last executing test programs: 27.968997255s ago: executing program 2 (id=3146): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) 27.64955245s ago: executing program 2 (id=3148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df6a14", 0xe}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) 27.311153409s ago: executing program 2 (id=3151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000180)=0x20) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x8000) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0xfffffc67, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x5d}}, 0x0) 27.000993309s ago: executing program 2 (id=3153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) (async) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}, {0x0, 0x13}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) (rerun: 32) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r2, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f000000000766bc9d963db27bf1"], 0x18}}, 0x4000) (rerun: 32) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r10, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000100)={0x24, r11, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}]}, 0x30}, 0x1, 0x0, 0x0, 0xc050}, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r7, 0x4, r0}, 0x10) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x82, &(0x7f00000001c0)={r15, 0x0, 0x3ff}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000280)={r15, 0x7}, &(0x7f0000000380)=0x8) 26.544662849s ago: executing program 2 (id=3155): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x8, 0x10001, 0x72, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x80, 0x10}}) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x28, &(0x7f0000000640)=""/40, 0x40f00, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x6, 0x3}, 0x10, 0x1ae01, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x3, 0xa, 0xa}], 0x10, 0x2}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0300000004f4ffff030000000a00000000000000811088fe399958163ef6c6bb0f799b2892211c886b02e81e835fd7b5b7441f297ac92c51330709ba407386d6df8551b43511cdbde0f5695b18454c2b3d0312cb37a7fe997cc89181ed1d8ee252c3eaa0a44717fcf85cbe2ea6cafaa2047eeab1ecd68a113b14ed6016964d88ff8aeda8d7d4926829d8a8f6c6f124793333e8ed50801ec3495f41cd5e6606b1d1967ce5dea70ab8b1d1240bb982f437e361ef52a5cac26dbf", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000c00)=0x10001, 0x4) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%-010d \x00'}, 0x20) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300000000000000000000000000000000000000b02aace312d5cfc62e2f62ca0c6884b6529a075ecf1e81811a52980afc96976b951a526cb7ead9f9225c2545ba4b32026631ec1a729b7d463a3d984a47c1ef5bb13e9d9ab749a18a3e4c9dc4994684f42b384b81390e4387e4d0c113319cea7ee981d571886d5ce6b657d072c8d6a3000000"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000200)=@raw=[@alu={0x4, 0x1, 0x2, 0xa, 0x4, 0x20, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], &(0x7f0000000240)='syzkaller\x00', 0xfff, 0xd6, &(0x7f0000000380)=""/214, 0x41000, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0xb, 0x1}, 0x10, 0x45f3, r6, 0x0, &(0x7f0000000c80)=[r7, r8, r9, r10, r9, r2, r11, r12, r14, r15], 0x0, 0x10, 0x9}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000f40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r16, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x3c}}, 0x40000) 25.625065413s ago: executing program 2 (id=3162): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6d, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20181, 0x8410}}, 0x20}}, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x40000000) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x1402, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6d, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20181, 0x8410}}, 0x20}}, 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x40000000) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x1402, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000001) (async) 6.850827407s ago: executing program 1 (id=3267): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2a00}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="00e90200"], 0x38}}], 0x2, 0x801) 4.368626329s ago: executing program 4 (id=3279): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbbd, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x8, 0xaa59, 0xb79}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.967973556s ago: executing program 3 (id=3281): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x138, 0x138, 0x308, 0x0, 0x218, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x4, @ipv6=@remote, 0x4e22}}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6}, {}, {}, 0x300}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@broadcast, 0x2c, 0xfb, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x7fffffbf, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(sha384-neon)\x00'}, 0x58) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r2, @ANYBLOB="00eeff0000000000000000000000000000000000c9493c602a48343d9042ac5c3b59f1cb4aad2e6edc75fe75ea9e5a05ab7f47a3d3ac1139e77680787b397bfa46157133811a6541165aabb22cbe48daacf3882e4ae0bb28a40ef6f8bc8dba2f51b134536650322dc1f083640a99a106b7b520d8fe3523d498ebbe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.608799774s ago: executing program 4 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x8000, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 3.309686006s ago: executing program 1 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@can_delroute={0x134, 0x19, 0x2, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x63, 0x14, 0x9, 0x5, "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", 0x2, "07b73f6eabbe77188a0cf1d6cf6c5348f0bdacb0"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040805) sendto(r0, &(0x7f0000000000)="4400000030000504000000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) 3.093015977s ago: executing program 3 (id=3285): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xf4, [0x1edd28ad, 0xff]}, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000), &(0x7f00000000c0)) 3.09007031s ago: executing program 4 (id=3286): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x4000) 2.903852656s ago: executing program 1 (id=3287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001580"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01"], 0x110}, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40938, 0x3}, [@IFLA_GROUP={0xfffffffffffffe0a}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.882923121s ago: executing program 0 (id=3288): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x164, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6aa537ba}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x77d220fc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x4048000}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.801483285s ago: executing program 4 (id=3289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500010084000000b70000000000000095000000000000000900000000000000adc15f3769d660c1672b4e28787a6edc3160b002fa924610386361360a01d1b214fee88dce5584e8ff1033f3ef28643c72f115cf30725c60a27c6ad428080dc55c6284dbdd4c5ad83077fa5d58ebf5f1cf266f889a23bce1419c7c9b5f920c5a931cbb27102402bebc1aeef81d2afe5f75ed0a70b12da63b4924ba58c87f93db194982403a6ac2bf4826d160"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x5f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0x60}, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg$unix(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900d70925bd2f870a4e17f48985cac68749a52502001403ff00ff03002a0000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20000010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff1, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xc, 0xf}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) socket(0x2c, 0x6, 0xdc63) 2.517626052s ago: executing program 0 (id=3290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @empty, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), 0x0}, 0x20) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) shutdown(r1, 0x1) 2.499635187s ago: executing program 3 (id=3291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x24, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002f00090028bd7000fcdbdf2504008378384e6e00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.869104591s ago: executing program 0 (id=3292): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.586385925s ago: executing program 1 (id=3293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@remote, @multicast1, 0x1, 0x2, [@multicast1, @loopback]}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f0967caedcc2a1f1fdecab4edc8f187463e541a0ee8ed5b2b8cc96daea1646266b928d0e20597", 0x37}, {&(0x7f0000000300)="783ba07e415c1edc57264a00104ca31e78306465ff1ffb865e", 0x19}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r3, @ANYBLOB="020027bd7000fedbdf25090000001800028014000380080001000500000008000100030000005400078008000100670600000c000300060000000000000008000100000000000c000300018000000000000008000200010000800c000400080000000000000008000100070000000c000300ffffffffffffff7f08000280040004002c000980087750c04090c02c280002000800000008000200ff07000008000100feffffff0800010007000000"], 0xb4}}, 0x4000) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1b0, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x57f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51e}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x408c4}, 0x20004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendto$inet6(r8, &(0x7f0000002440)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7df46bbc9f226a78cef190a9c0ead234c3390534090f2d88089e848a36fc8915a1384b310d762efec262e80ce8bfd87bf5fe99b4903644d928f4aa26da2db620ea28a1baf7e76640d6", 0x80, 0x40000, &(0x7f0000000280)={0x1d, 0x4e20, 0x2f0dc1a4, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}, 0x1c) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r10 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r10, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) recvmsg(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\a\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000500000004000380180001801400020073797a5f74756e000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.430472608s ago: executing program 0 (id=3294): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "764917f19ddf2f7babab8f1661c4c44c"}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xf8, 0x26, 0x400, 0x200000, 0xffffffff, {0xa}, [@generic="d1f0b63a60e530a3daebac8fede63aef87297e6e0d9d583a66e4ee844f7a12e96486e15f7cd27e8157b4bcd268d5322d97a02398f26253725fcce0fd64cd019d726e05097298fbe6a1ead49590261ef9e3fbb58b14905a747bcdedd269d664d7017f05130c08d2dd62ab18910b5f3f6cf88ec44f6c9cefe69bd350a0e5b5ec1a4c9fb0c2385809fe223696b58d52140d960d85b6848ea4c6e8c3a7ffb3eb41522152bc63544d49ab2076146f57e7a4069d0627c1e4ba3aa6518ddd5059a4631cb3694410b0f4d109f5ec00299de09fe888c547e057299ed641bde3147c41514524cf9c"]}, 0xf8}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) read(r0, &(0x7f0000000580)=""/63, 0x3f) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "764917f19ddf2f7babab8f1661c4c44c"}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xf8, 0x26, 0x400, 0x200000, 0xffffffff, {0xa}, [@generic="d1f0b63a60e530a3daebac8fede63aef87297e6e0d9d583a66e4ee844f7a12e96486e15f7cd27e8157b4bcd268d5322d97a02398f26253725fcce0fd64cd019d726e05097298fbe6a1ead49590261ef9e3fbb58b14905a747bcdedd269d664d7017f05130c08d2dd62ab18910b5f3f6cf88ec44f6c9cefe69bd350a0e5b5ec1a4c9fb0c2385809fe223696b58d52140d960d85b6848ea4c6e8c3a7ffb3eb41522152bc63544d49ab2076146f57e7a4069d0627c1e4ba3aa6518ddd5059a4631cb3694410b0f4d109f5ec00299de09fe888c547e057299ed641bde3147c41514524cf9c"]}, 0xf8}}, 0x0) (async) 1.029075019s ago: executing program 4 (id=3295): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x48800) setsockopt(r1, 0x1, 0x401, &(0x7f0000000040)="002d0153002fce31a73212b06b9a9a4aa33b9ebd5f56ae7d2206a48e53d3a1b8a8ec2b91440ed01e69b8c42e4715c76f05b376938445ddec2337f617c83e3fa662297bb2", 0x44) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) 1.026884681s ago: executing program 3 (id=3296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x1b, &(0x7f0000000040)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x72}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) 981.181434ms ago: executing program 0 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a310000000008000a40ffffffff1800118008000100666962000c0002800800020600000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x4410) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}, {0x0}], 0x2}, 0x40000061) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4077, 0xfed}, {&(0x7f0000003540)=""/4065, 0xfe1}, {&(0x7f0000002500)=""/4129, 0x1021}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/193, 0xc1}], 0x6, 0x0, 0x4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r8, r7, 0x0, 0xfffbffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) 883.605947ms ago: executing program 1 (id=3298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7e80900000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1}, 0x94) 617.204129ms ago: executing program 4 (id=3299): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001280)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001280)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000001b80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)="2d8a81dd", 0x4}], 0x1}}], 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3c8, r2, 0xa00, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x75, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x38, {0x1, 0x81, 0x6, "0c475258cdf089d1ab40bae5d2dce4a89f925b3e13cc372e2236651f4b9709f766c2f6fd5953a3c5d3eb6893abd0f70fdc0588d31f"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x4, 0x0, {0x3, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x1000}}, @supported_rates={0x1, 0x6, [{0x36}, {0x16}, {0x5}, {0x1b}, {0x1}, {0x1, 0x1}]}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_IE={0x4e, 0x2a, [@perr={0x84, 0xf, {0x5, 0x1, [{{}, @device_a, 0x4, @void, 0x33}]}}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x4, 0x0, {0x9, 0x4, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x406, 0x10, 0xf7}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x6, 0x3, @device_a, 0x0, 0x5, 0x80}}, @supported_rates={0x1, 0x1, [{0x6c, 0x1}]}, @sec_chan_ofs={0x3e, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "d571cb94799ba7e4a97b4fe7b7"}], @NL80211_ATTR_IE={0xf8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0xf8, 0xe7, "ed71201307541692d65d1f03196a5ad511e99790b605047f8dd367bf0dc38a56514f5dae656de60181e1a49ce4565b97903be0b37dc6deecd2ea6bd166698b821216c665b09405b98e36be08773544fc6fb12ac8b5f332bc7ae908414457ecf9d4efc40cbe6e3b85d67fbb29f11fd77261ba7c770818ad1712ba8b9a8fd5aa572f28d491f278449d5520888d6a9123e1c3174a93eb296752b558856ce14f0c5c23a54882fde21fb3d380c7ced01e0758a8a2f95f8350159bfb274c89852f96e6343e6370a4ddb6dc688fa06fd6fc8aa6025e20f396dff87b95832bfd48f761b3ff5e31127b8a09"}, @peer_mgmt={0x75, 0x6, {0x0, 0x2, @val=0x7, @void, @void}}]}, @NL80211_ATTR_IE={0x1c7, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xd, @device_b, 0x7, @value, 0xb71f, 0xff, @broadcast, 0x6}}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x5, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x4cee, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x7, 0xc}}, @chsw_timing={0x68, 0x4, {0x6, 0x9}}, @erp={0x2a, 0x1}, @random={0x0, 0x96, "a5f8003561cc972c33e714289410d8e3262415924ba0329c7fd1572ae46bc767e38dffc87d0ba9d7e12636b8eb2780f234c6590f056232718dbd9c4fbe5a83b82b52ef6de187c6e91ea20bf98766d823256b87648974f0cc9f3cee54b6dbc49e670d600df3cd4a1bee1326f910266e42fd21cbe85c152eb920262c8cf6c891097d4bddd6c741af3b384888cda0a1e7d305df9a22f8cb"}, @random_vendor={0xdd, 0xd5, "eb6b82151c1fe7a0254564bafd32b98704fc4d7b6132fb0f706d8b4e5cf32c04af518b42247e18207f59cabb27a085a4ab929be69401f409f8d5b1a66c31faca4fba824a14f0cc5e1244da0931cdb081135ad5a3a7f152741062d269a44c59c68e58289b9743cf3733e74ed31677797e2e4b54ba12a319fde5f90a5091a4eaa1239afe13cb02d546fc88f3061ca9a4977f6e3d9ef761f7b93856f7a6df3ac95a6ad30d0caf0e5dc6ea3bd21cadc55cb724ef0417dff09a7b5f4c9086d049e601c1becc082ea7f34373e00d2c6d5050ef528950dd28"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x11, 0x2a, [@cf={0x4, 0x6, {0xb, 0x7, 0x0, 0xc}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x8}}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4081}, 0x404c011) 542.115612ms ago: executing program 3 (id=3300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00d484d91a82dfee0ed8b62e5fd4b18ae8", 0x3a}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0xf0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS_MASK={0xc, 0x17, [0x9, 0xec0]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x98}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa22}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x402}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x441}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x482}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = accept(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000780)={0xa33f, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x7}}, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0xfdb0, r5, 0x1, 0x70bd25, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev}, {@empty}, {@dev}, {@broadcast}]}, @cipso={0x86, 0x11, 0x0, [{0x0, 0x2}, {0x0, 0x9, "7bd145794862b0"}]}]}}}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0xb, @private2, 0x9}, @in6={0xa, 0x4e21, 0xcf9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ad}, @in={0x2, 0x4e24, @multicast1}], 0x68) 475.409563ms ago: executing program 1 (id=3301): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af25bd7000000000000e20000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x440d1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 353.344421ms ago: executing program 0 (id=3302): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/83, &(0x7f00000000c0)=0x53) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x50, 0x12) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xba}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x553e}]}, 0x94}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0xffff, 