670982][T11022] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.683456][T11022] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 312.741807][T11032] bond10: (slave gretap1): making interface the new active one [ 312.750660][T11032] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 312.862234][T11004] lo speed is unknown, defaulting to 1000 [ 312.862321][T11012] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.961980][T11044] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.983047][T11046] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.045236][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 313.270430][T11058] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 313.315263][T11063] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 313.402496][T11061] geneve3: entered promiscuous mode [ 313.427765][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 313.456352][T11063] 8021q: adding VLAN 0 to HW filter on device bond11 [ 313.525727][T11067] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 313.535677][T11067] bond11: (slave batadv1): making interface the new active one [ 313.545166][T11067] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 313.554924][ T8467] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 52118 - 0 [ 313.564626][ T8467] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 52118 - 0 [ 313.574280][ T8467] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 52118 - 0 [ 313.591105][T11012] lo speed is unknown, defaulting to 1000 [ 313.609202][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1460'. [ 313.640885][ T8467] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 52118 - 0 [ 314.235333][T11111] raw_sendmsg: syz.4.1469 forgot to set AF_INET. Fix it! [ 314.593091][T11127] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.600487][T11125] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 314.897522][T11127] lo speed is unknown, defaulting to 1000 [ 314.906677][T11140] tipc: Enabling of bearer rejected, failed to enable media [ 314.917988][T11140] __nla_validate_parse: 1 callbacks suppressed [ 314.918006][T11140] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1475'. [ 315.026969][T11147] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1478'. [ 315.677182][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 315.694255][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 315.731585][T11166] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.762417][T11180] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1484'. [ 316.137394][T11166] lo speed is unknown, defaulting to 1000 [ 316.256101][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 316.284678][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 316.355151][T11189] geneve4: entered promiscuous mode [ 316.364895][T11189] geneve4: entered allmulticast mode [ 316.379302][ T8465] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.390804][ T8465] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.430880][ T8465] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.451635][ T8467] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.599439][T11199] vlan5: entered allmulticast mode [ 316.611002][T11199] bridge_slave_0: entered allmulticast mode [ 317.137118][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144729][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.237158][T11226] netlink: 'syz.4.1499': attribute type 16 has an invalid length. [ 317.266347][T11226] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1499'. [ 317.905205][T11255] xt_l2tp: unknown flags: 51 [ 317.940169][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1506'. [ 317.988517][T11254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.044783][T11260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1509'. [ 318.179087][T11262] bond12: Unable to set down delay as MII monitoring is disabled [ 318.221688][T11262] bond12 (unregistering): Released all slaves [ 318.843053][T11297] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 319.005966][T11305] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.119978][T11312] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.318819][T11323] dvmrp0: entered allmulticast mode [ 319.363906][T11326] xt_hashlimit: overflow, try lower: 3/0 [ 319.514527][T11329] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.522020][T11305] lo speed is unknown, defaulting to 1000 [ 319.771427][T11344] syzkaller0: entered promiscuous mode [ 319.777461][T11344] syzkaller0: entered allmulticast mode [ 319.972181][T11353] __nla_validate_parse: 4 callbacks suppressed [ 319.972199][T11353] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1538'. [ 320.052692][T11329] lo speed is unknown, defaulting to 1000 [ 320.059920][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 320.119522][T11361] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1540'. [ 320.133190][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 320.645116][T11365] Ï: option downdelay: invalid value (18446744073709547007) [ 320.679659][T11365] Ï: option downdelay: allowed values 0 - 2147483647 [ 320.719137][T11365] Ï (unregistering): Released all slaves [ 320.888868][ T5834] Bluetooth: hci2: command tx timeout [ 320.913670][T11391] batadv_slave_1: entered promiscuous mode [ 320.943686][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 320.976930][T11390] batadv_slave_1: left promiscuous mode [ 321.087338][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1551'. [ 321.172145][T11397] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.251710][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 321.708155][T11397] lo speed is unknown, defaulting to 1000 [ 321.880939][T11428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1558'. [ 322.018151][T11427] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1557'. [ 322.027270][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1557'. [ 322.053346][T11427] tipc: Invalid UDP bearer configuration [ 322.053400][T11427] tipc: Enabling of bearer rejected, failed to enable media [ 322.106140][T11431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.119315][T11431] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.088402][T11431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.135091][ T9152] lo speed is unknown, defaulting to 1000 [ 324.142199][ T9152] syz0: Port: 1 Link ACTIVE [ 324.680378][T11454] xt_CT: No such helper "snmp" [ 324.973524][T11464] : entered promiscuous mode [ 325.364982][T11462] geneve1: entered promiscuous mode [ 325.542925][T11482] veth3: left promiscuous mode [ 325.566371][T11482] bond3: left promiscuous mode [ 325.587444][T11482] bridge4: left promiscuous mode [ 325.661941][ T8470] bond3: (slave bridge4): link status up again after 0 ms [ 325.688295][ T8470] bond3: (slave bridge4): link status up again after 0 ms [ 325.709484][ T8470] bond3: (slave bridge4): link status up again after 0 ms [ 325.732492][ T8470] bond3: (slave bridge4): link status up again after 0 ms [ 325.736189][T11493] syzkaller0: entered promiscuous mode [ 325.747181][T11493] syzkaller0: entered allmulticast mode [ 325.760469][ T8465] bond3: (slave bridge4): link status up again after 0 ms [ 325.788460][ T8465] bond3: (slave bridge4): link status up again after 0 ms [ 325.809165][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 325.874833][T11506] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 325.902262][T11507] __nla_validate_parse: 1 callbacks suppressed [ 325.902281][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 325.966024][T11506] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.982659][ T8469] bond3: (slave bridge4): failed to get link speed/duplex [ 326.120887][ T8470] bond3: (slave bridge4): failed to get link speed/duplex [ 326.198157][T11514] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.692073][T11530] netlink: 'syz.2.1578': attribute type 3 has an invalid length. [ 326.700190][T11530] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 326.715974][T11530] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1578'. [ 326.938468][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 326.975970][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 327.024984][T11539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.086742][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'. [ 328.226186][T11514] lo speed is unknown, defaulting to 1000 [ 328.506971][T11549] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.745621][T11560] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1586'. [ 328.922097][T11566] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.930242][T11569] delete_channel: no stack [ 329.111695][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 329.195122][ T5948] IPVS: starting estimator thread 0... [ 329.197495][T11566] lo speed is unknown, defaulting to 1000 [ 329.288438][ T8465] net_ratelimit: 6 callbacks suppressed [ 329.288459][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 329.337937][T11584] IPVS: using max 31 ests per chain, 74400 per kthread [ 329.445280][T11589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1595'. [ 329.749559][T11589] bond0: ARP target 170.170.170.170 is already present [ 329.769937][T11589] bond0: option arp_ip_target: invalid value (2863311530) [ 329.879029][T11612] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 329.885107][T11612] syzkaller1: Refused to change device type [ 332.368512][T11613] syz_tun: entered allmulticast mode [ 332.466565][T11613] syz_tun: left allmulticast mode [ 332.482713][ T61] bond3: (slave bridge4): failed to get link speed/duplex [ 332.580493][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'. [ 332.598221][ T8470] bond3: (slave bridge4): failed to get link speed/duplex [ 332.703353][T11638] veth1_to_bond: entered allmulticast mode [ 332.711093][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 332.721091][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 332.787295][ T30] audit: type=1800 audit(1764283363.644:4): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="memory.events" dev="tmpfs" ino=1605 res=0 errno=0 [ 332.864508][T11637] bond0: (slave bond_slave_1): Releasing backup interface [ 333.080916][T11637] veth1_to_bond (unregistering): left allmulticast mode [ 333.260461][T11667] tipc: Enabling of bearer rejected, failed to enable media [ 333.295816][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 333.306051][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 333.318537][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 333.338422][T11673] bond1: option mode: unable to set because the bond device has slaves [ 333.352568][T11661] syzkaller0: entered promiscuous mode [ 333.371509][T11661] syzkaller0: entered allmulticast mode [ 333.387341][T11667] geneve3: entered promiscuous mode [ 333.493591][T11672] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 333.511874][T11667] geneve3: entered allmulticast mode [ 333.527024][T11673] bond0: (slave bridge_slave_1): Releasing backup interface [ 333.541465][T11673] bond0: (slave bond_slave_0): Releasing backup interface [ 333.555042][T11673] bond0: (slave bond_slave_1): Releasing backup interface [ 333.574370][T11673] team0: Port device team_slave_0 removed [ 333.583857][T11675] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 333.596934][T11673] team0: Port device team_slave_1 removed [ 333.605409][T11673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.623124][T11673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.633003][T11673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.659885][T11675] team0: Port device dummy0 removed [ 333.682930][T11675] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 333.748232][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 333.815037][T11677] ip6_vti0 speed is unknown, defaulting to 1000 [ 333.887712][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 333.997781][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 334.127869][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 334.254263][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1621'. [ 334.279168][T11677] lo speed is unknown, defaulting to 1000 [ 334.304613][T11678] ip6_vti0 speed is unknown, defaulting to 1000 [ 334.329060][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1622'. [ 334.357715][ T8469] net_ratelimit: 1 callbacks suppressed [ 334.357733][ T8469] bond3: (slave bridge4): failed to get link speed/duplex [ 334.369631][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1620'. [ 334.490591][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 334.681810][T11721] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1625'. [ 334.705156][T11720] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1625'. [ 334.737978][ T4859] bond3: (slave bridge4): failed to get link speed/duplex [ 334.772524][T11678] lo speed is unknown, defaulting to 1000 [ 334.938082][ T61] bond3: (slave bridge4): failed to get link speed/duplex [ 335.357111][T11743] bond3: (slave bridge4): failed to get link speed/duplex [ 335.521691][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 335.529725][T11790] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1632'. [ 335.662070][T11784] syzkaller0: entered promiscuous mode [ 335.697660][T11784] syzkaller0: entered allmulticast mode [ 335.750345][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 337.129514][ T30] audit: type=1107 audit(1764283367.984:5): pid=11808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='½“-§6*¤Þャ>®$R”ç[²²ç§Ñ¤Œ3BD ¸B9·öG™ÛšðލfÛ[S‚E³^èÕÉQ“]ps–·m×wÚˆÍôª×Ï]øsÍO:Ók® [ 337.129514][ T30] ™Ž¿Š œxoÙ0e5 ŠHáyî(Qüå¨Èæ]*¸b' [ 337.739358][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 337.870204][T11816] __nla_validate_parse: 1 callbacks suppressed [ 337.870223][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 337.920133][T11816] netlink: 'syz.2.1641': attribute