last executing test programs: 4m16.084074525s ago: executing program 3 (id=1952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) 4m15.833448717s ago: executing program 3 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast1}, &(0x7f0000000040)=0xc) (async) r4 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x40, 0x7, 0x21, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x80, 0x8000, 0x5, 0xffff}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5c, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r14, r13, 0x25, 0x0, @val=@netkit={@void, @value=r14}}, 0x1c) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x800) (async) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x23, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @local}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@RTM_NEWMDB={0x158, 0x54, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x3, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@multicast1, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x4, {@ip4=@multicast1, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x3, 0x3, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x2, 0x4, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x3, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x1, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r17, 0x0, 0x2, 0x1, {@ip4=@multicast2, 0x86dd}}}]}, 0x158}}, 0x0) 4m15.480217078s ago: executing program 3 (id=1959): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2d, 0x61, 0x30, 0x71, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/95, 0x20, 0x5f, 0x1, 0x80000001}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x408d4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000011c0)='hybla', 0x28) unshare(0x2c060000) unshare(0x24020400) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000000009030000000000000000000a000005080005400000001f0900010073797a30000000000c00048008000140000000003c000280050001"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000180)={0x8, 'ip6erspan0\x00', {'veth0_to_batadv\x00'}, 0x7d4}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$unix(r3, &(0x7f00000004c0)="3c751fa7e6998a209d639e920925b16380ef474a3530fa593afd0b6896bbbc68d93cdf48cd61ed574440d44d8120fa179ecd88de55af00f5ebb976875fbe2d3c8ac39690ddca57f0012d924f899f48f413c83eefd7b5bd7ae76f877ab033433b8c7f5b5568da72585f463365066580a48e8713f52b7efb803bccd8700b2ec3e0eb403be4147e7f6c1ce8995ea81f47acc548316f3736a2b389137623405b3ea336c8a6c9e2d7b456c62f1a206f8a940a835c9499f7ad4707bf6598cb98b22f7b7422b6db2f15dc120abaa34186514b502628f2c9e3bfae858db06df2b5277f47df8bc83f9b", 0xe5, 0x15, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb9423523599751d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4m15.228789356s ago: executing program 3 (id=1961): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100b) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5", 0x95}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7) listen(0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x7f) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r10, &(0x7f0000000340)=""/209, 0xd1) 4m15.064840378s ago: executing program 3 (id=1962): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r4, &(0x7f0000002640)=[{&(0x7f00000001c0)="80aceb0fe4", 0x5}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x8, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x98, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 4m14.694196897s ago: executing program 3 (id=1964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c020000190001000000000000000000ac1414bb00000000000000000000006c0000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x23c}}, 0x0) 4m14.225871623s ago: executing program 32 (id=1964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c020000190001000000000000000000ac1414bb00000000000000000000006c0000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000004d62b0000000a000000fe8800000000000000000000000000010135000004020600060000000c00000001000000ff020000000000000000000000000001000004d63c0000000a000000ac1414bb0000000000000000000000000035000002020a00090000000100000006000000ffffffff000000000000000000000000000004d433"], 0x23c}}, 0x0) 6.188046279s ago: executing program 5 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x46000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRESDEC=r3, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet6(0xa, 0x7, 0x5) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@remote, 0x4e23, 0xfffc, 0x4e23, 0x0, 0x2, 0x80, 0x30}, {0x100000000, 0x7fffffff, 0x101, 0x0, 0xffffffffffffffff, 0x6, 0xb, 0x800000002001}, {0x4, 0xfffffffffffffffe, 0x0, 0x1000000000009}, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0xfffffffb}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xfffffffffffffd09) unshare(0x6a040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0xfffffffd) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet(0x2, 0x800, 0x40000a0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x8001, 0x4) setsockopt$sock_int(r10, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) 2.497329033s ago: executing program 4 (id=3935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='9(j', 0x3, 0x20004811, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf250f0000001c0003800800020001000000080001000900000008df0300050000006d83199058b70b3780ba82bd1bc04117546ea3375e5285a0b549527307d9ee470d8165a5676713e09860211b089c9e65b1ee80c0ef3adf93d923f284b9f2139beecb4be0c34927339aa2018805f14e1b5bbec445"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25210000000800", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.192007703s ago: executing program 4 (id=3937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, 0x0, 0x0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 'bridge_slave_1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32=r7], 0x50) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) (async) listen(r8, 0x3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x5}, 0x8) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x29, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0xfff9, 0x800c, 0x801}, &(0x7f0000000600)=0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000040) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async) write$rfkill(r9, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) (async) syz_emit_ethernet(0x64, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045e0ff55000000000006907864010100004e220000000000964ce1a80b3ac527d511ded52d642a4535764fc5a2067406b0aaa6544dd518a984f453381dfbea066506ce4f9e6ae9c0129edda84fcf5bedd04b932e34727dea8ec39fab9cfcdb107c712a7ddf8a17df21f707532423607ce7bd5d12490d4c3147dd38f63890d401885554b9d63e2ad72ecd1eff7142a3383e6757a1284a5e485727f17bc43ee6626a130cc8094ddcecf09af9b2ca60f529a6cbcf6b6e6dacf1a3589588bf76d591702fdb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c02000090781000080a0000000400000000000083c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445"], 0x0) 2.165051321s ago: executing program 4 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000030012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 1.60016617s ago: executing program 5 (id=3944): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) recvfrom$x25(r1, &(0x7f0000000280)=""/66, 0x42, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async, rerun: 64) close(0x3) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0x8008743f, 0xf0ff1f00000000) 1.307630088s ago: executing program 5 (id=3948): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x10}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xf}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xc2, 0x8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x44004) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='+hugetlb +bloio +pids -memory '], 0x1e) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 1.200188662s ago: executing program 2 (id=3949): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a810bef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x1, 0x0, 0x0, 0x40080}], 0x4924924924927ea, 0x40800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700005000000020000000c000f00010000800000000014001f00fe88000000000000000000000000000106000e000001000005000500010000000c000f00ffffff7f000000000c0010000800000000000000050012000000000006c3"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.188678107s ago: executing program 4 (id=3950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3cc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14001000060a0b04000000000000000002000004140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 1.108042155s ago: executing program 5 (id=3951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r3, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) close(r2) 1.057491673s ago: executing program 4 (id=3952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x4888, r2, {0x0, 0xd}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffff00, 0xff, 0xffffffff]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.033615217s ago: executing program 2 (id=3953): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40000000000000069108800000000000400000000000000950000000000dfff16568a37965f47176be671b4a7bc9986cabd255d4054d8be96c6917c", @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="500000001800010000000000080000000a373800", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000008000200020000000800020005000000140001"], 0x50}}, 0x4904) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x3, 0xff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, 0x0, 0x200000c0) sendmsg$nl_route(r1, 0x0, 0x2000c050) socket(0x25, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r6, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.019320384s ago: executing program 5 (id=3955): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00"], 0x64}}, 0x0) 859.127318ms ago: executing program 5 (id=3957): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91", 0x102}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="050843cb10087b3d2217d4", 0xb}, {&(0x7f0000000380)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48cde584306bdc40bb021c3957e83336c68286d2fccc1dfa976d5a08b894e72aed5ee5efd350810f8a85f0254", 0xd0}], 0x2}}], 0x3, 0x40408e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 740.099265ms ago: executing program 4 (id=3959): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 739.545412ms ago: executing program 2 (id=3960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmmsg$unix(r1, &(0x7f0000003080)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000380)="3ab0cce7e5", 0x5}], 0x1, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001e00)="d6ff25626d23", 0x6}], 0x2}}], 0x2, 0x20008040) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/226, 0xe2}], 0x5}, 0x3}], 0x1, 0x40010001, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x80800) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x6c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200008c0}, 0xc0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) 732.163078ms ago: executing program 1 (id=3961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0) splice(r2, &(0x7f0000000180)=0x9e, r9, &(0x7f00000002c0)=0x3, 0x0, 0xf) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r16}, 0x10) 621.149932ms ago: executing program 0 (id=3962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3cc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14001000060a0b04000000000000000002000004140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 611.046899ms ago: executing program 2 (id=3963): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a810bef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x1, 0x0, 0x0, 0x40080}], 0x4924924924927ea, 0x40800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700005000000020000000c000f00010000800000000014001f00fe88000000000000000000000000000106000e000001000005000500010000000c000f00ffffff7f000000000c0010000800000000000000050012000000000006c3"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 515.920594ms ago: executing program 1 (id=3964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x1, 0x3, 0x70}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x6, 0xb53d, 0x6, 0x0, r2, 0x2, '\x00', r4, r5, 0x1, 0x1}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="500000000102010800000000000000000a0000003c0001802c000180140003"], 0x50}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='9(j', 0x3, 0x20004811, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 514.322318ms ago: executing program 2 (id=3965): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000003140)={&(0x7f0000002f40)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6a}, 0x1c, 0x0, 0x0, &(0x7f0000003040)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @flowinfo={{0x14, 0x29, 0xb, 0xbd0}}], 0x30}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 510.96161ms ago: executing program 0 (id=3966): r0 = socket(0x1, 0x803, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x240048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) 439.331407ms ago: executing program 0 (id=3967): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000380)="3ab0cce7e5", 0x5}], 0x1, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x20008040) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 320.03524ms ago: executing program 1 (id=3968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbdbdf250a0000000015000008000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000052181a000031338cefc4dcab8d8e95b06aef973d9c84b1ed5f8c902d4be6f101d08eecb0240789613fab9c994e6dd167077cb1e5a163e4f2f90735fcd136a5e886c9539d523f767f51933762142a2845d62f16ca3749aa286fbd63bb2d41af50fc182a4780143c2151e772ff9ef1884137c88fdb9ffd50c4ad24fc8425bb065e80005231972fd93574f2f318636bae444ddf810b8c6dfe3cfd060cb1c292b6836e141f798cf0fb37e6f349845c44f24e419fbc5d27212a680bc4aea010ad8124fd7713035ad8", @ANYRES16=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}], 0x1c) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffa}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8040) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18db8f39fcffffa9e143e40adaedf20000003e000701feff"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004) 319.632532ms ago: executing program 0 (id=3969): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 269.076493ms ago: executing program 0 (id=3970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x6488, r2, {0x0, 0xd}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffff00, 0xff, 0xffffffff]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 247.23338ms ago: executing program 1 (id=3971): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x207}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000001c0)={{0x67, @empty, 0x4e22, 0x4, 'dh\x00', 0x2, 0x6e8a1581, 0x28}, {@remote, 0x4e23, 0x0, 0x8001, 0x1ff, 0x9}}, 0x44) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='spmi_read_begin\x00', r4}, 0x18) write(r1, &(0x7f00000002c0)="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", 0xfc) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040090}, 0x4000080) 188.038829ms ago: executing program 2 (id=3972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) 159.649587ms ago: executing program 1 (id=3973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r3, 0x201}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x7fff}, 0x8) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x8044) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x82, 0x5, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x10, 0x1, 0xfffffffc, 0x7f}}) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x1}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) 97.354234ms ago: executing program 0 (id=3974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x1000000}, 0x100300, 0x0, 0x3, 0xb, 0x2, 0x85}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x44, 0x2, 0x5, 0x8000}, &(0x7f0000000080)=0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r9, r7, 0x0, 0xc3, &(0x7f0000000300)='\xf4\x99\xb6J\xfaf\xe7\x9cxY\xff\xb6\xf8K\xe9\'!\xd5$w\x7f\x15p\xe58v\xf0\x7f\x96\x15\n\xc9B\x9e\xe4\'m\xb1H\xf0\xafD\xf8\xc2\xe6*\x8a\x1a\xd74!\xaf\xe1\x1a\xe6\x17\x8a\x89nv\xfbc\x97=\b\xaf0\x12\x9d@\xb1\x93\xb5\xde#\x16b\x92\xbc\xb9\vx\xaef$\xbf\xf8\xd20|N\x89\x0e\xbb\xd6X\xc9\x04SBp\xc3kL\xf7\x03\xa4x\x89\xf0\x04\xf7\x9c8;T1\xbd\x9d\xab\xa9\xdd]\xf9q\xf9\xe3\x18s'}, 0x30) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000600)=r9) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000002500)={0x12a8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1e4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x16c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x16, 0xa, "4b746e2b0d543b7f5175a8c9e6416ab5e58c"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x82, 0xb, "925154555314c3f08d2691d895a962ba9d058df6589ac4e5ced5b61a8ad6104027b191757baa60b9f1d3c9a1c42e4e5100c165aa1146e4db08da19dd319366cd2fbcccf139e4006e2506ea334f11e255a5598edcec6263a611284db2fa17d6a5c28022d20e77019a5bc6ce97f7d7da73ff4ca05be4c3278a03f87acd544f"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2d}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa3, 0x6, "3e977a0ad8e85b11d4b404c5f3aa30558f85abeb74bb3a5a4a55a8b191e42d631160b13b04aa41e7b2e7c547500fe5fdfb148f478331b77b41cbf780a8e488089e97137a45844b5a08937cfbce652abbbc8981883591d463531d0a914bf850af1239dde5395d7549db02434aac070178c839266c50fdf17373e28b7c46271789532b0d4fd726685c0ed27ce4fd830a166601125ead933bfc0d2c777fea05b0"}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x68, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x5}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x12, 0x0, @random="51e24bee8025eb3a2791b82d3c0a"}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0x14, 0x0, @random="1698f8ce4fa9eec7e4851c624052df89"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1060, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1058, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4f, 0x6, "949fcc9ec7ba964396a7668ca14cce32434f3d32ca892f50667c0494f0fee8905021ef670d1096893de8e6e50ee742708b40b96d525704f299d2d76d799dc765fc9d1a0ea9f4e5071c2200"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xffc, 0x6, "3d4d16f1d832a9c693eb24eca30d3d3e63356a7679b4fcaa22369be0a16a08ce5198f34d97cb9fed726cce9c4949aca8aca76538ccacdd09ee56ab826257046506c18876739f9ac7c6f349c70cc8ec9ffe26518cbaada56e5ebcb8d86f9f0f122e905d866abd32950cb3e7d9d711f47f3358f40c8a34b4897c5212e58c701ac90d0a3aa1afe5eb7cf544ede1308472d8f23f6bce8f7d40f22cd99d4caaf057b4a9cc1d54db407891987680af3886228b2074824fc334daaa22ab11eda6d7c6bf4a0b97f545ecd9e8043925c5613cae5ab33b605dc0a8c21acd204383311d72cf8b667553d0cd2bc03f276b6b113a4787196036c07d39322972d77604f53ace7076d0df38ddbb06d5aa419d757e3c5bc2bc2853c69916b6d33775a09e1f4902c5c2e5844285767b29fc0f6b8b6194235d8671b459a48b7d9d884a331f7e95372ccd98e18dca85da1a14b3b9e993ba94e456f1af88cf2950314658087918e8c87bf84c52538e4df93548be3c51d2c7ef0ea9b459912e80552b635c5cd5a1bc9611e273aad3964533168beb783807c66bce66e26de2f4f1636c1d8f5e85c89f2ea1e9aba31b841a369363cbcd2a96221701f5bce31899d631958e19072aac664e8ff03f60796cd1a655d5ac27ac526b1fdd4fbc65ed5b15f6a919ab0f5fe2917c5ce15466cc3d0299970cd8e380f42080efdcfa44bab7d11e1f0f38e5b1c2a5d91425e01bcc0314e099b613244536388a0ca240590f8943370a6a9b3f8505ce5e4a2ac938e950d6ff9db9455ce30eab8abc33143c89351f49529676ad33f05d323d6c2f659a61c1ae7eed23e4601b73260a88fb5e36918dd16e244e35e818def6d2326ce287ba78f0e31d6b44ab8755272bb162c3cb088af81c6be49eddbbda9541a69d01f15dcd6ec89732f8a61f4d6442b847ac767f744e216d376ddb900b2c7290ef58e1828fb9296066566b4db43e2dc73a375dc9298895501ca43dcaa635459252434dd6cc6b3e4876f3df3ba1e582e7e44cebae205b22a7e891b41d6c342ce7895d15d24691ebee068c40e455696f9c4c23f6497df5c670aa248e704cd429bbf94e20fb2f63b79590e71d37e530f988a830de01debf0245c701ca1dfcf8d5173a369efc622b3b439061a1c2b42911858a27f99212f1ccbdfcc98d01817a1522a9680c5661e0887a02e1be6d38e54b9ea3f0e3d394ea20566427da9aeae39ddb68343bf198627cb0c2c3b32473a0b2fa85337c9e714c2758be0a64f4891bea1136a5484283b3f42bd770ff72df381cb35bf6a67ddb6bf613cb52773b577a32db99d576fb5a8f63d52620019524ef82633f77280bd2c0ff8168e06e541630367a198ec5aac35fd1538c6d7704b9b4dffaebe471ce2bf7cf9aa44b949bd1b2c7f691b7e230e136e60d2020997a883b9a0e556c520635b2ae7a4d8b54df12f6521a3f68a710801158923ed4bbb1884dcae69f12e8f72cc4f2d09dba948386752139e9219cb0a73394af6c7453353cda47917d2791b4f20c44e653ef44323e100a66ec5664fb2ba9fea5a17dbdad8170560f676420de7480f0c15fb3a363464c0b2cb96ff4f7b42da1347aa95e1325f686de3478bd7e28a3cc18f048c98283beca7c336e83539d0f056db5a1190f7e454fff4dbfda688bd54a6bd80a605da41ca54b18f657672b5a5819f72b6deb6261032d39cf6704cdc9b3b10a0e38df8bf722ef46c632a0fbb6dd6bc61367c47b42e1993de59650a3dfcbb6f16928529afa5b7cfbdd413e3cf48f01934b6ae200146a0fa20837577f03a41d7bfbb0a4a7facb8a6737efe1bf5f1315d0b8d9081e3fbd8d529d31d199156174367b9e61e6cddf1c29ede8b4636a0c68c47df53569095c0685d5cfbc0bc9da7c412091c06a68c1d1ef92fad745ddfa4a7394d3999caead5689e3a0e2f0f11aa8ca2fee0982ab2c505e875f4f422b1580a87deb899440d5b35c9770d3b7b772683545c75a0bfa0ec114d3741faa63e65d79910a7dac944455a32c0195446acd023643a29b899368f8685a153c4914504d4c97789942efbb493bfccaec524cb0bc40d2c657cfff3c6b6175c0ff6649797674be33ab803ef1a722c265a4ec230f9b762a07f1df6653183f86281903980ba326f1db078ab6adb773a25b1ca932075a540b86c15c32ef04e4190492e6e2d8cb3d7c90d4942a5e0b018f42c1a2bfe07bf63f0def3955b9d71b1848f4316a68ede2ad7f5816c6c7cb019abb14ab3205b1b35818c7e831ffeebe6805b1f3f2d7fb9cda9b19fc0477173e41992f8af45748d6c774e68fefc8edbf31f320f34983587d85e176574d91cb63467f8b1434fbb33b3d0172feb57abfd5f94818064b66dedd897b0334538c8be8a588662cee4a3a4cbdc4498eb6fb30ab08282c3f430f6e80f4f1230be0a2cf5d883989bc39d5b000f0fbbfe64e1c74b82ff47f19f3802b669ee5eb4e55dd71e31ef4e8a2336169be3d41b6694abb2516a61502b3f290c53d8f3986372f65a1d71aeeb4ef4e03e4ae864e7f243001c6aecb0a8676014bfe86c1f6e9235f6029d34b1dd15b9993e3da765c1cccb619a4d233303e78802ba68f5d0389311beef7bdb268ebd4fc205a570bff1a537242c3a942d8f7083b3499fc1e3a19dc5240a2f7f6bf85b4980f53f64c7f4214c88edf4e2d23598e9d0a2801afd092264d7c1b8af0038c3554bebad31be7c844376abab84bfae2f6219cc03031726a7b5bbc0094a5b653e2e1c8a8ff6e4ae56cf6257b1ee37dce432639becf205760f73b0d84134bea181e59ecda9e6efe74cf37310057bcd87bb5d2ba7e2dec798fffbc02790b2902ab378c5cb6702df9f1e65c16f245573e9e4c8991dbfbc8baed4bae9f5e51173b5a6c80f5c708df2ac3199f28cdfbec5638c83f9b4f7b2620916fdf793dc378b75cd327be8cd14c19c5e960cbc19e944b841bd51008a10d22dc5abd5e3c6737d71d61871ca1d1974ee3ef84332e7de5cb6b83df9f464c32128ad00129b665045f82290f9588a583df974bcb5625bcfb88a5678d634dd08621136c72d3906f91efc6196f1800670e9e09e7e0259833d3e534f79e42a0685373fe8e0b026b54735fa614fcd3501849f95b9b7b497a689a57a946b9dc65829a8846eae40d63bdb81207c29b6e0f864307e750c028ccb5076cde61a2b269607fe555c160039447d647ecafb185f5bb2e5e77457a7bd772544109f69e6b3940ec312e4572e8ff97cdbd6a8d97c4dd99bf1148a346de4b6779447b9e7cee75bcfa0336a4bc6e8555347612719eef9b3f76e506e08c54326db7f7d1505452252bb738671bc6d2aee0927dedb87d3fce45e2c48c2715e274e27d3a8a0ff14c59310b1d851254250a486c99bbb986c34dcd9bb237bbd2c7d7816f8bd684750e1c4a9c6d03f6abf42a71dacde43ffb703ec42ca2eeca8617a6c39fcf67464516a85e6b97cf25d6d7e24a9bbeb93017f999ab676dc771d1ceacae2d6b67e14995d06e5363d5addc1d4070281f0b42560dd3b101dc9c0e78c35c90e012a1a4cdc36fbe56d52d35ccdbb3bdb993a1331f5d86854847298d2c1abbe042b83e0d4c71b6272e99dad3017a0f7d29a824ebbf466aa88ad19d256aee06e2149c0191c65593fef0200884b1caf297519263d58a578de3ba6ed36ed6bdc5412daf2be42b1d1d88b805e5c2e205605c6f622f5dac0ac35325a81fc432b918061f31ca7749583a9700cf0f3ac774348b1ed8a60b04b955395ccf37253a2221f79ea462fa54d63e74ee2d2217340f8b5038cc5efe4202df6864625663c16d93bebc5fe8b94f03114be608fdac28c27fdd9bbc30ef63e6e73fad4e8654580454c716074298d05e45ccbef23dc89a8734b00daf957777d23a534eebafa00402d93cf8ce8799a6a3dd59d315490fe20833ed80a62b11bdce2b7e5d60bd0e5a650e86a3ed8a4075c0c5d9f947d6348f976f2f3fe8cd3ae19c8a00208935551d7be2a9d4d2eeddc824c80430d1bb8233cdabbff51c5f9c00d6dbd605d870c8ad7d80fa0330f30587f3b70cc9103033716b049b891a5fdd6a21d84ce7304b5f3db978b49d7959cdc8e64aaf8454ee91ac3150e6c489be623b27f2faa84973551912dbaecf997623fa7a754f3d9274f393bf77556db01501eaf015b459f40dae6b677c42480a1cb251682d96a1cc7d1d36704e263ca91765