0x7fffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r2, 0x2c, 0x0, 0x1, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000500), 0x4) close(r2) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000540)) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000580)={0x2, 0x0, 0xffff, 0x1, 0x2, 0xf}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000005c0), &(0x7f0000000600)=0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/26, 0x1a}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/197, 0xc5}, {&(0x7f0000001900)=""/221, 0xdd}, {&(0x7f0000001a00)=""/236, 0xec}, {&(0x7f0000001b00)=""/6, 0x6}, {&(0x7f0000001b40)=""/82, 0x52}, {&(0x7f0000001bc0)=""/253, 0xfd}], 0x9, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001e80)=""/173, 0xad}, {&(0x7f0000001f40)=""/61, 0x3d}, {&(0x7f0000001f80)=""/32, 0x20}, {&(0x7f0000001fc0)=""/167, 0xa7}, {&(0x7f0000002080)=""/109, 0x6d}, {&(0x7f0000002100)=""/100, 0x64}], 0x6}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)=""/189, 0xbd}, {&(0x7f0000002340)=""/177, 0xb1}, {&(0x7f0000002400)}], 0x3, &(0x7f0000002480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000025c0)=""/92, 0x5c}, {&(0x7f0000002640)=""/67, 0x43}, {&(0x7f00000026c0)=""/113, 0x71}, {&(0x7f0000002740)=""/249, 0xf9}, {&(0x7f0000002840)=""/123, 0x7b}], 0x5, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000002a40), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/145, 0x91}], 0x1}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/113, 0x71}, {&(0x7f0000003cc0)=""/141, 0x8d}, {&(0x7f0000003d80)}, {&(0x7f0000003dc0)=""/145, 0x91}, {&(0x7f0000003e80)=""/168, 0xa8}], 0x6, &(0x7f0000003fc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000004000), 0x6e, &(0x7f0000004440)=[{&(0x7f0000004080)=""/149, 0x95}, {&(0x7f0000004140)=""/248, 0xf8}, {&(0x7f0000004240)=""/224, 0xe0}, {&(0x7f0000004340)=""/26, 0x1a}, {&(0x7f0000004380)=""/77, 0x4d}, {&(0x7f0000004400)=""/36, 0x24}], 0x6, &(0x7f00000044c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000004600)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004680)=""/136, 0x88}], 0x1, &(0x7f0000004780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x8, 0x10000, &(0x7f0000004a40)={0x0, 0x3938700}) ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000004a80)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000004b00)={0x1e, 0x28, '\x00', 0x1, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000004b40)={0x0, @aes128, 0x0, @desc1}) r15 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r15, 0x111, 0x2, 0x0, 0x4) getsockopt$TIPC_CONN_TIMEOUT(r14, 0x10f, 0x82, &(0x7f0000004b80), &(0x7f0000004bc0)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000004c00)={0x7, 'macvlan1\x00', {0x2}, 0x10}) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000004c40)) r16 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r16, 0x111, 0x5, 0x9, 0x4) write$cgroup_int(r9, &(0x7f0000004c80)=0x100000001, 0x12) sendmsg$NL80211_CMD_SET_POWER_SAVE(r13, &(0x7f0000004dc0)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x1c, 0x0, 0x21c, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000006}, 0x20088080) 0s ago: executing program 3 (id=3303): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, 0x0, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4044000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r4) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.1883'. [ 276.922531][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 276.945845][T12921] bond5: entered promiscuous mode [ 276.951559][T12921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.972087][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 277.030076][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 277.197273][T12921] bond5: (slave bridge4): making interface the new active one [ 277.229675][T12921] bridge4: entered promiscuous mode [ 277.252486][T12921] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 278.291876][T12964] Cannot find map_set index 2 as target [ 278.538885][ T36] net_ratelimit: 21 callbacks suppressed [ 278.538908][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.702680][T12988] __nla_validate_parse: 4 callbacks suppressed [ 278.702705][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1900'. [ 278.913627][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.955775][T12993] netlink: 'syz.1.1902': attribute type 34 has an invalid length. [ 278.991197][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 279.053946][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.194521][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.202086][T12999] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 279.256099][T13005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.355756][T13012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1904'. [ 279.365905][T13012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.373193][T13012] IPv6: NLM_F_CREATE should be set when creating new route [ 279.386381][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 279.416537][T12999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.466186][T13008] bond6: (slave gretap1): making interface the new active one [ 279.554832][T13008] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 279.614084][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.703180][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 279.756224][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.995603][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.156299][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.345539][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.506108][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.755634][T13055] netlink: 'syz.4.1920': attribute type 2 has an invalid length. [ 280.773171][T13055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1920'. [ 280.905212][T13055] : entered promiscuous mode [ 280.989755][T13059] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000 [ 281.323722][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.535925][T13122] xt_cgroup: xt_cgroup: no path or classid specified [ 282.998058][T13138] pim6reg527: entered allmulticast mode [ 283.210843][T13144] IPv6: sit2: Disabled Multicast RS [ 283.294491][T13144] sit2: entered allmulticast mode [ 283.614882][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 283.726343][ T1029] net_ratelimit: 21 callbacks suppressed [ 283.726365][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 283.866028][T13165] ip_tables: iptables: counters copy to user failed while replacing table [ 283.951838][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.105709][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.276613][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.454295][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.815178][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.986672][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.134654][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.275406][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.496402][T13212] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 285.784371][T13212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.004559][T13206] bond7: (slave veth11): Enslaving as an active interface with a down link [ 286.079898][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 286.125768][T13234] xt_cluster: node mask cannot exceed total number of nodes [ 286.740684][T13252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1973'. [ 288.016243][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 288.276540][T13307] SET target dimension over the limit! [ 288.338132][T13309] netlink: 'syz.4.1990': attribute type 12 has an invalid length. [ 288.364796][T13309] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1990'. [ 288.423635][T13312] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 288.602826][T13318] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 288.802720][ T757] net_ratelimit: 23 callbacks suppressed [ 288.802744][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 288.949552][T13324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1995'. [ 289.010741][T13329] netlink: 'syz.2.1994': attribute type 1 has an invalid length. [ 289.036136][T13324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1995'. [ 289.056610][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 289.085948][T13329] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1994'. [ 289.125049][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.267619][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.434750][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.586465][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.714897][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.837067][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 289.859684][T13351] netlink: 'syz.4.2006': attribute type 11 has an invalid length. [ 289.879293][T13349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2004'. [ 289.908514][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.955521][T13355] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 290.339515][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.473901][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.640457][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.204987][T13390] __nla_validate_parse: 10 callbacks suppressed [ 291.205008][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 291.812798][T13411] netlink: 'syz.2.2022': attribute type 32 has an invalid length. [ 291.998792][T13419] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 292.169942][T13419] bond9: entered promiscuous mode [ 292.195522][T13419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.212384][T13434] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2025'. [ 292.309019][T13437] xt_addrtype: ipv6 does not support BROADCAST matching [ 292.339403][T13431] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.364987][T13431] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 292.383509][T13431] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 292.415743][T13431] bond9: (slave ip6gre1): making interface the new active one [ 292.433526][T13431] ip6gre1: entered promiscuous mode [ 292.455319][T13431] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 292.601367][T13439] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2028'. [ 293.090807][T13455] x_tables: duplicate entry at hook 3 [ 293.492689][T13476] syzkaller0: entered promiscuous mode [ 293.528695][T13476] syzkaller0: entered allmulticast mode [ 293.553202][T13477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 293.788929][T13489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'. [ 293.870046][T13494] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2042'. [ 293.923632][ T757] net_ratelimit: 18 callbacks suppressed [ 293.923652][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 294.084132][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 294.259906][T13505] openvswitch: netlink: Duplicate key (type 6). [ 294.375458][T13510] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 294.391736][T13510] netlink: 'syz.1.2048': attribute type 2 has an invalid length. [ 294.563954][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.013584][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.153833][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.252516][T12480] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.309632][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.383883][T13529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.483819][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.537438][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 295.646053][T13546] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2059'. [ 295.761138][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 295.789748][T13552] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 295.807008][T13548] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 295.828590][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 295.839471][T13548] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 295.882541][T13540] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 295.916492][T13540] bond5 (unregistering): Released all slaves [ 295.953656][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.990368][T13559] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 296.074396][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.263004][T13569] __nla_validate_parse: 2 callbacks suppressed [ 296.263025][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2063'. [ 296.396242][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2065'. [ 296.439473][T13574] bond0: ARP target 8.4.0.0 is already present [ 296.493326][T13574] bond0: option arp_ip_target: invalid value (1032) [ 296.676914][T13589] netlink: 'syz.4.2069': attribute type 11 has an invalid length. [ 296.733539][T13589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2069'. [ 296.749659][T13591] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2070'. [ 296.809915][T13591] bridge0: port 5(veth1_to_bridge) entered blocking state [ 296.821502][T13591] bridge0: port 5(veth1_to_bridge) entered disabled state [ 296.861504][T13591] veth1_to_bridge: entered allmulticast mode [ 296.915103][T13591] veth1_to_bridge: entered promiscuous mode [ 297.014283][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 297.031900][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 297.236605][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 297.498694][T13615] IPv6: Can't replace route, no match found [ 297.594480][T13619] lo: entered allmulticast mode [ 297.621752][T13619] tunl0: entered allmulticast mode [ 297.656820][T13619] gre0: entered allmulticast mode [ 297.678346][T13619] gretap0: entered allmulticast mode [ 297.710107][T13619] erspan0: entered allmulticast mode [ 297.739918][T13619] ip_vti0: entered allmulticast mode [ 297.770236][T13619] ip6_vti0: entered allmulticast mode [ 297.816125][T13619] sit0: entered allmulticast mode [ 297.853381][T13619] ip6tnl0: entered allmulticast mode [ 297.889843][T13619] ip6gre0: entered allmulticast mode [ 297.908948][T13619] syz_tun: entered allmulticast mode [ 297.936639][T13619] ip6gretap0: entered allmulticast mode [ 297.957979][T13619] bridge0: entered allmulticast mode [ 297.981989][T13619] vcan0: entered allmulticast mode [ 298.008349][T13619] bond0: left promiscuous mode [ 298.036201][T13619] bond_slave_0: left promiscuous mode [ 298.053900][T13619] bond_slave_1: left promiscuous mode [ 298.095620][T13619] team0: entered allmulticast mode [ 298.117719][T13619] team_slave_0: entered allmulticast mode [ 298.155195][T13619] team_slave_1: entered allmulticast mode [ 298.175014][T13619] dummy0: entered allmulticast mode [ 298.192702][T13619] nlmon0: entered allmulticast mode [ 298.215574][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 298.229077][T13619] batadv0: entered allmulticast mode [ 298.254091][T13619] veth0: entered allmulticast mode [ 298.272217][T13619] veth1: entered allmulticast mode [ 298.298938][T13619] wg0: entered allmulticast mode [ 298.315997][T13619] wg1: entered allmulticast mode [ 298.332820][T13619] wg2: entered allmulticast mode [ 298.345654][T13619] veth0_to_bridge: entered allmulticast mode [ 298.352430][T13619] veth1_to_bridge: entered allmulticast mode [ 298.369059][T13619] veth0_to_bond: entered allmulticast mode [ 298.380898][T13619] veth1_to_bond: entered allmulticast mode [ 298.393312][T13619] veth0_to_team: entered allmulticast mode [ 298.405655][T13619] veth1_to_team: entered allmulticast mode [ 298.411977][T13619] veth0_to_batadv: entered allmulticast mode [ 298.418831][T13619] batadv_slave_0: entered allmulticast mode [ 298.425313][T13619] xfrm0: entered allmulticast mode [ 298.430965][T13619] veth0_to_hsr: entered allmulticast mode [ 298.444652][T13619] veth1_virt_wifi: entered allmulticast mode [ 298.459059][T13619] veth0_virt_wifi: entered allmulticast mode [ 298.467938][T13619] virt_wifi0: entered allmulticast mode [ 298.475173][T13619] veth1_vlan: entered allmulticast mode [ 298.481211][T13619] veth0_vlan: entered allmulticast mode [ 298.488223][T13619] vlan0: left promiscuous mode [ 298.499811][T13619] vlan0: entered allmulticast mode [ 298.512929][T13619] vlan1: entered allmulticast mode [ 298.527951][T13619] macvlan0: entered allmulticast mode [ 298.542515][T13619] macvlan1: entered allmulticast mode [ 298.549368][T13619] ipvlan0: entered allmulticast mode [ 298.558134][T13619] ipvlan1: entered allmulticast mode [ 298.564802][T13619] veth1_macvtap: entered allmulticast mode [ 298.571073][T13619] macvtap0: entered allmulticast mode [ 298.580524][T13619] macsec0: entered allmulticast mode [ 298.599044][T13619] geneve1: entered allmulticast mode [ 298.615232][T13619] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 298.629307][T13619] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 298.651490][T13619] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 298.669501][T13619] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 298.687338][T13619] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 298.696992][T13619] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 298.718422][T13619] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 298.735112][T13619] ip6tnl1: entered allmulticast mode [ 298.749896][T13619] bond1: entered allmulticast mode [ 298.758040][T13619] veth2: entered allmulticast mode [ 298.765032][T13619] veth3: entered allmulticast mode [ 298.770655][T13619] batadv1: entered allmulticast mode [ 298.778432][T13619] gre1: entered allmulticast mode [ 298.784854][T13619] bond2: entered allmulticast mode [ 298.790586][T13619] tipc: Resetting bearer [ 298.816655][T13619] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 298.832799][T13619] bridge1: entered allmulticast mode [ 298.846500][T13619] L: entered allmulticast mode [ 298.851783][T13619] ipip0: entered allmulticast mode [ 298.858639][T13619] macsec1: entered allmulticast mode [ 298.866254][T13619] macsec2: entered allmulticast mode [ 298.871853][T13619] syztnl0: entered allmulticast mode [ 298.878564][T13619] bond3: entered allmulticast mode [ 298.885092][T13619] veth4: entered allmulticast mode [ 298.890650][T13619] veth5: entered allmulticast mode [ 298.898075][T13619] veth6: entered allmulticast mode [ 298.904628][T13619] veth7: entered allmulticast mode [ 298.910074][T13619] veth8: entered allmulticast mode [ 298.916799][T13619] veth9: entered allmulticast mode [ 298.922483][T13619] ip6gre1: entered allmulticast mode [ 298.955415][T13619] bond4: entered allmulticast mode [ 298.964614][T13619] vlan4: entered allmulticast mode [ 298.976703][T13619] ip6erspan0: entered allmulticast mode [ 298.987195][T13619] bond5: entered allmulticast mode [ 298.992440][T13619] geneve2: entered allmulticast mode [ 299.005726][T13619] vlan5: entered allmulticast mode [ 299.034139][T13619] bond6: entered allmulticast mode [ 299.045311][T13619] veth0_vlan.4: entered allmulticast mode [ 299.057630][T13619] sit1: entered allmulticast mode [ 299.066369][T13619] ip6gre2: entered allmulticast mode [ 299.091675][T13619] ip6gre3: left promiscuous mode [ 299.106193][T13619] ip6gre3: entered allmulticast mode [ 299.122197][T13619] xfrm1: entered allmulticast mode [ 299.130382][T13619] bridge2: entered allmulticast mode [ 299.137350][T13619] gretap1: entered allmulticast mode [ 299.142847][T13619] : entered allmulticast mode [ 299.151120][T13619] bond7: entered allmulticast mode [ 299.165777][T13619] veth10: entered allmulticast mode [ 299.175708][T13619] veth11: entered allmulticast mode [ 299.194944][T13619] sit2: entered allmulticast mode [ 299.474966][ T1018] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.554311][ T1018] net_ratelimit: 11 callbacks suppressed [ 299.554334][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.607240][ T1018] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.657494][ T1018] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.717137][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.856999][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.941178][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 300.003566][T13674] netlink: 'syz.3.2090': attribute type 30 has an invalid length. [ 300.077643][T13674] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2090'. [ 300.244353][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.398543][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.567975][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.706503][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.844388][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.993932][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.193774][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.465532][T13744] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 301.546926][T13746] bond6: Removing last arp target with arp_interval on [ 301.582644][T13752] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 301.807596][T13744] bond5: entered promiscuous mode [ 301.827026][T13744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.922076][T13753] bond5: (slave bridge2): making interface the new active one [ 301.937977][T13753] bridge2: entered promiscuous mode [ 301.952176][T13753] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 302.108161][T13760] bond10: (slave veth7): Enslaving as an active interface with a down link [ 302.206962][T13762] 8021q: adding VLAN 0 to HW filter on device bond10 [ 302.960318][T13790] __nla_validate_parse: 2 callbacks suppressed [ 302.960339][T13790] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2118'. [ 303.017662][T13790] veth1_to_bond: left allmulticast mode [ 303.041949][T13795] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2118'. [ 303.561108][T13806] tipc: Trying to set illegal importance in message [ 303.601920][T13806] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2123'. [ 303.617544][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 303.817047][T13810] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.883031][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2127'. [ 303.955274][T13818] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2127'. [ 304.317716][T13832] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 304.396769][T13833] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 304.587507][ T141] net_ratelimit: 22 callbacks suppressed [ 304.587529][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 304.779718][T13845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.827577][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 304.964202][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.037805][T13865] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 305.047716][T13865] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2141'. [ 305.061881][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2140'. [ 305.096302][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.241688][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.387533][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.535775][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 305.550135][T13882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2144'. [ 305.648199][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 305.808419][T13882] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 305.996799][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.156834][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.740871][T13913] syzkaller1: entered promiscuous mode [ 306.753731][T13913] syzkaller1: entered allmulticast mode [ 308.199560][T13974] __nla_validate_parse: 17 callbacks suppressed [ 308.199582][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2167'. [ 308.229862][T13976] netlink: 'syz.1.2168': attribute type 1 has an invalid length. [ 308.470402][T13976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.495708][T13984] bond6: (slave veth0_to_bond): making interface the new active one [ 308.549844][T13984] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 308.622300][T13987] bond6: entered promiscuous mode [ 308.644633][T13987] veth0_to_bond: entered promiscuous mode [ 308.661812][T13987] bond6: entered allmulticast mode [ 308.684843][T13987] veth0_to_bond: entered allmulticast mode [ 308.847735][T12480] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 309.705548][ T1029] net_ratelimit: 17 callbacks suppressed [ 309.705571][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.971129][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.184569][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.224299][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 310.364930][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.495904][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 310.523620][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.531115][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2187'. [ 310.708847][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.870360][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 310.948628][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 311.037031][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.184248][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.261214][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 311.297880][T14082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2196'. [ 311.310452][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 311.337105][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 311.357423][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 311.388342][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 311.877329][T14094] bond7: entered promiscuous mode [ 311.897670][T14095] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.918260][T14094] bond7: entered allmulticast mode [ 311.950576][T14094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.003614][T14096] bond0: (slave bond_slave_1): Releasing backup interface [ 312.366291][T14122] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.565787][T14137] netlink: 'syz.1.2210': attribute type 64 has an invalid length. [ 312.633107][T14122] bond11 (unregistering): Released all slaves [ 313.233147][T14149] __nla_validate_parse: 67 callbacks suppressed [ 313.233166][T14149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2214'. [ 313.686239][T14172] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 313.840066][T14172] 8021q: adding VLAN 0 to HW filter on device bond11 [ 314.079451][T14187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2224'. [ 314.139683][T14187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2224'. [ 314.511952][T14206] xt_TCPMSS: Only works on TCP SYN packets [ 314.746801][T12480] net_ratelimit: 19 callbacks suppressed [ 314.746823][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.861125][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2233'. [ 314.923024][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 314.950038][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.959090][T14213] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 314.981219][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 315.088286][T14221] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2235'. [ 315.101536][T14218] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 315.200834][T14213] geneve3: entered promiscuous mode [ 315.216707][T14213] geneve3: entered allmulticast mode [ 315.269895][T14220] syzkaller0: entered promiscuous mode [ 315.297969][T14220] syzkaller0: entered allmulticast mode [ 315.331496][T14218] netlink: 'syz.2.2236': attribute type 29 has an invalid length. [ 315.370838][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 315.433098][T14219] netlink: 'syz.2.2236': attribute type 29 has an invalid length. [ 315.508157][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 315.518017][T14228] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 315.551086][T14227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2239'. [ 315.568449][T14228] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 315.587105][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 315.610170][T14232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.714916][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 315.845891][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 315.945037][T14245] netlink: 'syz.3.2245': attribute type 21 has an invalid length. [ 315.973360][T14245] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.985352][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.105171][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.245242][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 316.394670][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.389485][T14296] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 317.490270][T14296] bond7: entered promiscuous mode [ 317.500621][T14296] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.078507][T14318] x_tables: duplicate underflow at hook 3 [ 318.288239][T14320] netlink: 'syz.3.2266': attribute type 16 has an invalid length. [ 318.378791][T14320] netlink: 'syz.3.2266': attribute type 3 has an invalid length. [ 318.420275][T14320] __nla_validate_parse: 6 callbacks suppressed [ 318.420296][T14320] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2266'. [ 318.474448][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 318.495218][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 318.589065][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 318.598870][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 318.706769][T14340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 318.711051][T14329] bond7: entered promiscuous mode [ 318.764572][T14331] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 318.777377][T14331] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 318.945449][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 319.451564][T14367] FAULT_INJECTION: forcing a failure. [ 319.451564][T14367] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 319.492087][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.0.2280 Not tainted syzkaller #0 PREEMPT(full) [ 319.492118][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.492143][T14367] Call Trace: [ 319.492151][T14367] [ 319.492161][T14367] dump_stack_lvl+0xe8/0x150 [ 319.492199][T14367] should_fail_ex+0x40c/0x560 [ 319.492233][T14367] _copy_from_user+0x2d/0xb0 [ 319.492255][T14367] addrconf_del_ifaddr+0xd7/0x180 [ 319.492287][T14367] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 319.492319][T14367] ? kasan_quarantine_put+0xbb/0x1f0 [ 319.492359][T14367] inet6_ioctl+0x11c/0x2e0 [ 319.492390][T14367] ? __pfx_inet6_ioctl+0x10/0x10 [ 319.492417][T14367] ? tomoyo_path_number_perm+0x219/0x5f0 [ 319.492469][T14367] ? do_vfs_ioctl+0x116f/0x1530 [ 319.492495][T14367] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 319.492526][T14367] sock_do_ioctl+0x101/0x320 [ 319.492560][T14367] ? __pfx_sock_do_ioctl+0x10/0x10 [ 319.492587][T14367] ? hook_file_ioctl+0x1f0/0x5f0 [ 319.492626][T14367] sock_ioctl+0x57a/0x7e0 [ 319.492657][T14367] ? __pfx_sock_ioctl+0x10/0x10 [ 319.492685][T14367] ? __fget_files+0x2a/0x420 [ 319.492713][T14367] ? __fget_files+0x3a2/0x420 [ 319.492741][T14367] ? __fget_files+0x2a/0x420 [ 319.492774][T14367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 319.492799][T14367] ? __pfx_sock_ioctl+0x10/0x10 [ 319.492828][T14367] __se_sys_ioctl+0xfc/0x170 [ 319.492849][T14367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.492873][T14367] do_syscall_64+0x174/0x580 [ 319.492901][T14367] ? trace_irq_disable+0x3b/0x140 [ 319.492929][T14367] ? clear_bhb_loop+0x40/0x90 [ 319.492955][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.492977][T14367] RIP: 0033:0x7f7d4eb9e0d9 [ 319.492997][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.493016][T14367] RSP: 002b:00007f7d4facb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.493039][T14367] RAX: ffffffffffffffda RBX: 00007f7d4ee25fa0 RCX: 00007f7d4eb9e0d9 [ 319.493055][T14367] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 319.493069][T14367] RBP: 00007f7d4facb090 R08: 0000000000000000 R09: 0000000000000000 [ 319.493082][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.493095][T14367] R13: 00007f7d4ee26038 R14: 00007f7d4ee25fa0 R15: 00007ffdc8dcfa48 [ 319.493128][T14367] [ 319.844611][ T1018] net_ratelimit: 23 callbacks suppressed [ 319.844631][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.954726][T14378] openvswitch: netlink: IP tunnel dst address not specified [ 320.031221][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 320.047100][T14378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.104493][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.240825][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.425191][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.585610][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.734122][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.807145][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 320.875345][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.939832][T14398] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2288'. [ 321.015351][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 322.054894][T14458] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 322.087162][T14458] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 322.759218][T14451] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 322.850972][T14455] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 323.199884][T14473] tipc: Enabled bearer , priority 0 [ 323.259194][T14474] syzkaller0: entered promiscuous mode [ 323.294206][T14474] syzkaller0: entered allmulticast mode [ 323.853244][T14478] tipc: Resetting bearer [ 323.933902][T14471] tipc: Resetting bearer [ 323.943116][T14486] netlink: 'syz.2.2307': attribute type 2 has an invalid length. [ 324.075281][T14471] tipc: Disabling bearer [ 324.162292][T14489] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 324.339119][T14495] __nla_validate_parse: 5 callbacks suppressed [ 324.339142][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2310'. [ 325.004769][ T1029] net_ratelimit: 21 callbacks suppressed [ 325.004794][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.184275][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.192846][T14516] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2315'. [ 325.314451][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.322496][T14526] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 325.455295][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.584225][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.716835][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.844911][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 325.986242][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.036010][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 326.072916][T14547] netlink: 'syz.1.2323': attribute type 4 has an invalid length. [ 326.094428][T14549] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 326.134614][T14549] tipc: Resetting bearer [ 326.167410][T14550] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 326.175313][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.405793][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 326.549280][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'. [ 326.687758][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 327.368987][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 327.693069][T14613] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20000 [ 327.909345][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 328.538852][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 328.728583][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2352'. [ 330.115231][ T1018] net_ratelimit: 33 callbacks suppressed [ 330.115267][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.234290][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.344458][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.463612][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.575356][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.684221][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.794193][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.905284][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.986184][T14630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.016605][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 