type 7 has an invalid length. [ 337.938132][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 337.962156][T11816] netlink: 'syz.2.1641': attribute type 8 has an invalid length. [ 337.970430][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 338.012515][T11820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1642'. [ 338.058226][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 338.157083][T11828] bond16: Removing last arp target with arp_interval on [ 338.237952][T11814] netlink: 'syz.0.1639': attribute type 30 has an invalid length. [ 338.297427][T11814] bond7: option arp_missed_max: invalid value (0) [ 338.304839][T11814] bond7: option arp_missed_max: allowed values 1 - 255 [ 338.320322][T11814] bond7 (unregistering): Released all slaves [ 338.363870][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 338.410613][ T8465] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.422253][ T8465] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.431724][ T8465] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.448208][ T8465] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.481056][T11851] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1650'. [ 338.490970][T11850] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1651'. [ 338.503067][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 338.514036][T11851] .70·: renamed from hsr0 (while UP) [ 338.536230][T11851] .70·: left promiscuous mode [ 338.543126][T11851] .70·: entered allmulticast mode [ 338.550670][T11851] hsr_slave_0: entered allmulticast mode [ 338.568975][T11851] hsr_slave_1: entered allmulticast mode [ 338.675335][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1656'. [ 338.861803][T11870] tipc: Enabled bearer , priority 0 [ 338.877065][T11870] syzkaller0: entered promiscuous mode [ 338.899113][T11870] syzkaller0: entered allmulticast mode [ 338.982853][T11870] tipc: Resetting bearer [ 338.992380][T11869] tipc: Resetting bearer [ 339.013276][T11869] tipc: Disabling bearer [ 339.028297][T11874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 339.074892][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 339.171112][T11888] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.212054][T11898] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 339.222612][T11898] dummy0: entered promiscuous mode [ 339.397719][T11769] net_ratelimit: 12 callbacks suppressed [ 339.397741][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 339.561341][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 339.678290][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 339.690518][T11888] lo speed is unknown, defaulting to 1000 [ 339.789417][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 339.898606][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 340.130559][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 340.257813][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 340.342484][T11947] bridge0: entered promiscuous mode [ 340.350909][T11947] bridge0: port 1(macvtap1) entered blocking state [ 340.372908][T11947] bridge0: port 1(macvtap1) entered disabled state [ 340.388029][T11947] macvtap1: entered allmulticast mode [ 340.393691][T11947] bridge0: entered allmulticast mode [ 340.410902][T11947] macvtap1: left allmulticast mode [ 340.418152][T11947] bridge0: left allmulticast mode [ 340.425340][T11947] bridge0: left promiscuous mode [ 340.519404][T11943] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.538765][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 340.678206][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 340.740853][T11950] pim6reg: entered allmulticast mode [ 340.757288][T11950] pim6reg: left allmulticast mode [ 340.858450][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 341.029979][T11959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.069997][T11943] lo speed is unknown, defaulting to 1000 [ 341.115496][T11965] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 341.135782][T11962] macvlan4: entered promiscuous mode [ 341.157723][T11962] macvlan4: entered allmulticast mode [ 341.167981][T11962] bond11: entered promiscuous mode [ 341.173134][T11962] bridge3: entered promiscuous mode [ 341.195223][T11962] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 341.228558][T11962] bond11: left promiscuous mode [ 341.235984][T11962] bridge3: left promiscuous mode [ 341.464893][T11959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.617473][T11959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.781402][T11959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.084785][T12008] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 342.234805][ T8465] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.248187][ T8465] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.281931][ T8465] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.333337][T11769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.375731][T12020] tipc: Enabled bearer , priority 0 [ 342.444880][T12021] tipc: Resetting bearer [ 342.471457][T12017] tipc: Disabling bearer [ 342.531445][T12029] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.601983][T12036] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 342.741676][T12029] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.817375][T12029] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.871164][T12029] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.890538][T12053] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 342.902251][T12054] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 342.918282][T12051] __nla_validate_parse: 12 callbacks suppressed [ 342.918302][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'. [ 342.935134][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'. [ 342.954437][T12051] netlink: 'syz.2.1705': attribute type 4 has an invalid length. [ 343.013394][T11769] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.040377][T11769] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.075418][T11769] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.085063][T12062] netlink: 'syz.2.1709': attribute type 6 has an invalid length. [ 343.093183][T12062] netlink: 'syz.2.1709': attribute type 7 has an invalid length. [ 343.105452][T12062] netlink: 'syz.2.1709': attribute type 8 has an invalid length. [ 343.119869][T11769] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.536925][T12087] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.983057][T12087] lo speed is unknown, defaulting to 1000 [ 344.096920][T12109] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.265632][T12118] block nbd0: Unsupported socket: should be TCP or UNIX. [ 344.441244][T12128] ip6t_srh: unknown srh match flags 4000 [ 344.457675][ T8465] net_ratelimit: 17 callbacks suppressed [ 344.457694][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 344.602207][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 344.671079][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 344.682649][T12133] xt_hashlimit: size too large, truncated to 1048576 [ 344.729295][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 344.813454][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'. [ 344.851744][T12131] geneve0: entered promiscuous mode [ 344.859000][T12131] hsr1: entered promiscuous mode [ 344.878171][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 344.988135][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 345.097694][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 345.218193][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 345.327740][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 345.447900][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 345.568007][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 345.726391][T12149] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1734'. [ 345.736594][T12149] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1734'. [ 345.753790][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1734'. [ 345.764155][T12149] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1734'. [ 345.834942][T12149] bond12: invalid ARP target 0.0.0.0 specified for addition [ 345.842820][T12149] bond12: option arp_ip_target: invalid value (0) [ 345.854985][T12149] bond12 (unregistering): Released all slaves [ 346.255917][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1745'. [ 346.271440][T12182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1745'. [ 346.506399][T12187] netlink: 'syz.3.1746': attribute type 3 has an invalid length. [ 346.855335][T12217] tipc: Resetting bearer [ 347.018441][T12221] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.394831][T12221] lo speed is unknown, defaulting to 1000 [ 347.813697][T12242] bond12: option ad_actor_sys_prio: invalid value (0) [ 347.876232][T12252] netlink: 'syz.4.1761': attribute type 4 has an invalid length. [ 347.884908][T12242] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 347.943181][T12242] bond12 (unregistering): Released all slaves [ 348.038158][T12245] netlink: 'syz.4.1761': attribute type 12 has an invalid length. [ 348.205765][ T5896] lo speed is unknown, defaulting to 1000 [ 348.212997][ T5896] syz0: Port: 1 Link DOWN [ 348.327178][T12264] __nla_validate_parse: 3 callbacks suppressed [ 348.327198][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 348.349714][T12264] IPv6: Can't replace route, no match found [ 348.477510][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 348.616745][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 348.715614][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 348.725280][T12277] ip6_vti0 speed is unknown, defaulting to 1000 [ 348.768976][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 349.133137][T12301] team0: Device gtp0 is of different type [ 349.171120][T12277] lo speed is unknown, defaulting to 1000 [ 349.371333][T12307] netlink: 'syz.4.1778': attribute type 4 has an invalid length. [ 349.467762][T11772] net_ratelimit: 25 callbacks suppressed [ 349.467781][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 349.604494][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 349.738100][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 349.887694][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 349.944526][T12340] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1786'. [ 350.055277][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 350.152002][T12356] sctp: [Deprecated]: syz.4.1789 (pid 12356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.152002][T12356] Use struct sctp_sack_info instead [ 350.188246][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 350.237898][ T30] audit: type=1804 audit(1764283381.094:6): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1791" name="/newroot/321/cgroup.controllers" dev="tmpfs" ino=1662 res=1 errno=0 [ 350.298060][ T30] audit: type=1800 audit(1764283381.094:7): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1791" name="cgroup.controllers" dev="tmpfs" ino=1662 res=0 errno=0 [ 350.308224][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 350.399126][T12371] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.448309][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 350.558211][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 350.668166][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 350.685641][T12379] xt_hashlimit: size too large, truncated to 1048576 [ 350.955087][T12371] lo speed is unknown, defaulting to 1000 [ 351.027179][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'. [ 351.382167][T12400] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1799'. [ 351.535667][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'. [ 351.608345][T12408] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1802'. [ 351.696655][T12405] netlink: 'syz.3.1799': attribute type 14 has an invalid length. [ 351.711408][T12408] geneve4: entered promiscuous mode [ 351.724552][T12405] netlink: 'syz.3.1799': attribute type 11 has an invalid length. [ 351.762182][T12414] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 351.800857][T11773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.939343][T12426] block nbd0: not configured, cannot reconfigure [ 351.956615][T12412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.999740][T11773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.018438][T12424] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 352.033146][T11773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.044823][T12424] tipc: Enabling of bearer rejected, already enabled [ 352.116988][T12436] netlink: 'syz.0.1808': attribute type 3 has an invalid length. [ 352.131112][T12432] bond14 (unregistering): Released all slaves [ 352.242725][T12436] tipc: Enabling of bearer rejected, already enabled [ 352.253031][T12425] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 352.339275][T12425] veth5: entered promiscuous mode [ 352.401538][T12443] netlink: 'syz.2.1809': attribute type 12 has an invalid length. [ 352.431592][T12445] ip6t_REJECT: ECHOREPLY is not supported [ 352.509716][T12447] tipc: Resetting bearer [ 352.836912][T12464] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 353.027013][T12473] No such timeout policy "syz1" [ 353.394731][T12490] __nla_validate_parse: 5 callbacks suppressed [ 353.394750][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1822'. [ 353.521370][T12492] netlink: 'syz.2.1822': attribute type 7 has an invalid length. [ 353.713327][T12412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.779041][T12412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.891261][T12502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1825'. [ 353.923413][T12412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.944724][T12412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.075236][T12412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.118243][T12412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.149673][T12512] netlink: 