f81e49f40f7230128e9da4fc1826cc223cbc18f35c3360db7a624cc061d1c1c95c1e2ce07ef6ad0f907209a33ce4330a85931dd7c152e15a952e73b309dc0d8309e46809fcc1dfcf2788ccd2bce7ed7027652c97152d8593e53db0a9455c1ea2390e6b2d46c0b8a7033c459c9aa7ca16d0b10bde63f53712735eec0bc9e01544eb9bd6c9e1cde034458f5e8bd197c02c5f709432ac330d3da3603b398da56313630d78ff54f29d5c4e2c4b4653c728ab4e204807e5c1044dd94d37a15cc1651813338ed48122795880b2146582c51a85b7ce26e21ab1ce241f0baa2d40336e007a875e2fbe10004ab05800a5059995401e0879ceba3fb7efb4cbc3eca47767c9bd15bb523fc090b0d64e776d57062161be33b54ac41eacf787c328c2d4be31d1dc91f674c293589bfd9b59eb64c3cc169f9a921a0da10de21f1bc341709be2760c64fc813917b6a3c828ec2f12f2965d861b304e12f96d0891a666678fedd750570fa4d9e59c81de973905c6b187f5ee007eda2a1f8488532f37ed534b2f1e42e90b0559c912963b144d9ae4d95079bbe8c8f5aade2adcc23d787cde32fca87efa8beef193694168a3b2e6de2718e5d8d328e771462a272df4bd5c8a2f20020947d82068901b1721c8bcf70b744a9f2d3cdb38bea63ca4ac262b720982e1611b5b93a52cbb8b7a7ba2a006ae5d3439f6f432932740ee4371b5b5f389bf6476ff61f75460ff069ef4a92c7f6166fe4430af07c440a62d523ce127343bf616685c89b02d5e943874c50a6371f85b4be22c4b51e133073687eb5a74f1c79c7ac4b607b54fec0e1a4f79499c5d0b4b8c4d34de3afb9e4db734ec14164e29d92a578e7bd01040c1420cfca536a27e8e5b10130d6f03010d4677fc40e3fa66977251510d2d5e5920cd9418c538db29387e3aa3d606e2c6abab6d2b698700a3c1e7d3829f50d2f16bbefa034b094b39c6206dd0e32622031e19fc27a6535c2c3b45ba1ee73f562d31ffd12a693959f632fa37d2ba53b6845ec72d8a7fb5c7c0ec898f8bc912a5198b8671ea3b84b743a0420dc18bf0c6525fc9c81edbddda9353c1489c036c31e719dd4b929e01fc4751e810c520aafe3a2203537842e0cedc23cb1657643edc46622086d2eff58cb601119c202baf93470f625c94d1b491b22bca4b5cb3a9819f44088138445b1af76131bbe3bf80830a2bc50a04450c880282b3560b499a8d3a5edd670a3a8b84a62ffa8c16c2311bd45f6d3a93c0cef8773dc02ceca503e4c59565e174989ace5f2a6388f1ec9f476bfb2eafb433887a4cc41bf44708d3881bdd624e365356b6139558445a9ed09ee5ead9c78ba9b271da269d70c4e08800089fa0f79361ab190db33034bb9cc26976b2ba520062568da526503d21ddbfac7f96f40241d8199aa11165457753bebc84446848ae63b863e93f49c1084d79e25abba1316bd0c2bc01ac39991bc4ebde7811400a3f4ffb8c2b6853f1589d40128f5539241c3439ec4226c2f953339cfd828307cdadfe61ff0e97622df7b4d1dc4ed38addff34d762efe764c0408e47d0c18e887a37ed38e4da5cd8311dda13"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) close(0x3) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x1, 0xc0c0) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 1 (id=3975): r0 = socket(0x1d, 0x5, 0x100) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x1d) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x38, &(0x7f0000000240)=0x80000001, 0x4) (async) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000400)=""/18, &(0x7f0000000180)=0x12) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) getpid() (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): ompute Engine, BIOS Google 10/02/2025 [ 412.915793][T15441] Call Trace: [ 412.915800][T15441] [ 412.915809][T15441] dump_stack_lvl+0x189/0x250 [ 412.915840][T15441] ? __pfx____ratelimit+0x10/0x10 [ 412.915866][T15441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.915893][T15441] ? __pfx__printk+0x10/0x10 [ 412.915913][T15441] ? __might_fault+0xb0/0x130 [ 412.915953][T15441] should_fail_ex+0x414/0x560 [ 412.915988][T15441] _copy_to_iter+0x1de/0x1790 [ 412.916013][T15441] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 412.916039][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.916068][T15441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.916093][T15441] ? __pfx__copy_to_iter+0x10/0x10 [ 412.916112][T15441] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 412.916141][T15441] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 412.916170][T15441] __skb_datagram_iter+0xf8/0x990 [ 412.916195][T15441] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 412.916251][T15441] skb_copy_datagram_iter+0xc5/0x230 [ 412.916287][T15441] netlink_recvmsg+0x2ab/0xa30 [ 412.916317][T15441] ? __pfx_netlink_recvmsg+0x10/0x10 [ 412.916342][T15441] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.916373][T15441] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 412.916391][T15441] ? security_socket_recvmsg+0x7e/0x2e0 [ 412.916411][T15441] ? __pfx_netlink_recvmsg+0x10/0x10 [ 412.916430][T15441] sock_recvmsg+0x22c/0x270 [ 412.916460][T15441] sock_read_iter+0x231/0x2f0 [ 412.916487][T15441] ? __pfx_sock_read_iter+0x10/0x10 [ 412.916521][T15441] ? bpf_lsm_file_permission+0x9/0x20 [ 412.916542][T15441] ? security_file_permission+0x75/0x290 [ 412.916571][T15441] vfs_read+0x55a/0xa30 [ 412.916606][T15441] ? __pfx_vfs_read+0x10/0x10 [ 412.916640][T15441] ? __fget_files+0x2a/0x420 [ 412.916666][T15441] ksys_read+0x145/0x250 [ 412.916693][T15441] ? __pfx_ksys_read+0x10/0x10 [ 412.916722][T15441] ? do_syscall_64+0xbe/0xfa0 [ 412.916750][T15441] do_syscall_64+0xfa/0xfa0 [ 412.916773][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.916797][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.916815][T15441] ? clear_bhb_loop+0x60/0xb0 [ 412.916838][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.916857][T15441] RIP: 0033:0x7fa85bf8efc9 [ 412.916875][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.916892][T15441] RSP: 002b:00007fa85ce7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.916913][T15441] RAX: ffffffffffffffda RBX: 00007fa85c1e5fa0 RCX: 00007fa85bf8efc9 [ 412.916927][T15441] RDX: 00000000000000d1 RSI: 0000200000000340 RDI: 000000000000000c [ 412.916939][T15441] RBP: 00007fa85ce7f090 R08: 0000000000000000 R09: 0000000000000000 [ 412.916951][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.916962][T15441] R13: 00007fa85c1e6038 R14: 00007fa85c1e5fa0 R15: 00007ffc830b1828 [ 412.916993][T15441] [ 412.935835][T15204] veth0_macvtap: entered promiscuous mode [ 412.948914][ T5839] Bluetooth: hci5: command 0x040f tx timeout [ 413.021019][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 413.291819][T15204] veth1_macvtap: entered promiscuous mode [ 413.412852][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2742'. [ 413.422544][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 413.522844][T15447] syzkaller1: entered promiscuous mode [ 413.528367][T15447] syzkaller1: entered allmulticast mode [ 413.547133][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.597088][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.637798][T14475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.647540][T14475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.596892][T15475] __nla_validate_parse: 1 callbacks suppressed [ 414.596908][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2749'. [ 414.714579][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2750'. [ 415.082672][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 415.098494][T15484] x_tables: ip_tables: osf match: only valid for protocol 6 [ 415.108560][T15484] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 415.129938][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2751'. [ 415.218719][T14475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.228398][T14475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.255592][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 415.526430][T15497] bond2: option min_links: invalid value (18446744073709551612) [ 415.574492][T15497] bond2: option min_links: allowed values 0 - 2147483647 [ 415.624164][T15497] bond2 (unregistering): Released all slaves [ 415.655683][T15509] netlink: 'syz.5.2755': attribute type 49 has an invalid length. [ 415.760097][T14485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.771618][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 415.788284][T14485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.875803][T14485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.924416][T14485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.951107][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 416.081848][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 416.191758][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 416.311437][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 416.325159][T15540] netlink: 'syz.1.2762': attribute type 322 has an invalid length. [ 416.375136][T15545] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2763'. [ 416.414432][T15545] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 416.923496][T15550] erspan0 speed is unknown, defaulting to 1000 [ 417.167756][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 417.564154][T15566] erspan0 speed is unknown, defaulting to 1000 [ 417.604193][T15589] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2774'. [ 417.952069][T14428] net_ratelimit: 13 callbacks suppressed [ 417.952089][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.008792][T15600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2779'. [ 418.181526][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.295364][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.421536][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.531519][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.761420][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 418.973620][T15624] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 419.057309][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 419.200977][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 419.239387][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 419.325265][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 419.448547][T15639] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2790'. [ 419.458496][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 419.576850][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2791'. [ 419.762510][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2794'. [ 419.994970][T15654] netlink: 'syz.2.2795': attribute type 8 has an invalid length. [ 420.155563][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 420.174914][T15661] tap0: tun_chr_ioctl cmd 1074025673 [ 420.193885][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'. [ 420.221325][T15661] tap0: tun_chr_ioctl cmd 1074025673 [ 420.227526][T15663] tap0: tun_chr_ioctl cmd 1074025676 [ 420.233202][T15663] tap0: owner set to 0 [ 420.500087][T15646] netlink: 'syz.0.2792': attribute type 13 has an invalid length. [ 420.513667][T15646] netlink: 'syz.0.2792': attribute type 17 has an invalid length. [ 421.043364][T15690] nbd: must specify at least one socket [ 421.178753][T15643] erspan0 speed is unknown, defaulting to 1000 [ 421.328884][T15698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2806'. [ 421.383689][T15698] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 421.400067][T15699] bridge4: left promiscuous mode [ 421.796110][T15693] erspan0 speed is unknown, defaulting to 1000 [ 421.813714][T15713] netlink: 'syz.5.2811': attribute type 4 has an invalid length. [ 421.826074][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2811'. [ 421.836742][T15713] xt_l2tp: invalid flags combination: 8 [ 422.859872][T15742] netlink: 'syz.5.2818': attribute type 10 has an invalid length. [ 422.881500][T15742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2818'. [ 422.922379][T15742] dummy0: entered promiscuous mode [ 422.935907][T15742] bridge0: port 3(dummy0) entered blocking state [ 422.943978][T15742] bridge0: port 3(dummy0) entered disabled state [ 422.950685][T15742] dummy0: entered allmulticast mode [ 422.992037][T14433] net_ratelimit: 22 callbacks suppressed [ 422.992059][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 423.138529][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2819'. [ 423.258762][T15752] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 423.352486][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 423.461622][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 423.581900][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 423.703501][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 423.762421][T14470] erspan0: left promiscuous mode [ 423.830989][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 424.070219][T15778] syzkaller0: entered promiscuous