331.184179][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 331.676696][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 331.962361][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 332.054902][T14713] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 333.237292][T14749] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20264 [ 333.256465][ T9830] IPVS: starting estimator thread 0... [ 333.379523][T14751] IPVS: using max 26 ests per chain, 62400 per kthread [ 333.484795][T14760] x_tables: duplicate underflow at hook 1 [ 334.411069][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 334.686505][T14804] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 335.160005][ T1018] net_ratelimit: 34 callbacks suppressed [ 335.160029][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.249391][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2399'. [ 335.274662][T14829] macvlan0: left allmulticast mode [ 335.328924][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.484507][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.515152][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2400'. [ 335.545824][T14846] netlink: 'syz.3.2402': attribute type 39 has an invalid length. [ 335.596167][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'. [ 335.636949][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.776880][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.925462][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 335.985674][T14855] netlink: 'syz.3.2405': attribute type 4 has an invalid length. [ 336.111468][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 336.128468][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2406'. [ 336.295647][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 336.466166][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 336.626786][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 337.212024][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2416'. [ 337.628793][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 337.690528][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 337.929839][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.084149][T14904] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.172329][T14904] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.201912][T14904] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.282209][T14904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 338.426306][T14904] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 338.697518][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.751290][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.758125][T14938] xt_hashlimit: size too large, truncated to 1048576 [ 338.774588][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.795817][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2427'. [ 338.806741][T14940] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2430'. [ 338.829982][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.841253][T14904] syzkaller0 speed is unknown, defaulting to 1000 [ 338.993269][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2431'. [ 339.131290][T14951] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2433'. [ 339.586719][T14956] syzkaller0: entered promiscuous mode [ 339.642090][T14956] syzkaller0: entered allmulticast mode [ 339.670070][T14964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2437'. [ 340.531804][T14987] batadv0: entered promiscuous mode [ 340.602756][T14987] macsec1: entered promiscuous mode [ 340.640615][T14987] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 340.681406][T14987] batadv0: left promiscuous mode [ 340.768272][T12471] net_ratelimit: 29 callbacks suppressed [ 340.768295][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.915502][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.065946][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.195218][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.324191][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.583480][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.758559][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.911304][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 341.937581][T15033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.119417][T15040] netlink: 'syz.3.2454': attribute type 2 has an invalid length. [ 342.141991][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 342.195524][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 342.803441][T15070] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2464'. [ 342.996295][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 343.028612][T15065] syzkaller0 speed is unknown, defaulting to 1000 [ 343.407313][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'. [ 344.561055][T15112] syzkaller0: entered promiscuous mode [ 344.578801][T15112] syzkaller0: entered allmulticast mode [ 344.678537][T15116] bond0: option miimon: invalid value (18446744071829782528) [ 344.702593][T15116] bond0: option miimon: allowed values 0 - 2147483647 [ 345.027982][T15115] syzkaller1: entered promiscuous mode [ 345.076937][T15115] syzkaller1: entered allmulticast mode [ 345.990631][ T36] net_ratelimit: 20 callbacks suppressed [ 345.990745][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.117477][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.267367][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.084544][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.239114][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.270727][T15200] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 347.376871][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.504770][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.647021][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.795461][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 348.440024][T15254] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 348.536076][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2510'. [ 348.649184][T15254] bond12: entered promiscuous mode [ 348.667841][T15254] bond12: entered allmulticast mode [ 348.696085][T15254] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.779191][T15259] erspan3: entered allmulticast mode [ 348.878195][T15259] bond12: (slave erspan3): making interface the new active one [ 348.889624][T15259] erspan3: entered promiscuous mode [ 348.900939][T15259] bond12: (slave erspan3): Enslaving as an active interface with an up link [ 349.736027][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 349.778471][T15297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.807223][T15298] dummy0: left allmulticast mode [ 349.832255][T15298] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 350.085280][T15279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.178343][T15284] netlink: 'syz.2.2515': attribute type 23 has an invalid length. [ 350.206383][T15305] ªªªªª»: renamed from dummy0 (while UP) [ 351.054187][ T141] net_ratelimit: 19 callbacks suppressed [ 351.054209][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.412019][T15336] tipc: Resetting bearer [ 351.419344][T15337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2531'. [ 351.467045][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.569121][T15323] syz.2.2526 (15323) used greatest stack depth: 18312 bytes left [ 351.812076][T15349] nbd: must specify a size in bytes for the device [ 351.845561][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.205583][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.374276][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.534542][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.557006][T15361] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 352.583648][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2538'. [ 352.659422][T15361] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 352.753834][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.905289][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.045614][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.142879][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 353.391191][T15400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.410569][T15442] vlan2: entered promiscuous mode [ 354.433437][T15442] bridge0: entered promiscuous mode [ 354.492328][T15448] xt_hashlimit: size too large, truncated to 1048576 [ 354.616754][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2562'. [ 354.791129][T15454] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 354.828446][T15464] tipc: Enabling of bearer rejected, failed to enable media [ 354.938632][T15454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.972249][T15454] batadv0: entered promiscuous mode [ 355.000411][T15470] netlink: 'syz.4.2567': attribute type 21 has an invalid length. [ 355.030676][T15454] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 355.032893][T15470] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2567'. [ 355.098911][T15470] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2567'. [ 355.855254][T15497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 355.869158][T15492] syzkaller1: entered promiscuous mode [ 355.882522][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 355.956343][T15492] syzkaller1: entered allmulticast mode [ 356.073983][T15497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 356.345526][T12471] net_ratelimit: 21 callbacks suppressed [ 356.345550][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.536128][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.714680][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.778914][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 356.815726][T15517] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 357.065135][T15534] IPv6: NLM_F_REPLACE set, but no existing node found! [ 357.177533][T15517] bond8: entered promiscuous mode [ 357.210733][T15517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 357.366630][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.504224][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.672124][T15551] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2585'. [ 357.756686][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.947041][ T1018] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.114188][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.263777][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.414207][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 358.819128][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 358.936302][T15569] bond9: entered promiscuous mode [ 358.990569][T15583] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2592'. [ 359.831019][T15605] __nla_validate_parse: 2 callbacks suppressed [ 359.831120][T15605] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2601'. [ 360.055775][T15614] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2601'. [ 360.565646][T15632] x_tables: duplicate underflow at hook 3 [ 360.636188][T15632] bond10: option fail_over_mac: invalid value (16) [ 360.654198][T15632] bond10 (unregistering): Released all slaves [ 361.059669][T15652] netlink: 768 bytes leftover after parsing attributes in process `syz.3.2614'. [ 361.434817][T12471] net_ratelimit: 20 callbacks suppressed [ 361.434839][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.500429][T15659] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 361.524223][T15659] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 361.644808][T15670] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2618'. [ 361.672672][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2618'. [ 361.703566][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2618'. [ 361.737466][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 361.775425][ T9806] syzkaller0 speed is unknown, defaulting to 1000 [ 361.775478][T15673] tap0: tun_chr_ioctl cmd 2148553947 [ 361.800963][ T9828] syzkaller0 speed is unknown, defaulting to 1000 [ 361.822996][ T9806] syz2: Port: 1 Link ACTIVE [ 362.269818][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.312572][T15694] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 362.393325][T15694] netlink: 'syz.0.2626': attribute type 30 has an invalid length. [ 362.428152][T15694] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2626'. [ 362.493580][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.634387][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.837593][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.962647][T15699] 8021q: VLANs not supported on ip6gre0 [ 363.034345][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.164744][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.182091][T15724] FAULT_INJECTION: forcing a failure. [ 363.182091][T15724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.264331][T15713] syzkaller1: entered promiscuous mode [ 363.273144][T15724] CPU: 1 UID: 0 PID: 15724 Comm: syz.0.2634 Not tainted syzkaller #0 PREEMPT(full) [ 363.273174][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.273188][T15724] Call Trace: [ 363.273280][T15724] [ 363.273355][T15724] dump_stack_lvl+0xe8/0x150 [ 363.273503][T15724] should_fail_ex+0x40c/0x560 [ 363.273610][T15724] _copy_from_user+0x2d/0xb0 [ 363.273676][T15724] kstrtouint_from_user+0xd6/0x180 [ 363.273710][T15724] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 363.273792][T15724] proc_fail_nth_write+0x8e/0x210 [ 363.273855][T15724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.273898][T15724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.273931][T15724] vfs_write+0x296/0xba0 [ 363.273975][T15724] ? __pfx_vfs_write+0x10/0x10 [ 363.273999][T15724] ? __fget_files+0x2a/0x420 [ 363.274046][T15724] ? __fget_files+0x3a2/0x420 [ 363.274075][T15724] ? __fget_files+0x2a/0x420 [ 363.274117][T15724] ksys_write+0x150/0x270 [ 363.274143][T15724] ? __pfx_ksys_write+0x10/0x10 [ 363.274164][T15724] ? __pfx_sock_ioctl+0x10/0x10 [ 363.274300][T15724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.274345][T15724] do_syscall_64+0x174/0x580 [ 363.274457][T15724] ? trace_irq_disable+0x3b/0x140 [ 363.274511][T15724] ? clear_bhb_loop+0x40/0x90 [ 363.274544][T15724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.274572][T15724] RIP: 0033:0x7f7d4eb5e90e [ 363.274602][T15724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.274622][T15724] RSP: 002b:00007f7d4faa9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.274675][T15724] RAX: ffffffffffffffda RBX: 00007f7d4faaa6c0 RCX: 00007f7d4eb5e90e [ 363.274692][T15724] RDX: 0000000000000001 RSI: 00007f7d4faaa0a0 RDI: 000000000000000b [ 363.274707][T15724] RBP: 00007f7d4faaa090 R08: 0000000000000000 R09: 0000000000000000 [ 363.274720][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.274733][T15724] R13: 00007f7d4ee26128 R14: 00007f7d4ee26090 R15: 00007ffdc8dcfa48 [ 363.274771][T15724] [ 363.525989][T15713] syzkaller1: entered allmulticast mode [ 363.830467][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2637'. [ 363.897279][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.206885][T15734] syzkaller1: entered promiscuous mode [ 364.219077][T15734] syzkaller1: entered allmulticast mode [ 364.274808][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.381994][T15754] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 364.412823][T15754] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 364.638825][T15761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2647'. [ 364.740254][T15765] gretap0: entered promiscuous mode [ 364.766439][T15765] gretap0: left allmulticast mode [ 364.802855][T15767] 0ªî{X¹¦: renamed from gretap0 [ 364.829146][T15767] 0ªî{X¹¦: left promiscuous mode [ 364.841312][T15767] 0ªî{X¹¦: entered allmulticast mode [ 365.039629][T15771] pim6reg: entered allmulticast mode [ 365.088013][T15771] __nla_validate_parse: 3 callbacks suppressed [ 365.088035][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 365.156290][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 365.544270][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 365.695623][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 365.980997][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 366.192119][T15813] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 366.369911][T15813] bond8: entered promiscuous mode [ 366.398364][T15813] bond8: entered allmulticast mode [ 366.434100][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2664'. [ 366.444106][T15813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 366.511038][ T36] net_ratelimit: 18 callbacks suppressed [ 366.511061][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.663535][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.784597][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.065347][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.214162][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.391093][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.491564][T15855] lo: entered allmulticast mode [ 367.509028][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 367.546629][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.568194][T15853] lo: left allmulticast mode [ 367.674652][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.826176][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.976278][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.789917][T15888] netlink: 'syz.0.2685': attribute type 21 has an invalid length. [ 368.807494][T15888] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.817480][T15888] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 369.078435][T15899] sctp: [Deprecated]: syz.0.2688 (pid 15899) Use of int in maxseg socket option. [ 369.078435][T15899] Use struct sctp_assoc_value instead [ 369.171769][T15899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2688'. [ 369.200219][T15901] veth8: entered allmulticast mode [ 369.229607][T15902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2689'. [ 369.464830][T15908] sit0: entered promiscuous mode [ 369.519933][T15908] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 369.569018][T15908] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2692'. [ 370.099319][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 370.119923][T15937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2699'. [ 