'syz.4.1827': attribute type 3 has an invalid length. [ 354.266079][ T8465] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.286309][ T8465] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.387226][T12517] bond14: option lacp_active: invalid value (8) [ 354.415542][T12517] bond14 (unregistering): Released all slaves [ 354.470307][T11774] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.490206][T11774] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.646189][T12521] bridge0: port 1(batadv0) entered blocking state [ 354.652834][T12521] bridge0: port 1(batadv0) entered forwarding state [ 354.665134][T12521] net_ratelimit: 22 callbacks suppressed [ 354.665153][T12521] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.699794][T12523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.812583][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 354.835029][T12529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.868429][T11770] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.876826][T11770] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.914905][ T5910] lo speed is unknown, defaulting to 1000 [ 354.921909][ T5910] syz0: Port: 1 Link ACTIVE [ 354.926793][T11773] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.935288][T11773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.978855][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 355.134013][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 355.158802][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 355.192808][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1834'. [ 355.229595][T12540] syzkaller1: entered promiscuous mode [ 355.251994][T12540] syzkaller1: entered allmulticast mode [ 355.267775][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 355.286769][T12540] gtp0: entered promiscuous mode [ 355.292016][T12540] gtp0: entered allmulticast mode [ 355.430370][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 355.560113][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 355.578593][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 355.680607][T12560] xt_HMARK: spi-set and port-set can't be combined [ 355.706984][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 355.838989][T12567] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.893960][T12571] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 356.405601][T12584] dummy0: entered allmulticast mode [ 356.418009][T12567] lo speed is unknown, defaulting to 1000 [ 356.790577][T12601] gtp1: entered promiscuous mode [ 356.795733][T12601] gtp1: entered allmulticast mode [ 356.819103][T12593] syzkaller1: entered promiscuous mode [ 356.829649][T12593] syzkaller1: entered allmulticast mode [ 356.866246][T12609] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.908167][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 356.927282][T12612] batman_adv: batadv0: Removing interface: vlan1 [ 357.010066][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 357.128542][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.147983][T12609] lo speed is unknown, defaulting to 1000 [ 357.233605][T12622] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.440251][T12633] netlink: 'syz.4.1858': attribute type 8 has an invalid length. [ 357.451987][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 358.017108][T12622] lo speed is unknown, defaulting to 1000 [ 358.017122][T12631] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.053462][T12656] netlink: 'syz.4.1867': attribute type 10 has an invalid length. [ 358.066838][T12656] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 358.113765][T12659] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 358.129894][T12659] syzkaller1: Linktype set failed because interface is up [ 358.137936][ T24] syzkaller1: tun_net_xmit 90 [ 358.234707][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1869'. [ 358.268280][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1869'. [ 358.510704][T12631] lo speed is unknown, defaulting to 1000 [ 359.014060][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 359.333503][T12693] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.441020][T12711] dvmrp0: left allmulticast mode [ 359.446153][T12711] pimreg: left allmulticast mode [ 359.768260][T11772] net_ratelimit: 25 callbacks suppressed [ 359.768281][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 359.796278][T12693] lo speed is unknown, defaulting to 1000 [ 359.910370][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 360.039593][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 360.149059][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 360.338960][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 360.396673][T12736] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 360.505768][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 360.618421][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 360.669232][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 360.747837][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 360.891123][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 360.976486][T12757] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1894'. [ 361.059462][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 361.135971][T12766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1896'. [ 361.179720][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 361.208662][T12768] syzkaller1: entered promiscuous mode [ 361.220400][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 361.229933][T12768] syzkaller1: entered allmulticast mode [ 361.374814][T12782] xt_ecn: cannot match TCP bits for non-tcp packets [ 361.416558][T12780] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.495568][T12790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1905'. [ 361.509908][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 361.521678][T12790] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 361.625899][T12793] netlink: 'syz.4.1906': attribute type 21 has an invalid length. [ 361.650434][T12793] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1906'. [ 361.662704][T12793] netlink: 'syz.4.1906': attribute type 4 has an invalid length. [ 361.687175][T12793] netlink: 'syz.4.1906': attribute type 3 has an invalid length. [ 361.705126][T12793] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1906'. [ 361.915971][T12807] netlink: 'syz.1.1909': attribute type 14 has an invalid length. [ 361.951673][T12807] netlink: 'syz.1.1909': attribute type 12 has an invalid length. [ 362.102422][T12780] lo speed is unknown, defaulting to 1000 [ 362.137525][T12810] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.197015][T12819] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 362.383641][T12819] 8021q: adding VLAN 0 to HW filter on device bond17 [ 362.433732][T12824] bond17: (slave gretap3): making interface the new active one [ 362.443823][T12824] bond17: (slave gretap3): Enslaving as an active interface with an up link [ 362.484425][T12828] ipt_REJECT: TCP_RESET invalid for non-tcp [ 362.654988][T12810] lo speed is unknown, defaulting to 1000 [ 364.064637][T12889] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.481053][T12889] lo speed is unknown, defaulting to 1000 [ 364.556545][T12922] validate_nla: 2 callbacks suppressed [ 364.556563][T12922] netlink: 'syz.1.1942': attribute type 21 has an invalid length. [ 364.601472][T12922] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 364.617237][T12922] __nla_validate_parse: 6 callbacks suppressed [ 364.617254][T12922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1942'. [ 364.830228][T11771] net_ratelimit: 18 callbacks suppressed [ 364.830249][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 364.992085][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 365.111212][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.156698][T12950] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 365.165293][T12950] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 365.228047][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.348160][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.468199][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.578337][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.641018][T12964] SET target dimension over the limit! [ 365.688313][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 365.799440][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 365.902644][T12987] IPVS: Error connecting to the multicast addr [ 365.928203][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 366.015668][T12991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1961'. [ 366.033413][T12993] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 366.520927][T13028] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.598737][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1971'. [ 366.860855][T13036] netlink: 'syz.0.1973': attribute type 10 has an invalid length. [ 366.871663][T13032] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.879104][T13028] lo speed is unknown, defaulting to 1000 [ 366.945766][T13040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1974'. [ 367.122988][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 367.138058][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 367.154721][T13048] gretap0: entered promiscuous mode [ 367.164308][T13048] gretap0: left promiscuous mode [ 367.204956][T13050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.238442][T13050] syzkaller1: linktype set to 778 [ 367.251734][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 367.251839][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1978'. [ 367.296034][T13053] bond0: ARP target 170.170.170.170 is already present [ 367.311103][T13053] bond0: option arp_ip_target: invalid value (2863311530) [ 367.588290][T13032] lo speed is unknown, defaulting to 1000 [ 367.608329][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 367.651312][T13074] netlink: 'syz.1.1982': attribute type 7 has an invalid length. [ 368.346971][T13097] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.605483][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1991'. [ 368.826570][T13104] ip6tnl0: Caught tx_queue_len zero misconfig [ 368.893230][T13097] lo speed is unknown, defaulting to 1000 [ 368.903316][T13100] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.402606][T13108] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.695165][T13100] lo speed is unknown, defaulting to 1000 [ 369.725364][T13108] lo speed is unknown, defaulting to 1000 [ 369.925146][T13150] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002 [ 370.068641][T11770] net_ratelimit: 28 callbacks suppressed [ 370.068661][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 370.287699][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 370.397428][T13160] __nla_validate_parse: 5 callbacks suppressed [ 370.397447][T13160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2005'. [ 370.416658][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 370.531891][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 370.649438][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 370.680921][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 370.757655][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 370.868423][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 370.989437][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 371.156730][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 371.249577][T13199] tipc: Enabled bearer , priority 0 [ 371.267867][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 371.277513][T13199] syzkaller0: entered promiscuous mode [ 371.284234][T13199] syzkaller0: entered allmulticast mode [ 371.318815][T13199] tipc: Resetting bearer [ 371.339816][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 371.356135][T13198] tipc: Resetting bearer [ 371.380845][T13198] tipc: Disabling bearer [ 371.393301][T13209] tipc: Enabled bearer , priority 0 [ 371.404333][T13205] syzkaller0: entered promiscuous mode [ 371.409997][T13205] syzkaller0: entered allmulticast mode [ 371.444722][T13204] tipc: Resetting bearer [ 371.493862][T13215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2015'. [ 371.509660][T13204] tipc: Disabling bearer [ 371.522415][T13218] x_tables: duplicate entry at hook 2 [ 373.193780][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 373.267463][T13234] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.389650][T13254] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2025'. [ 373.448074][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.462137][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 373.510019][T13259] syzkaller0: Caught tx_queue_len zero misconfig [ 373.652896][T13234] lo speed is unknown, defaulting to 1000 [ 373.729955][T13276] netlink: 'syz.0.2031': attribute type 9 has an invalid length. [ 373.748713][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 373.802384][T13266] netlink: 'syz.0.2031': attribute type 9 has an invalid length. [ 373.815340][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 374.232475][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 374.583814][T13299] netlink: 'syz.1.2039': attribute type 3 has an invalid length. [ 374.592473][T13304] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 375.138202][T11771] net_ratelimit: 18 callbacks suppressed [ 375.138222][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 375.242580][T13333] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.438123][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 375.547931][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 375.569231][T13341] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 375.659779][T13348] __nla_validate_parse: 