mode [ 424.093618][T15778] syzkaller0: entered allmulticast mode [ 424.131020][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 424.201284][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.921637][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 426.042723][T15798] netlink: 'syz.5.2830': attribute type 2 has an invalid length. [ 426.051233][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 426.171744][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 426.439723][T15809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2834'. [ 426.510678][T15791] erspan0 speed is unknown, defaulting to 1000 [ 426.700016][T15811] netlink: 'syz.1.2829': attribute type 4 has an invalid length. [ 426.721890][T15811] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2829'. [ 427.338094][T15795] erspan0 speed is unknown, defaulting to 1000 [ 428.014629][T15822] erspan0 speed is unknown, defaulting to 1000 [ 428.061558][T14433] net_ratelimit: 14 callbacks suppressed [ 428.061589][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 428.153302][T15849] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 428.173043][T15849] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2848'. [ 428.182341][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 428.202433][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2848'. [ 428.363031][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 428.471056][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 428.510947][T15854] netlink: 'syz.5.2849': attribute type 8 has an invalid length. [ 428.558788][T15829] erspan0 speed is unknown, defaulting to 1000 [ 428.664012][T15858] ip6tnl3: entered promiscuous mode [ 428.670051][T15858] ip6tnl3: entered allmulticast mode [ 428.811112][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.131637][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.246907][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.304329][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2855'. [ 429.341564][T15878] bond2: entered promiscuous mode [ 429.347340][T15878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.361482][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.570383][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.701435][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 429.921086][T15901] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2860'. [ 430.152843][T15907] netlink: 'syz.5.2861': attribute type 1 has an invalid length. [ 431.115814][T15922] xt_recent: Unsupported userspace flags (000000b1) [ 431.711459][T15936] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2869'. [ 431.763458][T15936] netlink: 'syz.5.2869': attribute type 15 has an invalid length. [ 432.084785][T15947] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2872'. [ 432.094340][T15946] bridge5: entered promiscuous mode [ 432.099577][T15946] bridge5: entered allmulticast mode [ 432.105163][T15947] nbd: illegal input index 65508 [ 432.518996][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 432.935348][T15968] pim6reg1: entered promiscuous mode [ 432.946298][T15968] pim6reg1: entered allmulticast mode [ 432.994407][T15961] netlink: 'syz.5.2876': attribute type 1 has an invalid length. [ 433.011571][T15961] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2876'. [ 433.132534][T15966] netlink: 'syz.5.2876': attribute type 29 has an invalid length. [ 433.152965][T14470] net_ratelimit: 14 callbacks suppressed [ 433.152985][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.179463][T15961] netlink: 'syz.5.2876': attribute type 29 has an invalid length. [ 433.281565][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.442703][T15991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'. [ 433.470900][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.529304][T16005] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2883'. [ 433.582158][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.710958][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.831708][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 433.952057][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 434.061557][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 434.171268][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 434.283043][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 434.349904][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 434.832067][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 435.151987][T16042] syzkaller0: entered promiscuous mode [ 435.157707][T16042] syzkaller0: entered allmulticast mode [ 435.257212][T16055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2901'. [ 435.277288][T16056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2901'. [ 436.953997][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 437.255992][T16057] erspan0 speed is unknown, defaulting to 1000 [ 437.326106][ T9482] IPVS: starting estimator thread 0... [ 437.357548][T16110] tipc: Failed to remove unknown binding: 66,1,1/0:4002859603/4002859605 [ 437.384685][T16110] tipc: Failed to remove unknown binding: 66,1,1/0:4002859603/4002859605 [ 437.406421][T16110] tipc: Failed to remove unknown binding: 66,1,1/0:4002859603/4002859605 [ 437.440955][T16109] IPVS: using max 29 ests per chain, 69600 per kthread [ 437.711199][T16116] nbd3: detected capacity change from 0 to 127 [ 437.719805][ T5830] block nbd3: Receive control failed (result -32) [ 437.935675][T16123] syzkaller0: entered promiscuous mode [ 437.941838][T16123] syzkaller0: entered allmulticast mode [ 438.706122][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 439.712261][T16108] erspan0 speed is unknown, defaulting to 1000 [ 439.718696][T16131] macsec0: left allmulticast mode [ 439.731748][T16131] macsec0: left promiscuous mode [ 439.736949][T16131] bridge0: port 3(macsec0) entered disabled state [ 439.757034][T16131] bridge_slave_1: left allmulticast mode [ 439.766686][T16131] bridge_slave_1: left promiscuous mode [ 439.772682][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.793560][T16131] bridge_slave_0: left allmulticast mode [ 439.799252][T16131] bridge_slave_0: left promiscuous mode [ 439.806616][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.864394][T16135] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2920'. [ 439.952969][T16135] batadv1: entered promiscuous mode [ 439.962355][T16135] batadv1: entered allmulticast mode [ 440.044166][T16139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'. [ 440.053353][T14485] net_ratelimit: 19 callbacks suppressed [ 440.053372][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.185075][T16110] erspan0 speed is unknown, defaulting to 1000 [ 440.201754][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.212038][T16141] xt_TCPMSS: Only works on TCP SYN packets [ 440.221606][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.310920][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.481559][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.601140][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.710951][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.820737][T16160] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2926'. [ 440.835099][T16160] sctp: [Deprecated]: syz.4.2926 (pid 16160) Use of int in max_burst socket option. [ 440.835099][T16160] Use struct sctp_assoc_value instead [ 440.853342][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.965903][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 440.973575][T16127] erspan0 speed is unknown, defaulting to 1000 [ 440.980526][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2926'. [ 441.055709][T16145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2923'. [ 441.431227][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 441.707971][T16175] erspan0: entered promiscuous mode [ 441.799059][T16144] erspan0 speed is unknown, defaulting to 1000 [ 441.974162][T16179] bridge5: entered promiscuous mode [ 441.982824][T16179] bridge5: entered allmulticast mode [ 442.901402][T16200] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2935'. [ 443.396291][T16209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2938'. [ 444.356273][T16217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.657721][T16217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.774879][T16217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.811406][T16227] tipc: Enabled bearer , priority 0 [ 444.824069][T16228] syzkaller0: entered promiscuous mode [ 444.829672][T16228] syzkaller0: entered allmulticast mode [ 444.940322][T16225] tipc: Resetting bearer [ 444.989049][T16225] tipc: Disabling bearer [ 445.182854][T16217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.576561][T14470] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.601713][T14470] net_ratelimit: 17 callbacks suppressed [ 445.601734][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 445.926746][T14470] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.993032][T14433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.079195][T14485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.102403][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.221463][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.287413][T16240] erspan0 speed is unknown, defaulting to 1000 [ 446.332693][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.474153][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.591211][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.666934][T16279] Bluetooth: MGMT ver 1.23 [ 446.710967][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.779625][T16288] pim6reg: entered allmulticast mode [ 446.820920][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 446.909494][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 446.930936][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 447.041485][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 447.151955][T16298] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2963'. [ 447.415897][T16311] tc_dump_action: action bad kind [ 448.111812][T16325] netlink: 'syz.5.2967': attribute type 8 has an invalid length. [ 448.152085][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 448.163657][T16329] netlink: 'syz.5.2967': attribute type 8 has an invalid length. [ 448.195876][T16333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 448.210690][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 448.447341][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 448.690992][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 448.698640][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 449.136184][T16371] tipc: Enabling of bearer rejected, already enabled [ 449.146809][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'. [ 449.183279][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 449.564419][T16386] unsupported nlmsg_type 40 [ 449.674311][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 449.763373][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.774369][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.783990][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.788520][T16391] veth1: entered promiscuous mode [ 449.794789][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.809347][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.844015][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 449.854469][T16391] veth1: left promiscuous mode [ 450.071784][T16399] bridge_slave_1: left allmulticast mode [ 450.077498][T16399] bridge_slave_1: left promiscuous mode [ 450.092351][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.121932][T16399] bridge_slave_0: left allmulticast mode [ 450.127624][T16399] bridge_slave_0: left promiscuous mode [ 450.141932][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.431964][T16408] tipc: Enabled bearer , priority 0 [ 450.454571][T16409] syzkaller0: entered promiscuous mode [ 450.460094][T16409] syzkaller0: entered allmulticast mode [ 450.492695][T16404] tipc: Resetting bearer [ 450.542462][T16403] tipc: Resetting bearer [ 450.597985][T16403] tipc: Disabling bearer [ 