370.642019][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 370.692043][T15952] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2704'. [ 370.899694][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 371.512667][T15985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2714'. [ 371.550224][T15985] netlink: 'syz.0.2714': attribute type 3 has an invalid length. [ 371.584588][T15985] netlink: 'syz.0.2714': attribute type 75 has an invalid length. [ 371.610068][T15991] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2715'. [ 371.663860][ T57] net_ratelimit: 28 callbacks suppressed [ 371.663881][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.793777][T15995] x_tables: duplicate underflow at hook 3 [ 371.838256][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.994170][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.133967][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.167860][T16006] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 372.177566][T16006] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2720'. [ 372.275587][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.408788][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2722'. [ 372.435470][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.456196][T16012] netlink: 'syz.0.2722': attribute type 7 has an invalid length. [ 372.473429][T16012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2722'. [ 372.586842][T16014] netlink: 'syz.1.2723': attribute type 10 has an invalid length. [ 372.652281][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.724545][T16020] netlink: 'syz.0.2725': attribute type 33 has an invalid length. [ 372.774458][T16020] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 372.792188][T16020] bond9 (unregistering): Released all slaves [ 372.894091][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 373.125057][T16032] netlink: zone id is out of range [ 373.137520][T16032] netlink: zone id is out of range [ 373.660651][T16048] netlink: 'syz.2.2732': attribute type 1 has an invalid length. [ 373.823189][T16048] bond9: entered promiscuous mode [ 373.837882][T16048] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.920433][T16048] bond9: (slave bridge5): making interface the new active one [ 373.941735][T16048] bridge5: entered promiscuous mode [ 373.967565][T16048] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 374.533864][T16076] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 374.565460][T16076] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 374.585371][T16076] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 374.884509][T16087] nbd: illegal input index -8454144 [ 375.218717][T16104] xfrm1: entered allmulticast mode [ 375.523160][T16116] __nla_validate_parse: 8 callbacks suppressed [ 375.523181][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 375.565839][T16123] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2752'. [ 375.580953][T16116] netlink: 'syz.4.2750': attribute type 6 has an invalid length. [ 375.604262][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 375.620083][T16123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2752'. [ 375.645143][T16116] netlink: 'syz.4.2750': attribute type 6 has an invalid length. [ 375.708119][ T30] audit: type=1800 audit(1786014267.150:6): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2751" name=360607 dev="tmpfs" ino=2877 res=0 errno=0 [ 375.731878][T16130] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2750'. [ 375.790887][T16130] nbd: illegal input index 65508 [ 376.358939][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2759'. [ 376.510941][T16167] sctp: [Deprecated]: syz.1.2761 (pid 16167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.510941][T16167] Use struct sctp_sack_info instead [ 376.995214][ T48] net_ratelimit: 36 callbacks suppressed [ 376.995250][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.049510][T16180] atomic_op ffff88801c297998 conn xmit_atomic 0000000000000000 [ 377.173705][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.324119][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.483792][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.491508][T16189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2767'. [ 377.614233][T16193] netlink: 'syz.3.2769': attribute type 6 has an invalid length. [ 377.665251][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.711247][T16199] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2771'. [ 377.803562][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.870406][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2773'. [ 377.940476][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.074255][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.231679][T16222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2774'. [ 378.242792][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.414176][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.885490][T16236] tipc: Resetting bearer [ 379.001724][T16228] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 381.000853][T16209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.442707][T16293] __nla_validate_parse: 3 callbacks suppressed [ 381.442727][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 381.559110][T16297] x_tables: duplicate entry at hook 2 [ 381.568370][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2799'. [ 381.579262][T16297] bridge: RTM_NEWNEIGH with invalid ether address [ 381.672527][T16298] netlink: 'syz.1.2800': attribute type 4 has an invalid length. [ 381.687770][T16300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2801'. [ 381.747540][T16302] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2801'. [ 381.928823][T16309] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2804'. [ 381.941238][T16309] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2804'. [ 382.076007][ T13] net_ratelimit: 31 callbacks suppressed [ 382.076031][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.246917][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.263013][T16314] syzkaller0: left promiscuous mode [ 382.271430][T16314] syzkaller0: left allmulticast mode [ 382.320982][T16315] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 382.547095][T16334] x_tables: duplicate underflow at hook 1 [ 382.597280][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.679310][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 382.733534][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.983587][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.145955][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.317482][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.454331][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.495916][T16359] syzkaller1: entered promiscuous mode [ 383.530255][T16359] syzkaller1: entered allmulticast mode [ 383.592093][T16366] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.594659][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.973054][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 384.021896][T16378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2820'. [ 384.281373][T16383] x_tables: duplicate underflow at hook 2 [ 384.288654][T16347] x_tables: duplicate underflow at hook 1 [ 385.034266][T16409] xt_CT: No such helper "snmp" [ 385.636783][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 386.434083][T16461] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 386.802775][T16472] tipc: Resetting bearer [ 386.981644][T16474] xt_hashlimit: size too large, truncated to 1048576 [ 387.120485][T12471] net_ratelimit: 22 callbacks suppressed [ 387.120506][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.284142][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.423584][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.566651][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.635366][T16493] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 388.006984][T16500] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 388.025672][T16500] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 388.045544][T16500] batman_adv: batadv0: Adding interface: wlan0 [ 388.061791][T16500] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.142701][T16500] batman_adv: batadv0: Interface activated: wlan0 [ 388.187677][T16502] __nla_validate_parse: 1 callbacks suppressed [ 388.187699][T16502] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.2858'. [ 388.215802][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 388.365043][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 388.441393][T16515] openvswitch: netlink: IP tunnel dst address not specified [ 388.477313][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 388.503619][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 388.512328][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 388.551831][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 388.611076][T16515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2862'. [ 388.638921][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 388.785761][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.009076][T16536] netlink: 'syz.0.2870': attribute type 21 has an invalid length. [ 389.104582][T16550] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.746376][T16562] bond11: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 389.777764][T16562] bond11 (unregistering): Released all slaves [ 389.884690][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'. [ 390.147771][T16581] vlan3: entered promiscuous mode [ 390.163583][T16581] batadv_slave_1: entered promiscuous mode [ 390.176552][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 390.194541][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 390.942238][T16609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2888'. [ 391.417084][T16623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2894'. [ 391.707133][T16631] netlink: 'syz.2.2895': attribute type 6 has an invalid length. [ 392.137933][ T48] net_ratelimit: 17 callbacks suppressed [ 392.137953][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.282400][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.359449][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.439327][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.452393][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.461188][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.470530][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.805504][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.953587][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.238498][T16677] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 393.357059][T16674] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 393.446528][T16685] netlink: 'syz.4.2910': attribute type 75 has an invalid length. [ 393.503785][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 393.562919][T16681] syzkaller0: entered promiscuous mode [ 393.625522][T16681] syzkaller0: entered allmulticast mode [ 393.687030][T16679] netlink: 'syz.1.2909': attribute type 10 has an invalid length. [ 393.782239][T16677] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 393.858653][T16679] bond6: (slave veth0_to_bond): Releasing active interface [ 393.978228][T16679] veth0_to_bond: left promiscuous mode [ 394.017108][T16679] veth0_to_bond: left allmulticast mode [ 394.101346][T16679] veth0_to_bond: entered promiscuous mode [ 394.137870][T16679] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 394.194075][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.372865][T16711] netlink: 'syz.4.2914': attribute type 1 has an invalid length. [ 394.500102][T16700] __nla_validate_parse: 4 callbacks suppressed [ 394.500137][T16700] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2912'. [ 394.523618][ T50] Bluetooth: hci5: command tx timeout [ 394.529917][T16700] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2912'. [ 394.554145][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.790387][T16711] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.914810][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.123529][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.162834][T16642] syzkaller0 speed is unknown, defaulting to 1000 [ 395.464358][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.472087][T16748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2919'. [ 395.558786][T16752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2919'. [ 396.283448][T16771] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 396.352988][T16771] batadv0: left allmulticast mode [ 396.387756][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.441257][T16771] batadv0: entered allmulticast mode [ 396.450385][T16771] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 396.465636][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 396.603571][ T50] Bluetooth: hci5: command tx timeout [ 396.929010][T16797] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 397.246865][T16642] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.292826][T16642] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.343813][T16642] bridge_slave_0: entered allmulticast mode [ 397.396530][T16642] bridge_slave_0: entered promiscuous mode [ 397.574267][T16820] netlink: 'syz.4.2936': attribute type 21 has an invalid length. [ 397.600387][T16642] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.616423][T16642] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.634298][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 397.659592][T16642] bridge_slave_1: entered allmulticast mode [ 397.694194][T16642] bridge_slave_1: entered promiscuous mode [ 397.721128][T16820] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 398.000920][T16642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.077205][T16642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.371867][T16642] team0: Port device team_slave_0 added [ 398.406274][T16642] team0: Port device team_slave_1 added [ 398.683620][ T50] Bluetooth: hci5: command tx timeout [ 398.917080][T16642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.944405][T16642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.987564][T16642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.041127][T16642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.055061][T16870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2945'. [ 399.065203][T16642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.150895][T16642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.197547][T16871] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 399.203624][ T141] net_ratelimit: 7 callbacks suppressed [ 399.203649][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.289659][T16884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2948'. [ 399.553595][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.732743][T16642] hsr_slave_0: entered promiscuous mode [ 399.750978][T16642] hsr_slave_1: entered promiscuous mode [ 399.777512][T16642] debugfs: 'hsr0' already exists in 'hsr' [ 399.794017][T16899] xt_hashlimit: size too large, truncated to 1048576 [ 399.798143][T16642] Cannot create hsr debugfs directory [ 399.823548][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.265327][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.583201][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2959'. [ 400.635268][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.763532][ T50] Bluetooth: hci5: command tx timeout [ 400.783781][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.152636][T16642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.176778][T16642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.237820][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.256697][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'. [ 401.288268][ T1029] bond0: (slave bond_slave_0): interface is now down [ 401.296590][T16943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2963'. [ 401.334351][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.340501][ T1029] bond0: (slave bond_slave_1): interface is now down [ 401.414487][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.618482][T16642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.667350][T16642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.775239][T12480] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.889312][T16642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.937107][T16642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.987628][T16971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2971'. [ 402.054682][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 402.365459][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2974'. [ 403.163993][T17007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.235754][T17007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.281988][T17007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.465388][T16642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.494934][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.514650][T16642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.700737][T17022] ip6t_srh: unknown srh match flags 4000 [ 403.868233][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.885363][ T1029] bond0: (slave bond_slave_0): interface is now down [ 403.905982][T16642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.925673][ T1029] bond0: (slave bond_slave_1): interface is now down [ 403.945145][ T1029] bond0: (slave batadv0): interface is now down [ 403.974880][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.005408][T16642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.151714][T16642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.477486][ T757] net_ratelimit: 6 callbacks suppressed [ 404.477509][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.647115][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.879540][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.900068][T16642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.943080][T16642] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.982882][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.990146][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.030757][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.038079][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.152166][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.319444][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.457637][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.587355][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.642150][ T9828] hid-generic 0005:046D:0A0E.0001: collection stack underflow [ 405.707625][ T9828] hid-generic 0005:046D:0A0E.0001: item 0 2 0 12 parsing failed [ 405.731599][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.757017][ T9828] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 405.910901][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.939894][T17090] netlink: 'syz.4.2998': attribute type 8 has an invalid length. [ 406.005424][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2998'. [ 406.121179][T17092] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 406.174661][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 406.201733][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 406.264447][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 406.478467][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 406.524645][ T36] bond0: (slave bond_slave_0): interface is now down [ 406.537280][T17092] netlink: 'syz.3.3000': attribute type 10 has an invalid length. [ 406.550046][ T36] bond0: (slave bond_slave_1): interface is now down [ 406.570828][ T36] bond0: (slave batadv0): interface is now down [ 406.588570][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3000'. [ 406.617086][T17113] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3003'. [ 406.717001][ T36] bond0: now running without any active interface! [ 406.728807][T17100] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 406.788764][T17100] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3000'. [ 406.920843][T17121] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 406.962551][T17092] geneve3: entered promiscuous mode [ 407.078052][T17092] geneve3: entered allmulticast mode [ 407.253099][T17130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.403174][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'. [ 407.488081][T16642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.571027][T17144] netlink: 'syz.2.3011': attribute type 8 has an invalid length. [ 407.633730][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 407.720577][T17142] sctp: [Deprecated]: syz.4.3010 (pid 17142) Use of int in maxseg socket option. [ 407.720577][T17142] Use struct sctp_assoc_value instead [ 407.869528][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 407.921538][T16642] veth0_vlan: entered promiscuous mode [ 408.027861][T16642] veth1_vlan: entered promiscuous mode [ 408.373034][T17158] netlink: 'syz.1.3014': attribute type 1 has an invalid length. [ 408.416555][T17167] vlan3: entered allmulticast mode [ 408.451081][T17167] veth1_virt_wifi: entered allmulticast mode [ 408.472393][T17173] syzkaller1: entered promiscuous mode [ 408.499331][T17173] syzkaller1: entered allmulticast mode [ 408.598515][T17158] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.654768][T17174] bond8: (slave veth14): Enslaving as an active interface with a down link [ 408.720066][T17157] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 408.746572][T17157] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 409.268489][T17185] vlan8: entered promiscuous mode [ 409.283692][T17185] geneve1: entered promiscuous mode [ 409.296620][T17185] vlan8: entered allmulticast mode [ 409.326085][T12471] bond0: (slave batadv0): link status definitely up [ 409.377683][T16642] veth0_macvtap: entered promiscuous mode [ 409.415248][T16642] veth1_macvtap: entered promiscuous mode [ 409.513900][T12473] net_ratelimit: 13 callbacks suppressed [ 409.513921][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 409.580265][T16642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.601646][T16642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.713952][ T757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.777300][ T757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.837199][ T757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.873078][ T757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.943765][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.086662][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.315274][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.425298][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.453401][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.765802][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.898590][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.940215][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.980836][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.045561][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.185395][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.304592][T17249] xt_hashlimit: size too large, truncated to 1048576 [ 411.342352][T17249] xt_hashlimit: max too large, truncated to 1048576 [ 411.352771][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.383000][T17249] xt_hashlimit: invalid rate [ 411.517575][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.886374][T12471] bond0: (slave batadv0): link status definitely up [ 411.940818][T12471] bond0: active interface up! [ 412.168034][T17275] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 412.202580][T17275] __nla_validate_parse: 2 callbacks suppressed [ 412.202601][T17275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3043'. [ 412.314198][T17275] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 412.365647][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 412.387859][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.397803][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.423071][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.440214][T17286] netlink: 'syz.3.3044': attribute type 4 has an invalid length. [ 412.450842][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.464372][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.106069][T17299] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 413.153959][T17299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3046'. [ 414.039058][T17329] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 414.101102][T17329] netlink: 'syz.3.3052': attribute type 2 has an invalid length. [ 414.172637][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 414.185043][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 414.285052][T17340] netlink: 'syz.1.3055': attribute type 9 has an invalid length. [ 414.337675][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 414.420588][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 414.483701][T17340] netlink: 'syz.1.3055': attribute type 9 has an invalid length. [ 414.510464][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 414.604108][ T50] Bluetooth: hci0: command tx timeout [ 414.678773][ T141] net_ratelimit: 22 callbacks suppressed [ 414.678795][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.846593][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.982854][T17357] netlink: 'syz.2.3058': attribute type 4 has an invalid length. [ 414.997676][T17279] syzkaller0 speed is unknown, defaulting to 1000 [ 415.009220][T17357] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3058'. [ 415.024093][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.404950][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.437783][T17374] netlink: 'syz.1.3063': attribute type 11 has an invalid length. [ 415.475705][T17374] netlink: 'syz.1.3063': attribute type 4 has an invalid length. [ 415.531511][T17374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3063'. [ 415.544669][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.800585][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.944540][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.953265][T17394] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 416.163038][T17403] openvswitch: netlink: Message has 5 unknown bytes. [ 416.165022][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.208584][T17403] nbd: nbd1 already in use [ 416.233201][T17403] block nbd1: NBD_DISCONNECT [ 416.257382][T17403] block nbd1: Send disconnect failed -32 [ 416.337525][T17403] block nbd1: shutting down sockets [ 416.373311][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.397430][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.430557][T17279] bridge_slave_0: entered allmulticast mode [ 416.473254][T17279] bridge_slave_0: entered promiscuous mode [ 416.531014][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.554065][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.578232][T17279] bridge_slave_1: entered allmulticast mode [ 416.641118][T17279] bridge_slave_1: entered promiscuous mode [ 416.683624][ T50] Bluetooth: hci0: command tx timeout [ 416.872715][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.949893][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.093984][ T757] bond0: (slave batadv0): interface is now down [ 417.143274][ T757] bond0: now running without any active interface! [ 417.266238][T17439] policy can only be matched on NF_INET_PRE_ROUTING [ 417.266262][T17439] unable to load match [ 417.319010][T17440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.341505][T17279] team0: Port device team_slave_0 added [ 417.368436][T17279] team0: Port device team_slave_1 added [ 417.512826][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.535587][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.575036][T17449] netlink: 'syz.2.3081': attribute type 1 has an invalid length. [ 417.613281][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.704029][T17449] 8021q: adding VLAN 0 to HW filter on device bond11 [ 417.725837][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.733001][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.764617][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.996774][T17456] __nla_validate_parse: 2 callbacks suppressed [ 417.996791][T17456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 418.015149][T17456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 418.115974][T17279] hsr_slave_0: entered promiscuous mode [ 418.122802][T17279] hsr_slave_1: entered promiscuous mode [ 418.145632][T17279] debugfs: 'hsr0' already exists in 'hsr' [ 418.151591][T17279] Cannot create hsr debugfs directory [ 418.158953][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 418.186353][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 418.763717][ T50] Bluetooth: hci0: command tx timeout [ 418.893300][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 419.247589][T17491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3093'. [ 419.379935][T17498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 419.724851][ T57] bond0: (slave batadv0): link status definitely up [ 420.127317][ T757] net_ratelimit: 4 callbacks suppressed [ 420.127342][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.324726][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.676628][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.705521][T17522] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 420.723460][T17522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3100'. [ 420.844598][ T50] Bluetooth: hci0: command tx timeout [ 421.000026][T17534] netlink: 'syz.3.3103': attribute type 2 has an invalid length. [ 421.191440][T17529] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 421.245572][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 421.303876][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.441237][T17548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.469172][T17548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3106'. [ 421.523586][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.680167][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 421.835963][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 422.188449][T17567] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 422.285415][T12471] bond0: (slave batadv0): link status definitely up [ 422.344420][T17560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.363891][T17561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.799994][T17279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.859271][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.883162][T17279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.918472][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.941803][T17279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.978312][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.264436][T17279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 423.331337][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.865620][T17620] hsr0: entered allmulticast mode [ 423.878191][T17620] hsr_slave_0: entered allmulticast mode [ 423.893083][T17620] hsr_slave_1: entered allmulticast mode [ 423.937438][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.112978][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.165967][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.173195][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.251405][T17637] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 424.271786][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.279071][T12471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.388784][T17642] __nla_validate_parse: 4 callbacks suppressed [ 424.388803][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 424.435042][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 425.227598][ T757] net_ratelimit: 14 callbacks suppressed [ 425.227622][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.428192][T17678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3136'. [ 425.443974][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.478286][T17678] bridge0: port 2(dummy0) entered disabled state [ 425.484989][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.540774][T17680] netlink: 'syz.3.3135': attribute type 4 has an invalid length. [ 425.603186][T17683] netlink: 'syz.3.3135': attribute type 4 has an invalid length. [ 425.925091][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.075717][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.136848][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 426.238242][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.308913][T17702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3141'. [ 426.373655][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.442871][T17707] netlink: 'syz.1.3142': attribute type 1 has an invalid length. [ 426.505398][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.599886][T17710] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 426.628883][T17713] netlink: 'syz.2.3144': attribute type 11 has an invalid length. [ 426.649962][T17713] netlink: 'syz.2.3144': attribute type 4 has an invalid length. [ 426.697750][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3144'. [ 426.772449][T17710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.813573][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.902701][T17716] bond1: (slave gretap1): making interface the new active one [ 426.927504][T17716] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 426.964000][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.978405][T17721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'. [ 426.996580][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.023073][T17723] sctp: [Deprecated]: syz.3.3145 (pid 17723) Use of int in max_burst socket option deprecated. [ 427.023073][T17723] Use struct sctp_assoc_value instead [ 427.125874][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 427.325953][T17730] syzkaller0: entered promiscuous mode [ 427.332298][T17730] syzkaller0: entered allmulticast mode [ 427.416326][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 427.465876][ T50] block nbd1: Receive control failed (result -107) [ 427.858512][T17279] veth0_vlan: entered promiscuous mode [ 427.917301][T17279] veth1_vlan: entered promiscuous mode [ 428.048968][T17754] netlink: 'syz.3.3154': attribute type 4 has an invalid length. [ 428.067396][T17756] netlink: 'syz.3.3154': attribute type 4 has an invalid length. [ 428.086006][T17754] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3154'. [ 428.100765][T17279] veth0_macvtap: entered promiscuous mode [ 428.142831][T17756] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3154'. [ 428.192577][T17279] veth1_macvtap: entered promiscuous mode [ 428.318454][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.377376][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.620930][ T757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.753582][ T1029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.794910][ T1029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.929471][T12473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.981350][T12473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.038340][ T757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.206043][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.243005][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.525991][T17797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3165'. [ 429.568140][T17797] netlink: 'syz.4.3165': attribute type 7 has an invalid length. [ 429.601157][T17797] netlink: 'syz.4.3165': attribute type 8 has an invalid length. [ 429.629005][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 429.804204][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.967626][ T57] bond0: (slave batadv0): link status definitely up [ 430.273741][ T757] net_ratelimit: 18 callbacks suppressed [ 430.273762][ T757] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.329418][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.346979][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.357899][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.382243][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.395072][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.522738][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.706245][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.905560][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.038630][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3176'. [ 