2 callbacks suppressed [ 375.659798][T13348] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2051'. [ 375.701437][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 375.726323][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 375.843667][T13347] bond18: (slave veth7): Enslaving as an active interface with a down link [ 375.854033][T13333] lo speed is unknown, defaulting to 1000 [ 375.861634][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 375.933711][T13351] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.012654][T13359] bond5: entered promiscuous mode [ 376.018156][T13359] bond5: entered allmulticast mode [ 376.023742][T13359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.034833][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 376.191947][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 376.227932][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 376.300403][T13365] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.307070][T13380] netlink: 416 bytes leftover after parsing attributes in process `syz.0.2056'. [ 376.317500][T13380] netlink: 'syz.0.2056': attribute type 4 has an invalid length. [ 376.337728][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 376.449291][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 376.544037][T13384] netlink: 'syz.2.2057': attribute type 21 has an invalid length. [ 376.552668][T13384] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2057'. [ 376.562596][T13384] netlink: 'syz.2.2057': attribute type 4 has an invalid length. [ 376.571128][T13384] netlink: 'syz.2.2057': attribute type 3 has an invalid length. [ 376.604856][T13384] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2057'. [ 376.614525][T13365] lo speed is unknown, defaulting to 1000 [ 376.621006][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 376.643678][T13351] lo speed is unknown, defaulting to 1000 [ 376.746090][T13387] veth0_virt2Oifi: renamed from dummy0 (while UP) [ 376.929208][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 377.045100][T13393] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.583523][T13393] lo speed is unknown, defaulting to 1000 [ 378.109638][T13419] xt_cgroup: xt_cgroup: no path or classid specified [ 378.140366][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2066'. [ 378.164243][T13424] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2068'. [ 378.196514][T13424] netlink: 'syz.1.2068': attribute type 10 has an invalid length. [ 378.209366][T13424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2068'. [ 378.502102][T13433] xt_CT: No such helper "netbios-ns" [ 378.576813][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.583900][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.087262][T13523] veth0_virt2Oifi: entered allmulticast mode [ 380.229632][ T5925] net_ratelimit: 25 callbacks suppressed [ 380.229652][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 380.357947][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 380.467923][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 380.578548][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 380.677084][T13537] netlink: 'syz.4.2095': attribute type 2 has an invalid length. [ 380.693950][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 380.733910][T13542] netlink: 'syz.3.2096': attribute type 16 has an invalid length. [ 380.742094][T13542] netlink: 'syz.3.2096': attribute type 17 has an invalid length. [ 380.821123][T13545] netlink: 'syz.0.2097': attribute type 3 has an invalid length. [ 380.849356][T13545] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 380.869763][T13550] __nla_validate_parse: 10 callbacks suppressed [ 380.869784][T13550] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2097'. [ 380.872334][T13545] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2097'. [ 381.156684][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.219930][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2101'. [ 381.232554][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2101'. [ 381.251201][T13542] veth1_vlan: left allmulticast mode [ 381.307875][T13542] tipc: Resetting bearer [ 381.454978][T11771] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.467044][T11771] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.478302][T11771] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 52118 - 0 [ 381.486874][T11771] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.495957][T11771] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.506703][T11771] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 52118 - 0 [ 381.548835][T11771] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.558366][T11771] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.566739][T11771] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 52118 - 0 [ 381.588357][T11771] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.629036][T11771] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.637426][T11771] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 52118 - 0 [ 381.678319][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 381.827640][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 381.853366][T13588] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2105'. [ 381.863316][T13588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.948097][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 381.963259][T13597] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2108'. [ 382.068068][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 382.074466][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.705314][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2117'. [ 382.953759][T13632] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.017247][T13649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2123'. [ 383.386921][T13664] tipc: Enabling of bearer rejected, already enabled [ 383.401718][T13664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2127'. [ 383.516944][T13632] lo speed is unknown, defaulting to 1000 [ 383.530317][T13657] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 383.649144][T13665] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.654172][T11770] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.668432][T11770] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.689723][T13671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2131'. [ 383.691167][T11770] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.814300][T11770] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.843224][T13673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 384.071029][T13681] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 384.118843][T13681] bond0: (slave wlan1): Opening slave failed [ 384.265056][T13678] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.336997][T13665] lo speed is unknown, defaulting to 1000 [ 384.931662][T13678] lo speed is unknown, defaulting to 1000 [ 385.186444][T13719] netlink: 'syz.1.2143': attribute type 13 has an invalid length. [ 385.196220][T13719] netlink: 'syz.1.2143': attribute type 17 has an invalid length. [ 385.281812][T13722] x_tables: duplicate underflow at hook 3 [ 385.301724][T13719] net_ratelimit: 21 callbacks suppressed [ 385.301732][T13719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.329283][ T5910] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.346119][ T5910] syz2: Port: 1 Link ACTIVE [ 385.351601][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 385.361396][ T5896] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.469675][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 385.718241][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 385.752736][T13737] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 385.828181][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 385.939604][T13746] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 385.958235][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 385.974446][T13747] __nla_validate_parse: 2 callbacks suppressed [ 385.974463][T13747] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2151'. [ 386.018125][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 386.028646][T13751] 8021q: adding VLAN 0 to HW filter on device bond15 [ 386.042536][T13751] bond14: (slave bond15): making interface the new active one [ 386.051634][T13751] bond14: (slave bond15): Enslaving as an active interface with an up link [ 386.062949][T13746] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2149'. [ 386.072437][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 386.115108][T13757] 8021q: adding VLAN 0 to HW filter on device bond19 [ 386.186552][T13746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2149'. [ 386.198734][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 386.269437][T13760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.292684][T13746] 8021q: adding VLAN 0 to HW filter on device bond14 [ 386.320281][T13757] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.336987][T13762] vlan3: entered promiscuous mode [ 386.388712][T13762] bond14: entered promiscuous mode [ 386.394239][T13762] bond15: entered promiscuous mode [ 386.518781][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 386.560484][T13770] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 386.762439][T13757] lo speed is unknown, defaulting to 1000 [ 386.775617][T13766] wg1 speed is unknown, defaulting to 1000 [ 386.832713][T13766] wg1 speed is unknown, defaulting to 1000 [ 386.855430][T13766] wg1 speed is unknown, defaulting to 1000 [ 386.921246][T13766] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 386.953813][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'. [ 387.078544][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.087017][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.095996][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.104027][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.112570][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.121221][T13766] wg1 speed is unknown, defaulting to 1000 [ 387.354731][T13781] tipc: Can't bind to reserved service type 1 [ 387.379424][T13781] netlink: 'syz.2.2159': attribute type 39 has an invalid length. [ 387.491930][T13784] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2159'. [ 387.504887][T13784] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2159'. [ 387.516177][T13784] netlink: 'syz.2.2159': attribute type 5 has an invalid length. [ 387.524695][T13784] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2159'. [ 387.585136][T13784] vlan2: entered allmulticast mode [ 387.598068][T13784] bridge_slave_0: entered allmulticast mode [ 387.676012][T13787] sctp: [Deprecated]: syz.3.2161 (pid 13787) Use of int in maxseg socket option. [ 387.676012][T13787] Use struct sctp_assoc_value instead [ 388.090293][T13805] netlink: 'syz.4.2169': attribute type 10 has an invalid length. [ 388.125112][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 388.259519][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 388.295901][T13815] geneve5: entered promiscuous mode [ 388.329464][T13815] geneve5: entered allmulticast mode [ 388.344908][T11771] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 51021 - 0 [ 388.363635][T11771] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 51021 - 0 [ 388.377940][T11771] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 51021 - 0 [ 388.398548][T13815] netlink: 'syz.1.2172': attribute type 12 has an invalid length. [ 388.444667][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 388.458471][T11771] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 51021 - 0 [ 388.498543][T13831] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 388.528123][T13831] netlink: 'syz.4.2173': attribute type 7 has an invalid length. [ 388.558436][T13831] netlink: 'syz.4.2173': attribute type 8 has an invalid length. [ 388.577453][T13831] NCSI netlink: No device for ifindex 65584 [ 388.591504][T13817] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 388.599975][T13817] NCSI netlink: No device for ifindex 0 [ 389.275953][T13860] bridge_slave_1: entered promiscuous mode [ 389.579864][T13872] netlink: 'syz.0.2187': attribute type 10 has an invalid length. [ 389.725287][T13875] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.750552][T13881] No such timeout policy "syz1" [ 390.006850][T13875] lo speed is unknown, defaulting to 1000 [ 390.037186][T13875] wg1 speed is unknown, defaulting to 1000 [ 390.388079][T11773] net_ratelimit: 29 callbacks suppressed [ 390.388101][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 390.507973][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 390.618039][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 390.728355][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 390.838126][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 390.948259][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 391.058125][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 391.168139][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 391.278036][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 391.388147][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 395.468168][T11772] net_ratelimit: 36 callbacks suppressed [ 395.468189][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 395.588100][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 395.698038][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 395.808023][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 395.918098][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 396.027999][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 396.137973][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 396.248502][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 396.358030][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 