450.641477][T14428] net_ratelimit: 18 callbacks suppressed [ 450.641506][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 450.801139][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 450.874855][T16434] netlink: 'syz.2.2998': attribute type 13 has an invalid length. [ 450.883884][T16434] netlink: 'syz.2.2998': attribute type 17 has an invalid length. [ 451.085132][T16434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.102472][T16434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.133209][ T9299] erspan0 speed is unknown, defaulting to 1000 [ 451.133249][T16440] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3000'. [ 451.139482][ T9299] syz2: Port: 1 Link ACTIVE [ 451.169582][T16396] erspan0 speed is unknown, defaulting to 1000 [ 451.172372][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.192249][ T9501] erspan0 speed is unknown, defaulting to 1000 [ 451.301899][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.421867][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.542359][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.585477][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 451.670987][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.781008][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 451.882247][ T5830] Bluetooth: hci0: command tx timeout [ 451.904858][T16441] erspan0 speed is unknown, defaulting to 1000 [ 451.924035][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 452.043619][T16462] tipc: Started in network mode [ 452.049005][T16462] tipc: Node identity 120da4c1fc78, cluster identity 4711 [ 452.069409][T16462] tipc: Enabled bearer , priority 0 [ 452.086799][T16462] syzkaller0: entered promiscuous mode [ 452.093413][T16462] syzkaller0: entered allmulticast mode [ 452.170528][T16462] tipc: Resetting bearer [ 452.220488][T16461] tipc: Resetting bearer [ 452.264836][T16461] tipc: Disabling bearer [ 452.408468][T16478] netlink: 'syz.5.3012': attribute type 2 has an invalid length. [ 452.446632][T16480] batadv_slave_0: entered promiscuous mode [ 452.475881][T16480] batadv_slave_0: left promiscuous mode [ 452.756392][T16396] chnl_net:caif_netlink_parms(): no params data found [ 452.789430][T16498] netlink: 'syz.5.3015': attribute type 29 has an invalid length. [ 453.013946][T16510] netlink: 'syz.0.3022': attribute type 30 has an invalid length. [ 453.145607][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.261754][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.269071][T16396] bridge_slave_0: entered allmulticast mode [ 453.313696][T16396] bridge_slave_0: entered promiscuous mode [ 453.336724][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.344526][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.356340][T16396] bridge_slave_1: entered allmulticast mode [ 453.365570][T16396] bridge_slave_1: entered promiscuous mode [ 453.374210][T14467] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.398715][T16488] erspan0 speed is unknown, defaulting to 1000 [ 453.522497][T14467] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.536487][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.575557][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.673331][T14467] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.701146][T14467] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.793448][T16396] team0: Port device team_slave_0 added [ 453.815586][T16396] team0: Port device team_slave_1 added [ 453.963758][ T5830] Bluetooth: hci0: command tx timeout [ 453.986933][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.994307][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.043408][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.106700][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.116676][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.197698][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.341187][T16396] hsr_slave_0: entered promiscuous mode [ 454.348932][T16396] hsr_slave_1: entered promiscuous mode [ 454.367741][T16396] debugfs: 'hsr0' already exists in 'hsr' [ 454.385490][T16396] Cannot create hsr debugfs directory [ 454.873509][T16549] __nla_validate_parse: 37 callbacks suppressed [ 454.873529][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 454.934711][T16546] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.3031'. [ 455.038892][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 455.347269][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 455.357622][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 455.791530][T14467] net_ratelimit: 7 callbacks suppressed [ 455.791550][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 455.950882][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.041706][ T5830] Bluetooth: hci0: command tx timeout [ 456.149523][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 456.247282][T16598] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 456.262402][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.270862][T16396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.498758][T16599] bond11: (slave vxcan7): The slave device specified does not support setting the MAC address [ 456.512456][T16599] bond11: (slave vxcan7): Error -95 calling set_mac_address [ 456.540628][T16396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.591537][T16396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.618613][T16604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.625399][T16604] syzkaller1: Refused to change device type [ 456.631992][T16396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.646778][T16585] erspan0 speed is unknown, defaulting to 1000 [ 456.802327][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 456.851971][T16617] Cannot find add_set index 2 as target [ 456.863983][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.935154][T16396] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.963571][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 456.999882][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.007129][T14485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.057966][T14433] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.065288][T14433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.122859][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.241251][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.361367][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.471998][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.604781][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.622556][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.740914][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 457.829593][T16631] erspan0 speed is unknown, defaulting to 1000 [ 457.957831][T16639] Bluetooth: MGMT ver 1.23 [ 458.074173][T16396] veth0_vlan: entered promiscuous mode [ 458.104276][T16396] veth1_vlan: entered promiscuous mode [ 458.125024][ T5830] Bluetooth: hci0: command tx timeout [ 458.194580][T16396] veth0_macvtap: entered promiscuous mode [ 458.233482][T16396] veth1_macvtap: entered promiscuous mode [ 458.266741][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.330396][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.403164][T14475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.413111][T14475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.426294][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 458.452484][T14475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.490948][T14475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.512374][T16652] netlink: 'syz.0.3054': attribute type 8 has an invalid length. [ 458.742747][T16653] syzkaller1: entered allmulticast mode [ 458.805955][T14475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.833668][T14475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.027904][T14432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.046552][T14432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.332476][T16700] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 460.397028][T16700] bond1 (unregistering): Released all slaves [ 460.558670][T16703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.591795][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 460.621955][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 460.656467][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.675518][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.688375][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.780058][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 460.899310][T16713] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 460.949933][T16713] bond12 (unregistering): Released all slaves [ 461.009345][T16723] sctp: [Deprecated]: syz.5.3072 (pid 16723) Use of int in max_burst socket option. [ 461.009345][T16723] Use struct sctp_assoc_value instead [ 461.025126][T14467] net_ratelimit: 17 callbacks suppressed [ 461.025144][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.142084][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.187782][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 461.258365][T14432] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.287726][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.298261][T16729] netlink: 'syz.5.3074': attribute type 7 has an invalid length. [ 461.342747][T14485] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.380181][T14485] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.397511][T14485] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.461117][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.497937][T16709] erspan0 speed is unknown, defaulting to 1000 [ 461.574939][T16739] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3078'. [ 461.611056][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.738685][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.752651][T16746] vxcan1: entered promiscuous mode [ 461.809668][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 461.851729][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 461.982535][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 462.051800][T16753] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3082'. [ 462.095124][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 462.119401][T14428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.131742][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 462.152344][T14428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.171811][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 462.214685][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 462.255086][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 462.341594][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 462.762250][ T5830] Bluetooth: hci3: command tx timeout [ 462.923475][T16776] erspan0 speed is unknown, defaulting to 1000 [ 463.080169][T16709] chnl_net:caif_netlink_parms(): no params data found [ 464.841777][ T5830] Bluetooth: hci3: command tx timeout [ 465.546271][T16782] smc: removing ib device syz2 [ 466.136569][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.161914][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.176731][T16709] bridge_slave_0: entered allmulticast mode [ 466.209573][T16709] bridge_slave_0: entered promiscuous mode [ 466.242529][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.249755][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.263095][T16709] bridge_slave_1: entered allmulticast mode [ 466.284969][T16709] bridge_slave_1: entered promiscuous mode [ 466.563791][T16709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.653911][T16709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.911286][T14470] net_ratelimit: 5 callbacks suppressed [ 466.911308][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 466.926069][ T5830] Bluetooth: hci3: command tx timeout [ 467.012149][T16709] team0: Port device team_slave_0 added [ 467.020707][T16709] team0: Port device team_slave_1 added [ 467.036241][T16806] xt_CONNSECMARK: invalid mode: 0 [ 467.044921][T16806] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3094'. [ 467.232602][T16807] tipc: Enabling