431.121828][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.267219][T17844] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 431.294034][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.525368][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.695739][T17860] netlink: 'syz.0.3180': attribute type 21 has an invalid length. [ 431.868064][ T5626] syz_tun (unregistering): left promiscuous mode [ 431.954347][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 432.022284][T17867] netlink: 'syz.4.3182': attribute type 23 has an invalid length. [ 432.064537][T17868] netlink: 'syz.4.3182': attribute type 23 has an invalid length. [ 432.127565][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 432.359274][ T757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.385323][ T9848] IPVS: starting estimator thread 0... [ 432.406819][ T757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.445984][ T50] Bluetooth: hci2: command tx timeout [ 432.494148][T17887] IPVS: using max 34 ests per chain, 81600 per kthread [ 432.536644][T17893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3184'. [ 432.604967][ T36] bond0: (slave batadv0): link status definitely up [ 432.634619][T17876] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3184'. [ 432.941972][ T757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.008888][ T757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.180063][T17816] syzkaller0 speed is unknown, defaulting to 1000 [ 433.202299][T17912] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 433.369908][ T757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.414451][ T757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.722292][T17926] bridge_slave_0: left allmulticast mode [ 433.752849][T17926] bridge_slave_0: left promiscuous mode [ 433.780520][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.830907][T17926] bridge_slave_1: left allmulticast mode [ 433.853105][T17936] netlink: 'syz.3.3198': attribute type 11 has an invalid length. [ 433.870612][T17926] bridge_slave_1: left promiscuous mode [ 433.894953][T17936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3198'. [ 433.907791][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.935111][T17926] bond0: (slave bond_slave_0): Releasing backup interface [ 433.976934][T17926] bond0: (slave bond_slave_1): Releasing backup interface [ 433.984857][T17938] netlink: 'syz.3.3198': attribute type 8 has an invalid length. [ 434.006047][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 434.045507][T17926] team0: Port device team_slave_0 removed [ 434.128420][T17926] team0: Port device team_slave_1 removed [ 434.147870][T17926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.157321][T17926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.168274][T17926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.180832][T17926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.193136][T17927] macvlan0: entered promiscuous mode [ 434.268762][T17947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3200'. [ 434.349333][T17949] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3201'. [ 434.357869][ T757] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 434.399471][ T757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.416122][ T757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.447068][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 434.524322][ T50] Bluetooth: hci2: command tx timeout [ 435.324480][T12473] net_ratelimit: 10 callbacks suppressed [ 435.324502][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 435.497244][ T757] veth1_to_bridge: left allmulticast mode [ 435.528965][ T757] veth1_to_bridge: left promiscuous mode [ 435.564598][ T757] bridge0: port 5(veth1_to_bridge) entered disabled state [ 435.665912][ T757] team0: left promiscuous mode [ 435.686772][T17990] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 435.705641][ T757] team_slave_0: left promiscuous mode [ 435.716843][ T757] team_slave_1: left promiscuous mode [ 435.743020][ T757] bridge0: port 4(team0) entered disabled state [ 435.774961][ T757] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 435.783937][T17996] openvswitch: netlink: Duplicate or invalid key (type 0). [ 435.803681][ T757] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 435.819253][ T757] bridge0: port 3(wlan1) entered disabled state [ 435.851768][ T757] bridge_slave_1: left allmulticast mode [ 435.865419][ T757] bridge_slave_1: left promiscuous mode [ 435.891114][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.930250][ T757] bridge_slave_0: left allmulticast mode [ 435.944479][ T757] bridge_slave_0: left promiscuous mode [ 435.955145][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.020568][ T757] pim6reg: left allmulticast mode [ 436.604783][ T50] Bluetooth: hci2: command tx timeout [ 436.810816][ T757] ip6gretap0 (unregistering): left promiscuous mode [ 437.218532][T18015] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 437.259123][ T757] bond4 (unregistering): (slave geneve2): Releasing active interface [ 437.366430][ T757] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 437.374826][ T757] bridge4 (unregistering): left promiscuous mode [ 437.395254][ T757] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 437.407337][ T757] bridge5 (unregistering): left promiscuous mode [ 437.438176][ T757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.450413][ T757] bond0 (unregistering): Released all slaves [ 437.470078][ T757] bond1 (unregistering): Released all slaves [ 437.496938][ T757] bond2 (unregistering): Released all slaves [ 437.521738][ T757] bond3 (unregistering): Released all slaves [ 437.553265][ T757] bond4 (unregistering): Released all slaves [ 437.578712][ T757] bond5 (unregistering): Released all slaves [ 437.612800][ T757] bond6 (unregistering): Released all slaves [ 437.638637][ T757] bond7 (unregistering): Released all slaves [ 437.670320][ T757] bond8 (unregistering): Released all slaves [ 437.701458][ T757] bond9 (unregistering): Released all slaves [ 437.730628][ T757] bond10 (unregistering): Released all slaves [ 437.769553][ T757] bond11 (unregistering): Released all slaves [ 437.797656][ T757] bond12 (unregistering): Released all slaves [ 437.833508][T17969] syzkaller1: entered promiscuous mode [ 437.839285][T17969] syzkaller1: entered allmulticast mode [ 437.942132][T17990] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.950934][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.146254][T18022] netlink: 'syz.4.3214': attribute type 1 has an invalid length. [ 438.159403][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 438.178740][T18015] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 438.180051][T18016] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 438.293970][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.319198][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3215'. [ 438.350591][ T757] : left promiscuous mode [ 438.574125][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.610684][T18031] bond0: Error: CAN devices cannot be enslaved [ 438.683553][ T50] Bluetooth: hci2: command tx timeout [ 438.888916][ T757] tipc: Left network mode [ 438.920697][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 439.340100][T17816] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.402957][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.486789][T17816] bridge_slave_0: entered allmulticast mode [ 439.572755][T17816] bridge_slave_0: entered promiscuous mode [ 439.684967][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 439.714685][T17816] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.752457][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.812456][T17816] bridge_slave_1: entered allmulticast mode [ 439.879291][T17816] bridge_slave_1: entered promiscuous mode [ 440.083490][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 440.191356][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.300170][T12471] bond0: (slave batadv0): link status definitely up [ 440.561516][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.758853][T18104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3227'. [ 440.818477][T18108] netlink: 'syz.4.3227': attribute type 8 has an invalid length. [ 440.854117][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 440.981221][T17816] team0: Port device team_slave_0 added [ 441.191908][T17816] team0: Port device team_slave_1 added [ 441.298807][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 441.508599][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 441.522186][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.562335][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.637639][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.690907][ T757] hsr_slave_0: left promiscuous mode [ 441.697938][ T757] hsr_slave_1: left promiscuous mode [ 441.706552][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.717364][ T757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.729152][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.737237][ T757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.771750][ T757] veth1_vlan: left allmulticast mode [ 441.778202][ T757] veth1_macvtap: left promiscuous mode [ 441.787002][ T757] veth0_macvtap: left promiscuous mode [ 441.792902][ T757] veth1_vlan: left promiscuous mode [ 441.799279][ T757] veth0_vlan: left promiscuous mode [ 442.385555][ T757] team_slave_1 (unregistering): left allmulticast mode [ 442.399483][ T757] team0 (unregistering): Port device team_slave_1 removed [ 442.424894][ T757] team_slave_0 (unregistering): left allmulticast mode [ 442.433130][ T757] team0 (unregistering): Port device team_slave_0 removed [ 442.597281][T18073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.766069][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.800516][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.845746][ T57] bond0: (slave batadv0): link status definitely up [ 442.954426][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.124542][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.559738][T17816] hsr_slave_0: entered promiscuous mode [ 443.710438][T18146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3235'. [ 443.759412][T17816] hsr_slave_1: entered promiscuous mode [ 443.806413][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.814254][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.923182][T18138] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.930497][T18138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.938143][T18138] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.945391][T18138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.992397][T18138] bridge0: entered promiscuous mode [ 444.007135][T18138] bridge0: entered allmulticast mode [ 444.034409][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.332720][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 444.368213][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.407753][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 444.531995][T18168] netlink: 'syz.3.3241': attribute type 4 has an invalid length. [ 444.570038][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 444.609120][T18171] netlink: 'syz.3.3241': attribute type 4 has an invalid length. [ 444.636938][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.673474][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 445.214665][ T757] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.427878][ T50] block nbd4: Receive control failed (result -32) [ 445.428435][ T5642] block nbd4: Receive control failed (result -32) [ 445.570598][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 445.614548][ T141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.664672][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 445.881712][T18204] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 446.026737][T12473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.243666][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.543436][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 446.581692][T18225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 446.852312][T18231] openvswitch: netlink: IP tunnel dst address not specified [ 446.923827][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 447.303897][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 447.321287][T18249] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.396251][T18249] netlink: 768 bytes leftover after parsing attributes in process `syz.0.3261'. [ 447.454055][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 447.472840][T18249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.586348][T18259] netlink: 'syz.4.3263': attribute type 12 has an invalid length. [ 447.609220][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 447.785251][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 447.860438][T18267] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3265'. [ 447.908867][T17816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.960039][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.007587][T17816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.050937][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.090885][T17816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.153380][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.190907][T17816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.248640][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.414980][T18287] netlink: 'syz.0.3269': attribute type 1 has an invalid length. [ 448.432146][T18279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.230007][T18277] syzkaller0 speed is unknown, defaulting to 1000 [ 449.500095][T18318] syzkaller1: entered promiscuous mode [ 449.520420][T18318] syzkaller1: entered allmulticast mode [ 449.668706][T18325] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 450.238235][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'. [ 450.286581][T18319] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.305213][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 450.350004][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 450.526835][ T757] bond0: (slave batadv0): link status definitely up [ 450.778923][T18355] syzkaller1: entered promiscuous mode [ 450.794953][T18355] syzkaller1: entered allmulticast mode [ 450.817333][T18355] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 450.882308][T17816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.939106][T18362] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.094597][T17816] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.167407][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.174662][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.281906][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.289203][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.836850][T18384] pim6reg: entered allmulticast mode [ 451.858924][ T1029] net_ratelimit: 7 callbacks suppressed [ 451.858943][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.879069][T18384] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 451.910332][T18384] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3285'. [ 451.937106][T18386] pim6reg: left allmulticast mode [ 451.976689][T18384] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 452.059294][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3288'. [ 452.083961][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 452.159463][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 452.235015][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 452.250696][T18394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.625636][T18407] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 452.699917][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 452.715853][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 452.736758][T18407] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3291'. [ 452.877594][T18407] nbd1: detected capacity change from 0 to 127 [ 452.893863][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 452.908757][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 452.966887][ T1620] block nbd1: Dead connection, failed to find a fallback [ 452.980844][ T1620] block nbd1: shutting down sockets [ 452.989883][ T1620] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.005597][ T1620] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.023987][ T1620] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.033900][ T1620] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.045109][ T1620] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.055963][ T1620] Buffer I/O error on dev nbd1, logical block 2, async page read [ 453.064159][ T1620] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.074466][ T1620] Buffer I/O error on dev nbd1, logical block 3, async page read [ 453.082881][ T1620] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.083863][ T1029] bond0: (slave batadv0): link status definitely up [ 453.097258][ T1620] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.107909][ T1620] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.118002][ T1620] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.127571][ T1620] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.137325][ T1620] Buffer I/O error on dev nbd1, logical block 2, async page read [ 453.145802][ T1620] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.155632][ T1620] Buffer I/O error on dev nbd1, logical block 3, async page read [ 453.164434][ T1620] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.175686][ T1620] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.183806][ T1620] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.197937][ T1620] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.210177][ T5630] ldm_validate_partition_table(): Disk read failed. [ 453.230037][ T5630] Dev nbd1: unable to read RDB block 0 [ 453.238600][ T5630] nbd1: unable to read partition table [ 453.434364][ T5630] ldm_validate_partition_table(): Disk read failed. [ 453.502359][ T5630] Dev nbd1: unable to read RDB block 0 [ 453.546175][ T5630] nbd1: unable to read partition table [ 