396.467767][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 400.578103][ T5925] net_ratelimit: 36 callbacks suppressed [ 400.578125][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 400.697762][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 400.808107][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 400.917966][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 401.027689][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 401.138064][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 401.247697][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 401.357987][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 401.468252][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 401.578021][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 405.667705][T11770] net_ratelimit: 36 callbacks suppressed [ 405.667728][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 405.788230][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 405.898017][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 406.007693][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 406.118180][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 406.228043][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 406.337741][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 406.447717][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 406.558115][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 406.668025][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 410.737734][T11773] net_ratelimit: 36 callbacks suppressed [ 410.737755][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 410.857776][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 410.967700][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 411.078190][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 411.188047][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 411.298115][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 411.408164][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 411.517808][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 411.627754][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 411.738162][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 415.848149][T11773] net_ratelimit: 36 callbacks suppressed [ 415.848171][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 415.968308][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 416.078186][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 416.187957][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 416.298371][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 416.408205][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 416.518070][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 416.628418][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 416.738366][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 416.848208][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 420.948533][T11771] net_ratelimit: 36 callbacks suppressed [ 420.948555][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 421.068107][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 421.178010][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 421.288160][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 421.398523][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 421.508373][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 421.618183][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 421.727962][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 421.837967][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 421.947963][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 425.978138][T11773] net_ratelimit: 35 callbacks suppressed [ 425.978165][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 426.098044][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 426.207941][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 426.318146][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 426.427948][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 426.547982][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 426.657766][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 426.768104][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 426.877972][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 426.987975][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 431.068033][T11772] net_ratelimit: 36 callbacks suppressed [ 431.068054][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 431.188004][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 431.297972][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 431.408038][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 431.518087][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 431.628200][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 431.748217][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 431.857783][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 431.967962][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 432.078174][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 436.088080][T11772] net_ratelimit: 35 callbacks suppressed [ 436.088105][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 436.207975][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 436.317990][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 436.428147][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 436.537721][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 436.647819][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 436.758103][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 436.867964][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 436.977776][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 437.045164][T13901] dummy0: left allmulticast mode [ 437.074655][T13901] __nla_validate_parse: 5 callbacks suppressed [ 437.074672][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 437.091298][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 437.172273][T13909] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2199'. [ 437.215435][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 437.388273][T13924] netlink: 'syz.4.2203': attribute type 13 has an invalid length. [ 437.408128][T13924] tipc: Resetting bearer [ 437.590678][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 437.600378][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 437.691161][ T5948] lo speed is unknown, defaulting to 1000 [ 437.699650][ T5948] syz0: Port: 1 Link DOWN [ 438.122217][T13957] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.336338][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 438.360679][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 438.380344][T13971] pim6reg1: entered allmulticast mode [ 438.547054][T13957] lo speed is unknown, defaulting to 1000 [ 438.561535][T13957] wg1 speed is unknown, defaulting to 1000 [ 438.638913][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 438.710989][T13981] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.904067][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2220'. [ 438.934169][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2220'. [ 439.219217][T13977] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.519378][T14022] netlink: 'syz.1.2228': attribute type 28 has an invalid length. [ 439.914056][T13981] lo speed is unknown, defaulting to 1000 [ 439.968321][T13977] lo speed is unknown, defaulting to 1000 [ 439.979358][T13981] wg1 speed is unknown, defaulting to 1000 [ 440.042087][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.050221][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.104098][T13977] wg1 speed is unknown, defaulting to 1000 [ 440.733002][T14064] geneve5: entered promiscuous mode [ 440.745740][T11770] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 440.766778][T11770] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 440.790644][T11770] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 440.808259][T11770] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 441.148781][T11772] net_ratelimit: 26 callbacks suppressed [ 441.148802][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 441.188762][T14080] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.279427][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 441.388422][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 441.467380][T14080] lo speed is unknown, defaulting to 1000 [ 441.486209][T14080] wg1 speed is unknown, defaulting to 1000 [ 441.498402][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 441.638125][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 441.726952][T14110] netlink: 'syz.2.2253': attribute type 33 has an invalid length. [ 441.741039][T14110] `: renamed from team0 (while UP) [ 441.967675][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 441.998849][T14120] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.210323][T14125] __nla_validate_parse: 12 callbacks suppressed [ 442.210342][T14125] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2258'. [ 442.247386][T14125] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 442.288114][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 442.308940][T14120] lo speed is unknown, defaulting to 1000 [ 442.317906][T14120] wg1 speed is unknown, defaulting to 1000 [ 442.368999][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 442.558190][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 442.592379][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'. [ 442.679448][T14149] netdevrim0: left promiscuous mode [ 442.739182][T14149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.756687][T14149] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.868459][T14149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.925167][T14160] tipc: Enabling of bearer rejected, already enabled [ 442.979218][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.988799][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.015115][T14153] netlink: 'syz.0.2266': attribute type 15 has an invalid length. [ 443.065977][T14170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'. [ 443.079884][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.238367][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.293490][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 443.413782][T11771] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.622240][T14202] FAULT_INJECTION: forcing a failure. [ 443.622240][T14202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.698424][T14192] bond12: entered allmulticast mode [ 443.711886][T14202] CPU: 0 UID: 0 PID: 14202 Comm: syz.1.2280 Not tainted syzkaller #0 PREEMPT(full) [ 443.711912][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.711932][T14202] Call Trace: [ 443.711940][T14202] [ 443.711949][T14202] dump_stack_lvl+0x189/0x250 [ 443.711981][T14202] ? __pfx____ratelimit+0x10/0x10 [ 443.712008][T14202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.712033][T14202] ? __pfx__printk+0x10/0x10 [ 443.712081][T14202] ? __might_fault+0xb0/0x130 [ 443.712119][T14202] should_fail_ex+0x414/0x560 [ 443.712151][T14202] _copy_from_user+0x2d/0xb0 [ 443.712176][T14202] ___sys_sendmsg+0x158/0x2a0 [ 443.712203][T14202] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.712264][T14202] ? __fget_files+0x2a/0x420 [ 443.712282][T14202] ? __fget_files+0x3a0/0x420 [ 443.712311][T14202] __x64_sys_sendmsg+0x19b/0x260 [ 443.712337][T14202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.712370][T14202] ? __pfx_ksys_write+0x10/0x10 [ 443.712401][T14202] ? do_syscall_64+0xbe/0xfa0 [ 443.712428][T14202] do_syscall_64+0xfa/0xfa0 [ 443.712449][T14202] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.712472][T14202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.712491][T14202] ? clear_bhb_loop+0x60/0xb0 [ 443.712514][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.712536][T14202] RIP: 0033:0x7f9d0358f749 [ 443.712554][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.712570][T14202] RSP: 002b:00007f9d044bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.712592][T14202] RAX: ffffffffffffffda RBX: 00007f9d037e5fa0 RCX: 00007f9d0358f749 [ 443.712607][T14202] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 443.712619][T14202] RBP: 00007f9d044bd090 R08: 0000000000000000 R09: 0000000000000000 [ 443.712630][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.712640][T14202] R13: 00007f9d037e6038 R14: 00007f9d037e5fa0 R15: 00007ffffe1050d8 [ 443.712669][T14202] [ 443.958830][T11771] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.981631][T14205] ip6gretap2: entered allmulticast mode [ 443.999714][T14205] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 444.020685][T14209] netlink: 'syz.0.2282': attribute type 15 has an invalid length. [ 444.032631][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 444.079211][T14199] syzkaller1: entered promiscuous mode [ 444.084718][T14199] syzkaller1: entered allmulticast mode [ 444.196681][T14223] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 444.235340][T14223] bond13: entered promiscuous mode [ 444.240940][T14223] 8021q: adding VLAN 0 to HW filter on device bond13 [ 444.283247][T14229] 8021q: adding VLAN 0 to HW filter on device bond13 [ 444.299593][T14229] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 444.313284][T14229] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 444.331167][T14229] bond13: (slave wireguard0): making interface the new active one [ 444.342630][T14229] wireguard0: entered promiscuous mode [ 444.350581][T14229] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 444.384336][T14231] bridge3: entered allmulticast mode [ 444.392555][T14236] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 444.620119][T14236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.676104][T14239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.683664][T14239] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 