of bearer rejected, failed to enable media [ 467.307806][T16709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.315320][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.368030][T16709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.402330][T16709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.409894][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.442163][T16709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.469298][T16810] netlink: 'syz.0.3095': attribute type 10 has an invalid length. [ 467.480277][T16810] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3095'. [ 467.535926][T16812] netlink: 'syz.5.3096': attribute type 11 has an invalid length. [ 467.550331][T16812] netlink: 'syz.5.3096': attribute type 11 has an invalid length. [ 467.558570][T16812] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3096'. [ 467.641745][T16709] hsr_slave_0: entered promiscuous mode [ 467.648987][T16709] hsr_slave_1: entered promiscuous mode [ 467.656711][T16709] debugfs: 'hsr0' already exists in 'hsr' [ 467.663350][T16709] Cannot create hsr debugfs directory [ 467.992630][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.106853][T14470] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 468.260936][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.371540][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.491516][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.515902][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3101'. [ 468.538189][T16709] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.582798][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3102'. [ 468.608758][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.647857][T16835] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3101'. [ 468.662608][T16709] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.709657][T16830] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3101'. [ 468.784743][T16837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.812028][T16709] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.836744][T16840] netlink: 'syz.5.3105': attribute type 13 has an invalid length. [ 468.845545][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 468.852029][T16840] netlink: 'syz.5.3105': attribute type 17 has an invalid length. [ 468.926779][T16840] bridge0: port 3(dummy0) entered blocking state [ 468.933281][T16840] bridge0: port 3(dummy0) entered forwarding state [ 468.946570][T16840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.963965][T16840] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.975818][T16840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.002453][ T5830] Bluetooth: hci3: command tx timeout [ 469.016284][T16837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.039521][T16709] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.076775][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 469.109417][T16837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.269708][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3107'. [ 469.283096][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 469.334288][T16837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.544193][T16850] tipc: Enabled bearer , priority 0 [ 469.586380][T16850] syzkaller0: entered promiscuous mode [ 469.593018][T16850] syzkaller0: entered allmulticast mode [ 469.614936][T14475] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.622528][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 469.632272][T16852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3109'. [ 469.680234][T14470] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.717614][T16850] tipc: Resetting bearer [ 469.751580][T16709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.815824][T14475] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.837612][T14475] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.847468][T16849] tipc: Resetting bearer [ 469.876095][T16849] tipc: Disabling bearer [ 469.891431][T16709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.904863][T16709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.958031][T16709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.192394][T16874] hsr0: entered promiscuous mode [ 470.241541][T16874] hsr_slave_0: left promiscuous mode [ 470.262839][T16874] hsr_slave_1: left promiscuous mode [ 470.376335][T16874] hsr0 (unregistering): left promiscuous mode [ 470.647561][T16709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.693861][T16709] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.707301][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.714543][T14467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.738326][T14470] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.745604][T14470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.007775][T16709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.060600][T16709] veth0_vlan: entered promiscuous mode [ 471.079090][T16709] veth1_vlan: entered promiscuous mode [ 471.118353][T16709] veth0_macvtap: entered promiscuous mode [ 471.129018][T16709] veth1_macvtap: entered promiscuous mode [ 471.154648][T16709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.174282][T16709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.189958][T14470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.208618][T14470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.218238][T14470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.229214][T14470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.316735][T14432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.326631][T14432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.363377][T14470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.372810][T14470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.695877][T16907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.723622][T16907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.734572][T16907] batman_adv: batadv0: Removing interface: macsec1 [ 472.022417][T14467] net_ratelimit: 11 callbacks suppressed [ 472.022438][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.084039][T16922] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 472.098940][T16924] __nla_validate_parse: 7 callbacks suppressed [ 472.098957][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 472.127479][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 472.146087][T16924] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 472.162464][T14475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.178399][T14475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.188716][T14475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.198700][T14475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.272806][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.281762][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.414265][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.482954][T16931] netlink: 'syz.0.3129': attribute type 12 has an invalid length. [ 472.532534][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.641894][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.771912][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.892170][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 472.901106][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 472.929872][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3133'. [ 472.973485][T16939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 473.021657][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 473.132626][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 473.242922][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 473.370416][T16963] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3140'. [ 473.391961][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3140'. [ 474.198095][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 474.217624][T16989] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3147'. [ 474.534272][T16992] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 474.956391][T16996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3151'. [ 475.328237][T17010] bond3: entered promiscuous mode [ 475.334902][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.335739][T17013] nbd: must specify a size in bytes for the device [ 475.345469][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.357603][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.364871][T17010] bond3: entered allmulticast mode [ 475.365268][T17010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.372538][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.385479][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.856838][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.889204][T17032] team0: Port device bond0 added [ 475.962246][T17039] netlink: 'syz.4.3161': attribute type 6 has an invalid length. [ 475.981690][T17039] netlink: 'syz.4.3161': attribute type 6 has an invalid length. [ 476.504815][T17014] chnl_net:caif_netlink_parms(): no params data found [ 476.749196][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.764357][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.781590][T17014] bridge_slave_0: entered allmulticast mode [ 476.792779][T17014] bridge_slave_0: entered promiscuous mode [ 476.812207][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.830119][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.847712][T17014] bridge_slave_1: entered allmulticast mode [ 476.872843][T17014] bridge_slave_1: entered promiscuous mode [ 476.984142][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.010288][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.042500][T14432] net_ratelimit: 23 callbacks suppressed [ 477.042518][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 477.160725][T17014] team0: Port device team_slave_0 added [ 477.170297][T17014] team0: Port device team_slave_1 added [ 477.239377][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.246727][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.289480][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.307068][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.314446][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.343234][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.402250][ T5830] Bluetooth: hci2: command tx timeout [ 477.448160][T17014] hsr_slave_0: entered promiscuous mode [ 477.462242][T17014] hsr_slave_1: entered promiscuous mode [ 477.527172][T17014] debugfs: 'hsr0' already exists in 'hsr' [ 477.540820][T17014] Cannot create hsr debugfs directory [ 477.584263][T17098] __nla_validate_parse: 2 callbacks suppressed [ 477.584281][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 477.651249][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 477.866556][T17014] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.001067][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 478.022617][T17014] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.098925][T17014] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.150963][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 478.194986][T17014] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.239183][T17111] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 478.261632][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 478.565062][T17014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.620357][T17014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.055744][T17014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.078925][T17014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.132303][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 479.139885][ T24] IPVS: starting estimator thread 0... [ 479.157077][T17143] block nbd4: server does not support multiple connections per device. [ 479.176686][T17143] block nbd4: shutting down sockets [ 479.199455][T17150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3194'. [ 479.242234][T17148] IPVS: using max 27 ests per chain, 64800 per kthread [ 479.260960][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 