453.634151][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.806288][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.949835][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 453.963978][ T141] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.266849][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.660801][T18461] IPVS: length: 83 != 8 [ 454.964480][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3303'. [ 455.038738][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.046276][T18467] [ 455.048659][T18467] ====================================================== [ 455.055732][T18467] WARNING: possible circular locking dependency detected [ 455.062854][T18467] syzkaller #0 Not tainted [ 455.067305][T18467] ------------------------------------------------------ [ 455.074409][T18467] syz.3.3303/18467 is trying to acquire lock: [ 455.080493][T18467] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 455.091089][T18467] [ 455.091089][T18467] but task is already holding lock: [ 455.098469][T18467] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 455.107932][T18467] [ 455.107932][T18467] which lock already depends on the new lock. [ 455.107932][T18467] [ 455.118351][T18467] [ 455.118351][T18467] the existing dependency chain (in reverse order) is: [ 455.127392][T18467] [ 455.127392][T18467] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 455.135514][T18467] down_write+0x96/0x200 [ 455.140415][T18467] kernfs_add_one+0x41/0x5e0 [ 455.145606][T18467] kernfs_create_dir_ns+0x1a1/0x230 [ 455.151368][T18467] internal_create_group+0x440/0x1180 [ 455.157318][T18467] cpuhp_invoke_callback+0x434/0x810 [ 455.163217][T18467] cpuhp_issue_call+0x3f0/0x750 [ 455.168645][T18467] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 455.175369][T18467] __cpuhp_setup_state+0x3f/0x60 [ 455.180879][T18467] do_one_initcall+0x250/0x870 [ 455.186217][T18467] do_initcall_level+0x10a/0x1a0 [ 455.191812][T18467] do_initcalls+0x59/0xa0 [ 455.196711][T18467] kernel_init_freeable+0x29d/0x3e0 [ 455.202472][T18467] kernel_init+0x1d/0x1d0 [ 455.207366][T18467] ret_from_fork+0x514/0xb70 [ 455.212554][T18467] ret_from_fork_asm+0x1a/0x30 [ 455.217879][T18467] [ 455.217879][T18467] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 455.225750][T18467] [ 455.225750][T18467] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 455.233533][T18467] cpus_read_lock+0x42/0x160 [ 455.238682][T18467] static_key_slow_inc+0x12/0x30 [ 455.244228][T18467] nbd_genl_reconfigure+0x1301/0x1e80 [ 455.250267][T18467] genl_family_rcv_msg_doit+0x233/0x340 [ 455.256473][T18467] genl_rcv_msg+0x614/0x7a0 [ 455.261547][T18467] netlink_rcv_skb+0x226/0x4a0 [ 455.266869][T18467] genl_rcv+0x28/0x40 [ 455.271418][T18467] netlink_unicast+0x7bb/0x940 [ 455.276737][T18467] netlink_sendmsg+0x813/0xb40 [ 455.282064][T18467] sock_sendmsg_nosec+0x13a/0x180 [ 455.287651][T18467] ____sys_sendmsg+0x54e/0x850 [ 455.292967][T18467] ___sys_sendmsg+0x2a5/0x360 [ 455.298199][T18467] __x64_sys_sendmsg+0x1b1/0x290 [ 455.303698][T18467] do_syscall_64+0x174/0x580 [ 455.308859][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.315308][T18467] [ 455.315308][T18467] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 455.323002][T18467] __mutex_lock+0x19d/0x1550 [ 455.328190][T18467] nbd_queue_rq+0x373/0x1150 [ 455.333336][T18467] blk_mq_dispatch_rq_list+0x499/0x1990 [ 455.339579][T18467] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 455.346567][T18467] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 455.353121][T18467] blk_mq_run_work_fn+0x16c/0x300 [ 455.358700][T18467] process_scheduled_works+0xa8e/0x14e0 [ 455.364892][T18467] worker_thread+0xa47/0xfb0 [ 455.370037][T18467] kthread+0x388/0x470 [ 455.374668][T18467] ret_from_fork+0x514/0xb70 [ 455.379820][T18467] ret_from_fork_asm+0x1a/0x30 [ 455.385135][T18467] [ 455.385135][T18467] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 455.392395][T18467] __mutex_lock+0x19d/0x1550 [ 455.397585][T18467] nbd_queue_rq+0xc1/0x1150 [ 455.402645][T18467] blk_mq_dispatch_rq_list+0x499/0x1990 [ 455.408763][T18467] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 455.415664][T18467] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 455.422214][T18467] blk_mq_run_work_fn+0x16c/0x300 [ 455.423009][T17816] veth0_vlan: entered promiscuous mode [ 455.427798][T18467] process_scheduled_works+0xa8e/0x14e0 [ 455.427826][T18467] worker_thread+0xa47/0xfb0 [ 455.444503][T18467] kthread+0x388/0x470 [ 455.449138][T18467] ret_from_fork+0x514/0xb70 [ 455.454291][T18467] ret_from_fork_asm+0x1a/0x30 [ 455.459604][T18467] [ 455.459604][T18467] -> #4 (set->srcu){.+.+}-{0:0}: [ 455.466767][T18467] __synchronize_srcu+0xc9/0x2f0 [ 455.472307][T18467] elevator_switch+0x1e8/0x7b0 [ 455.477716][T18467] elevator_change+0x2fa/0x480 [ 455.483044][T18467] elevator_set_default+0x375/0x440 [ 455.488801][T18467] blk_register_queue+0x3f3/0x4e0 [ 455.494439][T18467] __add_disk+0x6cb/0xe30 [ 455.499336][T18467] add_disk_fwnode+0x100/0x3a0 [ 455.504655][T18467] nbd_dev_add+0x733/0xb60 [ 455.509628][T18467] nbd_init+0x15f/0x1e0 [ 455.514460][T18467] do_one_initcall+0x250/0x870 [ 455.519790][T18467] do_initcall_level+0x10a/0x1a0 [ 455.525293][T18467] do_initcalls+0x59/0xa0 [ 455.530180][T18467] kernel_init_freeable+0x29d/0x3e0 [ 455.535942][T18467] kernel_init+0x1d/0x1d0 [ 455.540828][T18467] ret_from_fork+0x514/0xb70 [ 455.545980][T18467] ret_from_fork_asm+0x1a/0x30 [ 455.551295][T18467] [ 455.551295][T18467] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 455.559160][T18467] __mutex_lock+0x19d/0x1550 [ 455.564322][T18467] elevator_change+0x1af/0x480 [ 455.569653][T18467] elevator_set_none+0xb5/0x140 [ 455.575069][T18467] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 455.581476][T18467] nbd_start_device+0x189/0xb30 [ 455.586890][T18467] nbd_genl_connect+0x1597/0x1c10 [ 455.592481][T18467] genl_family_rcv_msg_doit+0x233/0x340 [ 455.598593][T18467] genl_rcv_msg+0x614/0x7a0 [ 455.603689][T18467] netlink_rcv_skb+0x226/0x4a0 [ 455.609007][T18467] genl_rcv+0x28/0x40 [ 455.613557][T18467] netlink_unicast+0x7bb/0x940 [ 455.618872][T18467] netlink_sendmsg+0x813/0xb40 [ 455.624200][T18467] sock_sendmsg_nosec+0x13a/0x180 [ 455.629799][T18467] ____sys_sendmsg+0x54e/0x850 [ 455.635118][T18467] ___sys_sendmsg+0x2a5/0x360 [ 455.640420][T18467] __x64_sys_sendmsg+0x1b1/0x290 [ 455.646026][T18467] do_syscall_64+0x174/0x580 [ 455.651184][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.657632][T18467] [ 455.657632][T18467] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 455.666292][T18467] blk_alloc_queue+0x544/0x690 [ 455.671632][T18467] __blk_mq_alloc_disk+0x194/0x390 [ 455.677302][T18467] nbd_dev_add+0x494/0xb60 [ 455.682292][T18467] nbd_init+0x15f/0x1e0 [ 455.687021][T18467] do_one_initcall+0x250/0x870 [ 455.692349][T18467] do_initcall_level+0x10a/0x1a0 [ 455.697927][T18467] do_initcalls+0x59/0xa0 [ 455.703265][T18467] kernel_init_freeable+0x29d/0x3e0 [ 455.709046][T18467] kernel_init+0x1d/0x1d0 [ 455.713944][T18467] ret_from_fork+0x514/0xb70 [ 455.719119][T18467] ret_from_fork_asm+0x1a/0x30 [ 455.724447][T18467] [ 455.724447][T18467] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 455.731710][T18467] fs_reclaim_acquire+0x71/0x100 [ 455.737256][T18467] kmem_cache_alloc_noprof+0x64/0x5f0 [ 455.743193][T18467] __kernfs_iattrs+0xdd/0x380 [ 455.748439][T18467] kernfs_iop_setattr+0xe6/0x3f0 [ 455.753950][T18467] notify_change+0xbba/0xea0 [ 455.759105][T18467] do_truncate+0x1c2/0x250 [ 455.764085][T18467] path_openat+0x2fed/0x3830 [ 455.768917][T17816] veth1_vlan: entered promiscuous mode [ 455.769224][T18467] do_file_open+0x23e/0x4a0 [ 455.779731][T18467] do_sys_openat2+0x115/0x200 [ 455.784972][T18467] __x64_sys_openat+0x138/0x170 [ 455.790387][T18467] do_syscall_64+0x174/0x580 [ 455.795540][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.801989][T18467] [ 455.801989][T18467] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 455.810566][T18467] __lock_acquire+0x1520/0x2cf0 [ 455.816028][T18467] lock_acquire+0x106/0x350 [ 455.821090][T18467] down_write+0x96/0x200 [ 455.825901][T18467] kernfs_link_sibling+0x4c7/0x5a0 [ 455.831661][T18467] kernfs_add_one+0x1d2/0x5e0 [ 455.836901][T18467] kernfs_create_dir_ns+0x1a1/0x230 [ 455.842649][T18467] sysfs_create_dir_ns+0x12f/0x2a0 [ 455.848328][T18467] kobject_add_internal+0x622/0xcd0 [ 455.854207][T18467] kobject_add+0x163/0x240 [ 455.859209][T18467] device_add+0x3fa/0xb80 [ 455.864180][T18467] __add_disk+0x503/0xe30 [ 455.869071][T18467] add_disk_fwnode+0x100/0x3a0 [ 455.874395][T18467] nbd_dev_add+0x733/0xb60 [ 455.879372][T18467] nbd_genl_connect+0x992/0x1c10 [ 455.884864][T18467] genl_family_rcv_msg_doit+0x233/0x340 [ 455.890978][T18467] genl_rcv_msg+0x614/0x7a0 [ 455.896085][T18467] netlink_rcv_skb+0x226/0x4a0 [ 455.901404][T18467] genl_rcv+0x28/0x40 [ 455.905950][T18467] netlink_unicast+0x7bb/0x940 [ 455.911265][T18467] netlink_sendmsg+0x813/0xb40 [ 455.916597][T18467] sock_sendmsg_nosec+0x13a/0x180 [ 455.922186][T18467] ____sys_sendmsg+0x54e/0x850 [ 455.927508][T18467] ___sys_sendmsg+0x2a5/0x360 [ 455.932751][T18467] __x64_sys_sendmsg+0x1b1/0x290 [ 455.938265][T18467] do_syscall_64+0x174/0x580 [ 455.943418][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.949869][T18467] [ 455.949869][T18467] other info that might help us debug this: [ 455.949869][T18467] [ 455.960125][T18467] Chain exists of: [ 455.960125][T18467] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 455.960125][T18467] [ 455.974642][T18467] Possible unsafe locking scenario: [ 455.974642][T18467] [ 455.982384][T18467] CPU0 CPU1 [ 455.987851][T18467] ---- ---- [ 455.993267][T18467] lock(&root->kernfs_rwsem); [ 455.998083][T18467] lock(cpuhp_state_mutex); [ 456.005240][T18467] lock(&root->kernfs_rwsem); [ 456.012597][T18467] lock(&root->kernfs_iattr_rwsem); [ 456.017929][T18467] [ 456.017929][T18467] *** DEADLOCK *** [ 456.017929][T18467] [ 456.026173][T18467] 4 locks held by syz.3.3303/18467: [ 456.031395][T18467] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 456.039725][T18467] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 456.048808][T18467] #2: ffff8880330091c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 456.059226][T18467] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 456.069136][T18467] [ 456.069136][T18467] stack backtrace: [ 456.075057][T18467] CPU: 1 UID: 0 PID: 18467 Comm: syz.3.3303 Not tainted syzkaller #0 PREEMPT(full) [ 456.075086][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.075102][T18467] Call Trace: [ 456.075110][T18467] [ 456.075120][T18467] dump_stack_lvl+0xe8/0x150 [ 456.075158][T18467] print_circular_bug+0x2e1/0x300 [ 456.075185][T18467] check_noncircular+0x12e/0x150 [ 456.075211][T18467] __lock_acquire+0x1520/0x2cf0 [ 456.075246][T18467] ? __lock_acquire+0x683/0x2cf0 [ 456.075284][T18467] ? kernfs_link_sibling+0x4c7/0x5a0 [ 456.075318][T18467] lock_acquire+0x106/0x350 [ 456.075348][T18467] ? kernfs_link_sibling+0x4c7/0x5a0 [ 456.075388][T18467] down_write+0x96/0x200 [ 456.075422][T18467] ? kernfs_link_sibling+0x4c7/0x5a0 [ 456.075454][T18467] ? __pfx_down_write+0x10/0x10 [ 456.075485][T18467] ? kernfs_root+0x1c/0x230 [ 456.075514][T18467] ? kernfs_root+0x1c/0x230 [ 456.075544][T18467] ? kernfs_root+0x1c/0x230 [ 456.075575][T18467] ? kernfs_root+0x1ea/0x230 [ 456.075606][T18467] kernfs_link_sibling+0x4c7/0x5a0 [ 456.075645][T18467] kernfs_add_one+0x1d2/0x5e0 [ 456.075679][T18467] kernfs_create_dir_ns+0x1a1/0x230 [ 456.075702][T18467] sysfs_create_dir_ns+0x12f/0x2a0 [ 456.075734][T18467] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 456.075765][T18467] ? do_raw_spin_unlock+0xf5/0x210 [ 456.075799][T18467] kobject_add_internal+0x622/0xcd0 [ 456.075833][T18467] kobject_add+0x163/0x240 [ 456.075853][T18467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.075887][T18467] ? __pfx_kobject_add+0x10/0x10 [ 456.075911][T18467] ? get_device_parent+0x366/0x3a0 [ 456.075938][T18467] device_add+0x3fa/0xb80 [ 456.075961][T18467] __add_disk+0x503/0xe30 [ 456.075991][T18467] add_disk_fwnode+0x100/0x3a0 [ 456.076019][T18467] nbd_dev_add+0x733/0xb60 [ 456.076046][T18467] ? __pfx_nbd_dev_add+0x10/0x10 [ 456.076079][T18467] ? bpf_lsm_capable+0x9/0x20 [ 456.076138][T18467] ? security_capable+0x7e/0x2c0 [ 456.076253][T18467] ? radix_tree_lookup+0x25c/0x290 [ 456.076315][T18467] nbd_genl_connect+0x992/0x1c10 [ 456.076343][T18467] ? __pfx_nbd_genl_connect+0x10/0x10 [ 456.076367][T18467] ? rcu_is_watching+0x15/0xb0 [ 456.076390][T18467] ? trace_kmalloc+0x2a/0xf0 [ 456.076421][T18467] ? __kmalloc_noprof+0x396/0x720 [ 456.076451][T18467] ? __nla_parse+0x40/0x60 [ 456.076515][T18467] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 456.076549][T18467] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 456.076589][T18467] genl_family_rcv_msg_doit+0x233/0x340 [ 456.076628][T18467] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.076669][T18467] ? __lock_acquire+0x683/0x2cf0 [ 456.076705][T18467] genl_rcv_msg+0x614/0x7a0 [ 456.076739][T18467] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.076773][T18467] ? __pfx_nbd_genl_connect+0x10/0x10 [ 456.076812][T18467] netlink_rcv_skb+0x226/0x4a0 [ 456.076840][T18467] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.076873][T18467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.076906][T18467] ? down_read+0x2be/0x330 [ 456.076943][T18467] genl_rcv+0x28/0x40 [ 456.076974][T18467] netlink_unicast+0x7bb/0x940 [ 456.077004][T18467] netlink_sendmsg+0x813/0xb40 [ 456.077037][T18467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.077064][T18467] ? aa_sock_msg_perm+0xf1/0x1b0 [ 456.077118][T18467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.077142][T18467] sock_sendmsg_nosec+0x13a/0x180 [ 456.077174][T18467] ____sys_sendmsg+0x54e/0x850 [ 456.077201][T18467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.077231][T18467] ? import_iovec+0x73/0xa0 [ 456.077255][T18467] ___sys_sendmsg+0x2a5/0x360 [ 456.077280][T18467] ? __lock_acquire+0x683/0x2cf0 [ 456.077315][T18467] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.077342][T18467] ? futex_wake+0x51b/0x5f0 [ 456.077393][T18467] ? __fget_files+0x2a/0x420 [ 456.077426][T18467] ? __fget_files+0x3a2/0x420 [ 456.077463][T18467] __x64_sys_sendmsg+0x1b1/0x290 [ 456.077491][T18467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.077528][T18467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.077553][T18467] do_syscall_64+0x174/0x580 [ 456.077585][T18467] ? trace_irq_disable+0x3b/0x140 [ 456.077616][T18467] ? clear_bhb_loop+0x40/0x90 [ 456.077642][T18467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.077665][T18467] RIP: 0033:0x7fb518d9e0d9 [ 456.077687][T18467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.077707][T18467] RSP: 002b:00007fb519be8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.077732][T18467] RAX: ffffffffffffffda RBX: 00007fb519025fa0 RCX: 00007fb518d9e0d9 [ 456.077751][T18467] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 456.077766][T18467] RBP: 00007fb518e35024 R08: 0000000000000000 R09: 0000000000000000 [ 456.077782][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.077805][T18467] R13: 00007fb519026038 R14: 00007fb519025fa0 R15: 00007fff65054208 [ 456.077833][T18467] [ 456.423143][T17816] veth0_macvtap: entered promiscuous mode [ 456.573760][T17816] veth1_macvtap: entered promiscuous mode [ 456.591591][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.606180][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.710008][T18467] nbd: socks must be embedded in a SOCK_ITEM attr [ 456.724359][T18471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3303'. [ 456.734226][T18471] nbd: device at index 64 is going down [ 456.753488][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.763046][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.780839][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.789834][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.864598][ T36] net_ratelimit: 14 callbacks suppressed [ 456.864620][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.005811][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.026258][T17816] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 457.112888][T10793] udevd[10793]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 457.130100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.140861][T17816] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 457.168081][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.177795][ T5648] udevd[5648]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 457.236951][T12471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.256291][T12471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.273665][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.393465][T12473] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.504050][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.623821][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.733551][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.744413][ T5289] veth0_vlan: left promiscuous mode [ 457.759511][ T9829] veth0_vlan: entered promiscuous mode [ 457.844135][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 457.963741][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.083468][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 461.646290][ T13] bond0: (slave batadv0): link status definitely up [ 461.657766][ T13] bond0: active interface up! [ 461.915869][ T50] Bluetooth: hci5: link tx timeout [ 461.921082][ T50] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 461.929640][ T50] Bluetooth: hci5: link tx timeout [ 461.934864][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.954121][T12471] net_ratelimit: 34 callbacks suppressed [ 461.954145][T12471] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.074264][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.194421][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.304251][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.413597][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.523655][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.634968][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.743916][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.853601][ T1029] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 462.964243][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.969103][ T50] Bluetooth: hci5: command 0x0406 tx timeout