444.695317][T14239] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 444.714300][T11772] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.736239][T11772] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.790011][T14243] veth9: entered promiscuous mode [ 444.813707][T14243] bond6: (slave veth9): Enslaving as an active interface with a down link [ 444.829896][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 445.066404][T11773] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.077443][T11773] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.089560][T14252] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.178757][T14269] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 445.218369][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2300'. [ 445.232180][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 446.346493][T11771] net_ratelimit: 14 callbacks suppressed [ 446.346515][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 446.967317][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 447.356136][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 447.797352][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 448.196580][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 448.486355][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 448.892879][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 448.892903][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.051691][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.384917][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 449.686289][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 450.025601][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 450.347191][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 451.377106][T11769] net_ratelimit: 4 callbacks suppressed [ 451.377127][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 451.684704][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 451.985033][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 452.373919][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 452.795153][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 453.146193][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 453.675636][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 453.965644][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 454.516667][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 454.805784][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 456.436440][T11774] net_ratelimit: 7 callbacks suppressed [ 456.436461][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 456.653313][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.806198][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 457.065474][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 457.314501][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 457.595187][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 457.865989][T14252] lo speed is unknown, defaulting to 1000 [ 457.932356][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.056792][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 458.315157][T14259] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.366984][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 458.744618][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 459.075623][T14252] wg1 speed is unknown, defaulting to 1000 [ 459.155809][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 459.455418][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 461.925487][T14299] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 462.206160][T11774] net_ratelimit: 1 callbacks suppressed [ 462.206180][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 470.573961][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 470.903906][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 471.197039][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 472.010738][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.212078][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 483.297195][T14324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.427104][T14324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.574745][T14324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.845627][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 483.966453][T14327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 484.125963][T14327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.147346][T14327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 484.216832][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 484.364878][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 484.686088][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 484.687084][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.845360][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 484.894156][T14329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.045083][T14329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.115053][T14329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.286211][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 485.586508][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 485.873878][T14331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 486.466344][T14324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 486.475985][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 486.595564][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 486.726523][T14324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 486.915466][T14327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.017423][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 487.035910][T14327] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.466312][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 487.546670][T14327] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.636439][T14327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.822769][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 487.866809][T14327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.964949][T14327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 488.075416][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 488.186871][T14327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 488.735581][T14331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.916602][T11772] net_ratelimit: 2 callbacks suppressed [ 488.916621][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 489.235352][T14327] Bluetooth: hci7: command tx timeout [ 489.605522][T14331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.645164][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 490.014369][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 490.224417][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 490.365461][T14284] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.568911][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 490.846640][T14331] Bluetooth: hci6: command tx timeout [ 491.305183][T14331] Bluetooth: hci7: command tx timeout [ 491.366385][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 491.505946][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 492.026625][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 492.255911][T14331] Bluetooth: hci5: command tx timeout [ 492.365278][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 492.906053][T14331] Bluetooth: hci6: command tx timeout [ 492.964626][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 493.415445][T14331] Bluetooth: hci7: command tx timeout [ 494.076731][ T5925] net_ratelimit: 2 callbacks suppressed [ 494.076752][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 494.355257][T14331] Bluetooth: hci5: command tx timeout [ 494.494842][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 494.784080][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 494.975557][T14331] Bluetooth: hci6: command tx timeout [ 495.374376][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 495.456580][T14331] Bluetooth: hci7: command tx timeout [ 495.687168][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 496.037356][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 496.366390][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 496.426886][T14331] Bluetooth: hci5: command tx timeout [ 496.634833][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 496.995587][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 497.094661][T14331] Bluetooth: hci6: command tx timeout [ 497.226022][T14312] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.424634][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 498.507435][T14331] Bluetooth: hci5: command tx timeout [ 499.157253][ T5925] net_ratelimit: 9 callbacks suppressed [ 499.157273][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 499.615735][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 500.006745][T14337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2317'. [ 500.155439][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 500.435925][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 500.816750][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 501.076903][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 501.205365][T14327] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 501.316634][T14327] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 501.405353][T14327] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 501.465052][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.495916][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537053][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.677312][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 502.056552][T14327] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 502.076413][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 502.315562][T14327] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 502.500630][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 503.370837][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.246955][T11772] net_ratelimit: 10 callbacks suppressed [ 504.246977][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 504.576663][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 505.055527][T14327] Bluetooth: hci8: command tx timeout [ 505.326899][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 505.825183][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 506.056652][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 507.146476][T14327] Bluetooth: hci8: command tx timeout [ 507.851937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.964206][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 508.265059][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 508.587115][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 508.876643][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 509.243965][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 509.261989][T14327] Bluetooth: hci8: command tx timeout [ 509.486420][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 509.717033][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 510.145542][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 510.376201][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 511.324818][T14327] Bluetooth: hci8: command tx timeout [ 511.546635][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 511.780692][T14312] lo speed is unknown, defaulting to 1000 [ 511.907335][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 512.295734][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 512.726247][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 512.965007][T14312] wg1 speed is unknown, defaulting to 1000 [ 512.985835][T14339] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.036125][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 513.265389][T14284] lo speed is unknown, defaulting to 1000 [ 513.387294][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 514.815315][T14259] lo speed is unknown, defaulting to 1000 [ 514.956975][T14284] wg1 speed is unknown, defaulting to 1000 [ 514.985157][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 524.274556][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 524.644955][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 525.186172][T14259] wg1 speed is unknown, defaulting to 1000 [ 528.703044][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 545.915017][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 546.956595][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 554.666275][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 555.625565][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 560.677098][T14331] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 561.285369][T14331] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 561.466986][T14331] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 562.213664][T14331] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 562.747058][T14331] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 562.965830][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.026883][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.055438][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.177255][T14331] Bluetooth: hci9: command tx timeout [ 568.012571][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.084349][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 568.265797][T14331] Bluetooth: hci9: command tx timeout [ 570.335547][T14327] Bluetooth: hci9: command tx timeout [ 570.656091][T14327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.937198][T14327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.095157][T14327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.787103][T14327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.413687][T14324] Bluetooth: hci9: command tx timeout [ 572.547008][T14324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.985556][T14331] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 573.134530][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.205020][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 573.486175][T14331] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 573.685920][T14331] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 573.826205][T14331] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 573.895372][T14331] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 574.516820][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 574.667198][T14331] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 575.336073][T14331] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 575.366134][T14331] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 575.456920][T14331] Bluetooth: hci0: command tx timeout [ 577.536737][T14324] Bluetooth: hci0: command tx timeout [ 578.195316][T14324] Bluetooth: hci10: command tx timeout [ 578.576832][T14324] Bluetooth: hci11: command tx timeout [ 579.705417][T14324] Bluetooth: hci0: command tx timeout [ 579.736697][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 580.014712][T14327] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 580.055482][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 580.117052][T14327] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 580.267238][ T5834] Bluetooth: hci10: command tx timeout [ 580.284361][T14327] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 580.654809][T14327] Bluetooth: hci11: command tx timeout [ 580.786119][T14327] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 580.890986][T11772] bond3: (slave bridge4): failed to get link speed/duplex [ 581.136094][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 581.796292][ T5834] Bluetooth: hci0: command tx timeout [ 582.347043][T14324] Bluetooth: hci10: command tx timeout [ 582.855312][T14324] Bluetooth: hci11: command tx timeout [ 583.135287][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 583.173940][T14339] lo speed is unknown, defaulting to 1000 [ 583.336589][T14322] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.925312][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 584.336328][T14324] Bluetooth: hci12: command tx timeout [ 584.435724][T14324] Bluetooth: hci10: command tx timeout [ 584.774703][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 584.906133][T14324] Bluetooth: hci11: command tx timeout [ 585.175649][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 586.416132][T14324] Bluetooth: hci12: command tx timeout [ 587.386712][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 588.496955][T14324] Bluetooth: hci12: command tx timeout [ 588.766865][T11772] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 589.686475][ T5925] bond3: (slave bridge4): failed to get link speed/duplex [ 590.596343][T14324] Bluetooth: hci12: command tx timeout [ 595.414787][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 596.005559][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 596.615539][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 597.154523][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 605.116946][T11769] bond3: (slave bridge4): failed to get link speed/duplex [ 606.245994][T11772] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 608.665642][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 611.135893][T14331] Bluetooth: hci7: command 0x0406 tx timeout [ 611.144971][T14327] Bluetooth: hci6: command 0x0406 tx timeout [ 613.084484][T14324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.407188][T14324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.536449][T14324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 614.146999][T14331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.526909][T14331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 615.065019][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 615.205226][T14331] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 615.342594][T14327] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 615.456614][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 615.546569][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 615.896638][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 615.966140][T11775] bond3: (slave bridge4): failed to get link speed/duplex [ 616.185719][T14331] Bluetooth: hci5: command 0x0406 tx timeout [ 616.216053][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 616.424815][T14331] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 616.646211][T14325] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.713778][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 618.185362][ T5834] Bluetooth: hci4: command tx timeout [ 618.735159][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 618.967039][T11772] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 618.986173][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 619.194816][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 619.696869][T14327] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 619.836433][T14327] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 619.956357][T14327] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 620.195817][T14327] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 620.254847][T14327] Bluetooth: hci4: command tx timeout [ 620.275538][T14327] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 620.695549][T14327] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 621.214500][T14331] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 621.576533][T14324] Bluetooth: hci9: command tx timeout [ 622.206237][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 622.345957][ T5834] Bluetooth: hci4: command tx timeout [ 622.955974][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 623.704185][T14327] Bluetooth: hci9: command tx timeout [ 624.286626][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 624.356443][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.416741][ T5834] Bluetooth: hci14: command tx timeout [ 624.456017][T14324] Bluetooth: hci4: command tx timeout [ 624.527221][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.575915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.896383][T14324] Bluetooth: hci13: command tx timeout [ 624.984449][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 625.805432][T14324] Bluetooth: hci9: command tx timeout [ 626.337290][T11772] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 626.444520][T14324] Bluetooth: hci8: command 0x0406 tx timeout [ 626.506545][T14324] Bluetooth: hci14: command tx timeout [ 626.815397][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.974600][ T5834] Bluetooth: hci13: command tx timeout [ 627.177293][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.466886][T14327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 627.864266][T14327] Bluetooth: hci9: command tx timeout [ 628.034332][T14327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.507147][T14327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.576323][T14327] Bluetooth: hci14: command tx timeout [ 629.067199][T14324] Bluetooth: hci13: command tx timeout [ 629.274964][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 629.821577][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 630.665089][T14327] Bluetooth: hci14: command tx timeout [ 631.136296][T14327] Bluetooth: hci13: command tx timeout [ 631.226492][T14327] Bluetooth: hci0: command tx timeout [ 631.545883][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 633.075970][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 633.295513][T14327] Bluetooth: hci0: command tx timeout [ 633.695900][T11771] bond3: (slave bridge4): failed to get link speed/duplex [ 633.885437][T14328] ip6_vti0 speed is unknown, defaulting to 1000 [ 634.476654][ T8465] bond3: (slave bridge4): failed to get link speed/duplex [ 635.245674][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 635.385944][T14327] Bluetooth: hci0: command tx timeout [ 635.597096][T11774] bond3: (slave bridge4): failed to get link speed/duplex [ 637.105819][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 637.455365][T14327] Bluetooth: hci0: command tx timeout [ 638.125872][T11770] bond3: (slave bridge4): failed to get link speed/duplex [ 638.834807][T11773] bond3: (slave bridge4): failed to get link speed/duplex [ 647.656720][T11772] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 647.845977][T11772] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 662.954596][T11772] bond10 (unregistering): (slave gretap1): Releasing active interface [ 664.556482][T11772] tipc: Disabling bearer [ 669.424475][T14324] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 669.535017][T14324] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 669.667185][T14324] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 670.125313][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 670.136986][T14331] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 670.246592][T14331] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 670.386687][T11772] dvmrp1 (unregistering): left allmulticast mode [ 670.516525][T14331] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 670.795425][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 670.924964][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 671.226208][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 671.325035][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 671.675737][T14327] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 671.876244][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 672.285471][T14324] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 672.695767][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 673.804199][ T5834] Bluetooth: hci11: command tx timeout [ 674.737185][ T5834] Bluetooth: hci15: command tx timeout [ 675.235596][T14331] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 675.236353][T14324] Bluetooth: hci16: command tx timeout [ 675.306452][T14331] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 675.446789][T14331] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 675.646670][T11772] bond6 (unregistering): (slave geneve3): Releasing active interface [ 675.854986][T14331] Bluetooth: hci11: command tx timeout [ 675.916188][T14331] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 676.213800][T14331] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 676.816105][T14331] Bluetooth: hci15: command tx timeout [ 677.306114][T14331] Bluetooth: hci16: command tx timeout [ 677.946350][T14331] Bluetooth: hci11: command tx timeout [ 678.917169][T14331] Bluetooth: hci17: command tx timeout [ 678.935109][T14331] Bluetooth: hci15: command tx timeout [ 679.396449][T14331] Bluetooth: hci16: command tx timeout [ 679.976965][T11772] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 680.025328][T14331] Bluetooth: hci11: command tx timeout [ 680.074680][T11772] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 680.995157][T14324] Bluetooth: hci15: command tx timeout [ 681.016208][T14331] Bluetooth: hci17: command tx timeout [ 681.465270][T14324] Bluetooth: hci16: command tx timeout [ 683.064180][T14324] Bluetooth: hci17: command tx timeout [ 685.134965][T14324] Bluetooth: hci17: command tx timeout [ 685.815469][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.846744][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.905071][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.556204][T14331] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 688.676275][T14331] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 688.800491][T14331] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 689.145534][T14331] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 689.275218][T14331] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 691.706545][T14331] Bluetooth: hci18: command tx timeout [ 693.775438][T14331] Bluetooth: hci18: command tx timeout [ 695.856327][T14331] Bluetooth: hci18: command tx timeout [ 696.012854][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 697.936685][T14331] Bluetooth: hci18: command tx timeout [ 698.576489][T11772] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 698.946933][T11772] bond0 (unregistering): Released all slaves [ 701.130016][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 703.216756][T14331] Bluetooth: hci10: command 0x0406 tx timeout [ 707.763637][T11772] bond1 (unregistering): Released all slaves [ 708.335206][ T5834] Bluetooth: hci12: command 0x0406 tx timeout [ 716.543279][T11772] bond2 (unregistering): Released all slaves [ 725.886975][ T5834] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 726.106931][ T5834] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 726.175042][ T5834] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 726.216490][T11772] bond3 (unregistering): Released all slaves [ 726.594977][ T5834] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 726.786254][ T5834] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 730.174771][ T5834] Bluetooth: hci19: command tx timeout [ 732.264542][ T5834] Bluetooth: hci19: command tx timeout [ 733.785233][T14324] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 733.916283][T14331] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 734.046240][T14331] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 734.186595][T14331] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 734.324101][T14327] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 734.344979][T14331] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 734.354792][T14327] Bluetooth: hci19: command tx timeout [ 734.457211][ T5840] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 734.865916][ T5840] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 