479.481515][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 479.488888][ T5830] Bluetooth: hci2: command tx timeout [ 479.517339][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'. [ 479.524511][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.552730][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.574579][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.581790][T14467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.622894][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.630092][T14485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.639146][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'. [ 479.692232][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 479.811545][T14467] bond2: (slave macvlan2): failed to get link speed/duplex [ 480.117142][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3199'. [ 480.386072][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.520930][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.565087][ T5830] Bluetooth: hci2: command tx timeout [ 482.324435][T17014] veth0_vlan: entered promiscuous mode [ 482.483306][T14475] net_ratelimit: 5 callbacks suppressed [ 482.483325][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 482.508665][T17014] veth1_vlan: entered promiscuous mode [ 482.524919][T17224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3212'. [ 482.622082][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 482.644545][T17014] veth0_macvtap: entered promiscuous mode [ 482.766162][T17238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3217'. [ 482.802257][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 482.849579][T17014] veth1_macvtap: entered promiscuous mode [ 482.928216][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.976155][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 483.241426][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.283496][T14475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.294068][T14475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.339445][T14475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.368635][T14475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.392779][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 483.551648][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 483.633795][T14485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.642885][ T5830] Bluetooth: hci2: command tx timeout [ 483.660993][T14485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.669798][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 483.814835][T17256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 483.835135][T17261] netlink: 'syz.2.3223': attribute type 7 has an invalid length. [ 483.862014][T17261] netlink: 'syz.2.3223': attribute type 39 has an invalid length. [ 483.877873][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 483.888212][T14432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.898813][T14432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.022821][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 484.158535][T17258] syzkaller1: entered allmulticast mode [ 484.201756][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 484.316665][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 484.338235][T17266] syzkaller0: entered promiscuous mode [ 484.344220][T17266] syzkaller0: entered allmulticast mode [ 484.375377][T17273] tipc: Invalid UDP bearer configuration [ 484.375435][T17273] tipc: Enabling of bearer rejected, failed to enable media [ 484.634162][T17279] sctp: [Deprecated]: syz.2.3227 (pid 17279) Use of int in maxseg socket option. [ 484.634162][T17279] Use struct sctp_assoc_value instead [ 486.618881][T17307] vlan2: entered promiscuous mode [ 486.636764][T17307] geneve1: entered promiscuous mode [ 486.692025][T17307] vlan2: entered allmulticast mode [ 486.697202][T17307] geneve1: entered allmulticast mode [ 486.802281][T17314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3235'. [ 487.563412][T14470] net_ratelimit: 10 callbacks suppressed [ 487.563432][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 487.802337][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 488.033680][T17349] netlink: 'syz.5.3241': attribute type 13 has an invalid length. [ 488.054827][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 488.068655][T17349] netlink: 'syz.5.3241': attribute type 17 has an invalid length. [ 488.131175][T17349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.160419][T17353] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3242'. [ 488.174623][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 488.371232][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 488.498879][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 488.796885][T17369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3245'. [ 488.816007][T17369] nbd: must specify at least one socket [ 489.068807][T17363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.086124][T17363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.099685][T17363] bond0 (unregistering): Released all slaves [ 489.163977][T17378] tipc: Started in network mode [ 489.172888][T17378] tipc: Node identity 32ae6ef0d74a, cluster identity 4711 [ 489.190520][T17378] tipc: Enabled bearer , priority 0 [ 489.371579][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 489.616645][T17365] tipc: Disabling bearer [ 489.701233][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 489.851595][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 490.944057][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3258'. [ 491.401214][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.439440][T17462] x_tables: duplicate underflow at hook 1 [ 491.797248][T17492] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 492.089101][T17507] batadv1: entered promiscuous mode [ 492.104476][T17507] batadv1: entered allmulticast mode [ 492.152327][T17510] netlink: 'syz.5.3281': attribute type 5 has an invalid length. [ 492.338710][T17519] xt_TCPMSS: Only works on TCP SYN packets [ 492.582620][T14433] net_ratelimit: 21 callbacks suppressed [ 492.582643][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 492.751079][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 492.758553][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 492.826244][T17540] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 492.838480][T17540] bond4 (unregistering): Released all slaves [ 492.854559][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3292'. [ 492.863757][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3292'. [ 493.017583][T17549] tipc: Started in network mode [ 493.023371][T17549] tipc: Node identity 6ae4dc11fd9c, cluster identity 4711 [ 493.030674][T17549] tipc: Enabled bearer , priority 0 [ 493.052694][T17548] tipc: Disabling bearer [ 493.162638][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 493.271050][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 493.307225][T17563] netlink: 'syz.1.3299': attribute type 13 has an invalid length. [ 493.331620][T17563] netlink: 'syz.1.3299': attribute type 17 has an invalid length. [ 493.549863][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.605169][T17563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.691033][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 493.753874][T17563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.824938][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 493.940894][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 493.950626][T17572] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3302'. [ 493.976377][T17572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3302'. [ 494.072699][T14475] bond2: (slave macvlan2): failed to get link speed/duplex [ 494.191993][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 494.954957][T17591] netlink: 'syz.5.3307': attribute type 29 has an invalid length. [ 495.081049][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 495.485039][T17611] netlink: 'syz.5.3312': attribute type 41 has an invalid length. [ 496.168725][T17628] netlink: 'syz.0.3316': attribute type 21 has an invalid length. [ 496.197238][T17628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3316'. [ 497.161008][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 497.319543][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'. [ 497.362710][T17637] netlink: 'syz.0.3320': attribute type 21 has an invalid length. [ 497.370665][T17637] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 497.387967][T17637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3320'. [ 497.499868][T17640] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 497.520242][T17640] netlink: 'syz.2.3321': attribute type 2 has an invalid length. [ 497.535129][T17640] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 497.551379][T17640] netlink: 'syz.2.3321': attribute type 2 has an invalid length. [ 497.594450][T17640] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 497.645576][T17644] bridge1: entered promiscuous mode [ 497.652305][T17644] bridge1: entered allmulticast mode [ 497.664009][T17644] team0: Port device bridge1 added [ 497.691134][T14479] net_ratelimit: 16 callbacks suppressed [ 497.691154][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 497.819707][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 497.951492][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.063754][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.082730][T17669] Bluetooth: MGMT ver 1.23 [ 498.181560][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.185317][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3333'. [ 498.291863][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.300504][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 498.329918][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3335'. [ 498.443810][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.465029][T17688] sctp: [Deprecated]: syz.5.3337 (pid 17688) Use of int in max_burst socket option deprecated. [ 498.465029][T17688] Use struct sctp_assoc_value instead [ 498.547969][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3339'. [ 498.592495][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.712289][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 498.794964][T17712] sctp: [Deprecated]: syz.0.3343 (pid 17712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.794964][T17712] Use struct sctp_sack_info instead [ 498.831518][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 499.008404][T17724] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 499.322380][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3350'. [ 499.379638][T17737] sctp: [Deprecated]: syz.1.3348 (pid 17737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.379638][T17737] Use struct sctp_sack_info instead [ 499.418719][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3352'. [ 499.815228][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 499.874816][T17758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3357'. [ 499.897881][T17751] team0: Port device team_slave_1 removed [ 500.442793][T17787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3369'. [ 500.715025][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 500.858966][T17803] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3375'. [ 501.049722][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3380'. [ 501.658186][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3381'. [ 501.729429][T17820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.744130][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 501.753894][T17820] netlink: 'syz.4.3381': attribute type 12 has an invalid length. [ 501.809094][ T9482] IPVS: starting estimator thread 0... [ 501.921418][T17824] IPVS: using max 27 ests per chain, 64800 per kthread [ 502.007544][T17828] bridge_slave_0: left allmulticast mode [ 502.014153][T17828] bridge_slave_0: left promiscuous mode [ 502.019946][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.043811][T17828] bridge_slave_1: left allmulticast mode [ 