735.064147][ T5840] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 735.381928][ T5834] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 736.386685][T14331] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 736.425010][T14331] Bluetooth: hci19: command tx timeout [ 736.605849][T14331] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 736.707249][T14331] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 737.115446][ T5834] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 737.367187][ T5834] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 737.613945][ T5834] Bluetooth: hci20: command tx timeout [ 738.015380][T14324] Bluetooth: hci21: command tx timeout [ 738.584839][T14324] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 738.665965][T14324] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 738.716339][T14324] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 738.755141][T11772] bond4 (unregistering): Released all slaves [ 739.013136][T14324] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 739.055650][T14324] Bluetooth: hci4: command 0x0406 tx timeout [ 739.243931][T14324] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 739.701572][T14331] Bluetooth: hci20: command tx timeout [ 740.106932][T14331] Bluetooth: hci21: command tx timeout [ 740.176365][T14331] Bluetooth: hci22: command tx timeout [ 741.786474][T14331] Bluetooth: hci20: command tx timeout [ 742.105534][T14331] Bluetooth: hci23: command tx timeout [ 742.184336][T14324] Bluetooth: hci21: command tx timeout [ 742.261193][T14324] Bluetooth: hci22: command tx timeout [ 743.886939][T14324] Bluetooth: hci20: command tx timeout [ 744.207258][T14324] Bluetooth: hci23: command tx timeout [ 744.225632][T14331] Bluetooth: hci9: command 0x0406 tx timeout [ 744.254824][T14331] Bluetooth: hci21: command tx timeout [ 744.356560][T14324] Bluetooth: hci22: command tx timeout [ 744.906872][ T31] INFO: task syz-executor:14339 blocked for more than 143 seconds. [ 745.064618][ T31] Not tainted syzkaller #0 [ 745.165942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 745.415553][ T31] task:syz-executor state:D stack:22240 pid:14339 tgid:14339 ppid:1 task_flags:0x400140 flags:0x00080003 [ 745.526217][ T31] Call Trace: [ 745.597278][ T31] [ 745.656444][ T31] __schedule+0x1798/0x4cc0 [ 745.734622][ T31] ? __lock_acquire+0xab9/0xd20 [ 745.844664][ T31] ? __lock_acquire+0xab9/0xd20 [ 745.924674][ T31] ? __pfx___schedule+0x10/0x10 [ 745.995528][ T31] ? schedule+0x91/0x360 [ 746.066506][ T31] schedule+0x165/0x360 [ 746.145494][ T31] schedule_preempt_disabled+0x13/0x30 [ 746.255669][ T5834] Bluetooth: hci23: command tx timeout [ 746.335395][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 746.434600][ T5834] Bluetooth: hci22: command tx timeout [ 746.586272][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 746.706253][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 746.805522][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 746.944943][ T31] ? xa_find_after+0xae/0x430 [ 747.095550][ T31] down_read+0x98/0x2e0 [ 747.205200][ T31] rdma_dev_init_net+0x1d2/0x270 [ 747.324961][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.334030][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 747.334085][ T31] ops_init+0x35c/0x5c0 [ 747.334121][ T31] setup_net+0xfe/0x320 [ 747.334146][ T31] ? __pfx_setup_net+0x10/0x10 [ 747.334171][ T31] ? copy_net_ns+0x337/0x4e0 [ 747.334191][ T31] ? down_read_killable+0x1d1/0x350 [ 747.334220][ T31] ? preinit_net+0x47d/0x780 [ 747.334244][ T31] copy_net_ns+0x34e/0x4e0 [ 747.334270][ T31] create_new_namespaces+0x3f3/0x720 [ 747.334300][ T31] ? security_capable+0x7e/0x2e0 [ 747.334338][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 747.334372][ T31] ksys_unshare+0x4c8/0x8c0 [ 747.334407][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 747.334432][ T31] ? dnotify_flush+0x1db/0x5e0 [ 747.334457][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 747.334485][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 747.334525][ T31] __x64_sys_unshare+0x38/0x50 [ 747.334552][ T31] do_syscall_64+0xfa/0xfa0 [ 747.334576][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.334601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.334623][ T31] ? clear_bhb_loop+0x60/0xb0 [ 747.334649][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.334671][ T31] RIP: 0033:0x7f1830390f47 [ 747.334690][ T31] RSP: 002b:00007ffd75d6dc58 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 747.334715][ T31] RAX: ffffffffffffffda RBX: 00007f18305e5f40 RCX: 00007f1830390f47 [ 747.334732][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 747.334747][ T31] RBP: 00007f18305e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 747.334761][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 747.334775][ T31] R13: 0000000000000003 R14: 00007ffd75d6df28 R15: 0000000000000000 [ 747.334811][ T31] [ 747.334848][ T31] INFO: task syz-executor:14359 blocked for more than 145 seconds. [ 747.334864][ T31] Not tainted syzkaller #0 [ 747.334875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.334886][ T31] task:syz-executor state:D stack:24448 pid:14359 tgid:14359 ppid:1 task_flags:0x400140 flags:0x00080003 [ 747.334946][ T31] Call Trace: [ 747.334955][ T31] [ 747.334969][ T31] __schedule+0x1798/0x4cc0 [ 747.335007][ T31] ? __lock_acquire+0xab9/0xd20 [ 747.335036][ T31] ? __lock_acquire+0xab9/0xd20 [ 747.335059][ T31] ? __pfx___schedule+0x10/0x10 [ 747.335122][ T31] ? schedule+0x91/0x360 [ 747.335149][ T31] schedule+0x165/0x360 [ 747.335175][ T31] schedule_preempt_disabled+0x13/0x30 [ 747.335198][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 747.335226][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 747.335262][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 747.335297][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 747.335328][ T31] ? xa_find+0x25b/0x2b0 [ 747.335366][ T31] down_read+0x98/0x2e0 [ 747.335397][ T31] rdma_dev_init_net+0x1d2/0x270 [ 747.335421][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 747.335458][ T31] ops_init+0x35c/0x5c0 [ 747.335493][ T31] setup_net+0xfe/0x320 [ 747.335516][ T31] ? __pfx_setup_net+0x10/0x10 [ 747.335541][ T31] ? copy_net_ns+0x337/0x4e0 [ 747.335562][ T31] ? down_read_killable+0x1d1/0x350 [ 747.335589][ T31] ? preinit_net+0x47d/0x780 [ 747.335613][ T31] copy_net_ns+0x34e/0x4e0 [ 747.335639][ T31] create_new_namespaces+0x3f3/0x720 [ 747.335667][ T31] ? security_capable+0x7e/0x2e0 [ 747.335704][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 747.335732][ T31] ksys_unshare+0x4c8/0x8c0 [ 747.335766][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 747.335791][ T31] ? dnotify_flush+0x1db/0x5e0 [ 747.335815][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 747.335841][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 747.335881][ T31] __x64_sys_unshare+0x38/0x50 [ 747.335908][ T31] do_syscall_64+0xfa/0xfa0 [ 747.335931][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.335955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.335977][ T31] ? clear_bhb_loop+0x60/0xb0 [ 747.336003][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.336024][ T31] RIP: 0033:0x7f604a790f47 [ 747.336041][ T31] RSP: 002b:00007ffd40bed8c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 747.336064][ T31] RAX: ffffffffffffffda RBX: 00007f604a9e5f40 RCX: 00007f604a790f47 [ 747.336081][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 747.336095][ T31] RBP: 00007f604a9e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 747.336109][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 747.336122][ T31] R13: 0000000000000003 R14: 00007ffd40bedb98 R15: 0000000000000000 [ 747.336158][ T31] [ 747.336188][ T31] [ 747.336188][ T31] Showing all locks held in the system: [ 747.336201][ T31] 1 lock held by khungtaskd/31: [ 747.336214][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 747.336283][ T31] 3 locks held by aoe_tx0/1301: [ 747.336309][ T31] 2 locks held by getty/5587: [ 747.336320][ T31] #0: ffff8880337fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 747.336388][ T31] #1: ffffc900036ae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 747.336444][ T31] 1 lock held by sshd-session/5812: [ 747.336458][ T31] 3 locks held by kworker/u9:4/5834: [ 747.336471][ T31] #0: ffff88807e278948 ((wq_completion)hci14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 747.336533][ T31] #1: ffffc900041cfba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 747.336590][ T31] #2: ffff88804eda0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 747.336663][ T31] 3 locks held by kworker/u8:36/11770: [ 747.336676][ T31] #0: ffff88814c6f8948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 747.336733][ T31] #1: ffffc90003a9fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 747.336791][ T31] #2: ffffffff8f2cd688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 747.336847][ T31] 3 locks held by kworker/u8:37/11771: [ 747.336860][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 747.336923][ T31] #1: ffffc90003a8fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 747.336979][ T31] #2: ffffffff8f2cd688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 747.337040][ T31] 5 locks held by kworker/u8:38/11772: [ 747.337052][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 747.337108][ T31] #1: ffffc90003a7fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 747.337163][ T31] #2: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 747.337218][ T31] #3: ffffffff8f2cd688 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 747.337273][ T31] #4: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 747.495790][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.334666][T14331] Bluetooth: hci23: command tx timeout [ 748.396809][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.455390][ T31] 5 locks held by kworker/u8:40/11774: [ 748.664751][ T31] 2 locks held by syz.0.2296/14259: [ 748.814745][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 748.936805][ T31] #1: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 749.032398][ T31] 2 locks held by syz.3.2304/14284: [ 749.041622][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 749.156508][ T31] #1: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 749.304981][T14331] Bluetooth: hci14: command 0x0406 tx timeout [ 749.324920][ T5840] Bluetooth: hci13: command 0x0406 tx timeout [ 749.436871][ T31] 2 locks held by syz.1.2311/14312: [ 749.536354][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 749.647084][ T31] #1: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 749.866503][ T31] 3 locks held by syz-executor/14322: [ 749.945868][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 750.075241][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 750.336408][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 750.476473][ T31] 5 locks held by kworker/u9:0/14324: [ 750.544385][ T31] #0: ffff88804ed8c148 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 750.676751][ T31] #1: ffffc9000e41fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 750.804883][ T31] #2: ffff88807e4d4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 750.895378][ T31] #3: ffff88807e4d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 751.035814][ T31] #4: ffffffff8f437808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 751.266741][ T31] 3 locks held by syz-executor/14325: [ 751.336106][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 751.447284][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 751.637070][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 751.776820][ T31] 5 locks held by syz-executor/14328: [ 751.857074][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 751.996503][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 752.125976][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 752.205453][ T31] #3: ffff888026934f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 752.307183][ T31] #4: ffffffff8f2cd688 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 752.404671][ T31] 3 locks held by syz-executor/14339: [ 752.435651][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 752.496659][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 752.664213][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 752.797152][ T31] 3 locks held by syz-executor/14359: [ 752.854294][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 752.944407][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 753.076715][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 753.164975][ T31] 3 locks held by syz-executor/14363: [ 753.174301][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 753.205970][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 753.246099][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 753.284813][ T31] 3 locks held by syz-executor/14370: [ 753.316842][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 753.516037][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 753.686922][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 753.794729][ T31] 3 locks held by syz-executor/14372: [ 753.864452][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 753.994876][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 754.075771][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 754.165648][ T31] 3 locks held by syz-executor/14374: [ 754.216020][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 754.345037][ T31] #1: ffffffff8f0393b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 754.426036][T14331] Bluetooth: hci0: command 0x0406 tx timeout [ 754.535468][ T31] #2: ffffffff8f039570 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 754.725074][ T31] 3 locks held by syz-executor/14375: [ 754.886223][ T31] #0: ffffffff8f2c06f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0