502.050957][T17828] bridge_slave_1: left promiscuous mode [ 502.066916][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.152902][T17828] team0: Port device team_slave_0 removed [ 502.166698][T17828] team0: Port device team_slave_1 removed [ 502.173825][T17828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.190824][T17828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.199877][T17828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.218251][T17828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.791046][T14479] net_ratelimit: 36 callbacks suppressed [ 502.791070][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 502.924071][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.041612][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.163883][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.315028][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.452554][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.562895][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.683089][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.721647][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 503.791762][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 503.943451][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 504.427282][T17899] __nla_validate_parse: 6 callbacks suppressed [ 504.427302][T17899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3405'. [ 504.523978][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3407'. [ 504.552379][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3407'. [ 504.694347][T17910] netlink: 'syz.1.3407': attribute type 3 has an invalid length. [ 504.715295][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 505.013514][T17923] syzkaller1: entered promiscuous mode [ 505.019294][T17923] syzkaller1: entered allmulticast mode [ 505.081339][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 505.130456][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 505.500023][T17940] dvmrp0: entered allmulticast mode [ 505.535029][T17944] netlink: 'syz.2.3418': attribute type 13 has an invalid length. [ 505.546730][T17944] netlink: 'syz.2.3418': attribute type 17 has an invalid length. [ 505.679839][T17952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3415'. [ 505.701500][T17952] nbd: must specify at least one socket [ 505.784168][T17957] netlink: 'syz.0.3419': attribute type 9 has an invalid length. [ 506.659493][T17968] tipc: Enabling of bearer rejected, failed to enable media [ 507.204745][T17965] delete_channel: no stack [ 507.479332][T17990] bond1: option ad_user_port_key: invalid value (65535) [ 507.491002][T17990] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 507.526668][T17990] bond1 (unregistering): Released all slaves [ 507.649256][T17993] syzkaller0: entered promiscuous mode [ 507.655655][T17993] syzkaller0: entered allmulticast mode [ 507.745639][T17997] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3429'. [ 508.262463][ T9299] IPVS: starting estimator thread 0... [ 508.275987][T18009] net_ratelimit: 22 callbacks suppressed [ 508.276019][T18009] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.355770][T18014] IPVS: using max 28 ests per chain, 67200 per kthread [ 509.421230][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 509.590959][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 509.658581][T18028] tipc: Can't bind to reserved service type 1 [ 509.684155][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3437'. [ 510.742068][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 510.803757][T18047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.806184][T18049] openvswitch: netlink: Missing key (keys=40, expected=80) [ 510.861511][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 510.973664][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.005055][T18066] netlink: 'syz.5.3447': attribute type 2 has an invalid length. [ 511.035019][T18066] netlink: 'syz.5.3447': attribute type 8 has an invalid length. [ 511.043447][T18066] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3447'. [ 511.091085][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.267873][T18072] vlan3: entered promiscuous mode [ 511.287363][T18072] geneve1: entered promiscuous mode [ 511.299893][T18072] vlan3: entered allmulticast mode [ 511.312208][T18072] geneve1: entered allmulticast mode [ 511.321334][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.562231][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 511.660651][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 511.672274][T18083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.837599][T18083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.953212][T18083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.018999][T18083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.153295][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3457'. [ 512.224121][T14428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.286452][T14428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.302301][T14428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.339387][T14428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.842225][ T5830] Bluetooth: hci0: command tx timeout [ 513.067667][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3470'. [ 513.076795][T18138] syzkaller1: entered promiscuous mode [ 513.076816][T18138] syzkaller1: entered allmulticast mode [ 513.110013][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3470'. [ 513.138858][T18139] netlink: 'syz.5.3470': attribute type 49 has an invalid length. [ 513.311755][T14428] net_ratelimit: 12 callbacks suppressed [ 513.311776][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 513.436486][T18153] netlink: 'syz.1.3474': attribute type 10 has an invalid length. [ 513.502051][T18153] team0: Port device dummy0 added [ 513.611644][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 513.722100][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 513.836106][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 513.844070][T18161] netlink: 'syz.1.3474': attribute type 10 has an invalid length. [ 514.183928][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.312905][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.424338][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.571693][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.691147][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.809967][T18188] tipc: Enabled bearer , priority 0 [ 514.820151][T18189] syzkaller0: entered promiscuous mode [ 514.827431][T18189] syzkaller0: entered allmulticast mode [ 514.843222][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 514.884734][T18189] tipc: Resetting bearer [ 514.933823][T18189] tipc: Disabling bearer [ 515.238760][T18197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3485'. [ 515.517114][T18204] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3488'. [ 516.054901][T18226] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3494'. [ 516.619581][T18240] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 516.650161][T18240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3499'. [ 516.774475][T18247] FAULT_INJECTION: forcing a failure. [ 516.774475][T18247] name failslab, interval 1, probability 0, space 0, times 0 [ 516.816675][T18247] CPU: 1 UID: 0 PID: 18247 Comm: syz.4.3503 Not tainted syzkaller #0 PREEMPT(full) [ 516.816722][T18247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.816739][T18247] Call Trace: [ 516.816747][T18247] [ 516.816757][T18247] dump_stack_lvl+0x189/0x250 [ 516.816790][T18247] ? __pfx____ratelimit+0x10/0x10 [ 516.816816][T18247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.816844][T18247] ? __pfx__printk+0x10/0x10 [ 516.816870][T18247] ? __pfx___might_resched+0x10/0x10 [ 516.816891][T18247] ? fs_reclaim_acquire+0x7d/0x100 [ 516.816926][T18247] should_fail_ex+0x414/0x560 [ 516.816962][T18247] should_failslab+0xa8/0x100 [ 516.816984][T18247] kmem_cache_alloc_node_noprof+0x77/0x710 [ 516.817012][T18247] ? __alloc_skb+0x112/0x2d0 [ 516.817048][T18247] __alloc_skb+0x112/0x2d0 [ 516.817089][T18247] __ip_append_data+0x2dae/0x40c0 [ 516.817123][T18247] ? rt_is_expired+0x1c/0x2d0 [ 516.817159][T18247] ? __pfx_raw_getfrag+0x10/0x10 [ 516.817205][T18247] ? ipv4_mtu+0x23/0x650 [ 516.817248][T18247] ? __pfx___ip_append_data+0x10/0x10 [ 516.817277][T18247] ? ipv4_mtu+0x53b/0x650 [ 516.817300][T18247] ? ipv4_mtu+0x23/0x650 [ 516.817325][T18247] ? __pfx_ipv4_mtu+0x10/0x10 [ 516.817350][T18247] ? ip_setup_cork+0x577/0x9a0 [ 516.817375][T18247] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.817407][T18247] ip_append_data+0x10e/0x190 [ 516.817440][T18247] ? __pfx_raw_getfrag+0x10/0x10 [ 516.817472][T18247] raw_sendmsg+0x13d8/0x18b0 [ 516.817521][T18247] ? __pfx_raw_sendmsg+0x10/0x10 [ 516.817557][T18247] ? do_wp_page+0x161d/0x5800 [ 516.817596][T18247] ? aa_sk_perm+0x81e/0x950 [ 516.817630][T18247] ? __pfx_aa_sk_perm+0x10/0x10 [ 516.817656][T18247] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 516.817691][T18247] ? sock_rps_record_flow+0x19/0x410 [ 516.817725][T18247] ? inet_sendmsg+0x2f4/0x370 [ 516.817742][T18247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.817766][T18247] __sock_sendmsg+0x19c/0x270 [ 516.817797][T18247] ____sys_sendmsg+0x52d/0x830 [ 516.817826][T18247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.817858][T18247] ? import_iovec+0x74/0xa0 [ 516.817887][T18247] ___sys_sendmsg+0x21f/0x2a0 [ 516.817913][T18247] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.817978][T18247] ? __might_fault+0xb0/0x130 [ 516.818017][T18247] __sys_sendmmsg+0x227/0x430 [ 516.818046][T18247] ? __pfx___sys_sendmmsg+0x10/0x10 [ 516.818087][T18247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.818137][T18247] ? ksys_write+0x22a/0x250 [ 516.818170][T18247] ? __pfx_ksys_write+0x10/0x10 [ 516.818206][T18247] __x64_sys_sendmmsg+0xa0/0xc0 [ 516.818231][T18247] do_syscall_64+0xfa/0xfa0 [ 516.818257][T18247] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.818284][T18247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.818305][T18247] ? clear_bhb_loop+0x60/0xb0 [ 516.818331][T18247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.818356][T18247] RIP: 0033:0x7f898338efc9 [ 516.818376][T18247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.818394][T18247] RSP: 002b:00007f89842c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 516.818417][T18247] RAX: ffffffffffffffda RBX: 00007f89835e5fa0 RCX: 00007f898338efc9 [ 516.818432][T18247] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 516.818445][T18247] RBP: 00007f89842c4090 R08: 0000000000000000 R09: 0000000000000000 [ 516.818458][T18247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.818470][T18247] R13: 00007f89835e6038 R14: 00007f89835e5fa0 R15: 00007ffc9648c7e8 [ 516.818505][T18247] [ 517.494096][T18257] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3505'. [ 518.238504][T18279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3513'. [ 518.598710][T18285] netlink: 'syz.0.3515': attribute type 2 has an invalid length. [ 518.632197][T18285] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3515'. [ 519.888716][T18286] wg2: entered promiscuous mode [ 519.894268][T18286] wg2: entered allmulticast mode [ 519.992677][T18296] syzkaller0: entered promiscuous mode [ 519.998289][T18296] syzkaller0: entered allmulticast mode [ 520.088863][T18301] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3520'. [ 520.259225][T18310] sctp: [Deprecated]: syz.4.3523 (pid 18310) Use of int in max_burst socket option. [ 520.259225][T18310] Use struct sctp_assoc_value instead [ 520.488141][T18322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 520.546378][T18324] FAULT_INJECTION: forcing a failure. [ 520.546378][T18324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.564147][T18324] CPU: 1 UID: 0 PID: 18324 Comm: syz.1.3527 Not tainted syzkaller #0 PREEMPT(full) [ 520.564173][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 520.564202][T18324] Call Trace: [ 520.564210][T18324] [ 520.564218][T18324] dump_stack_lvl+0x189/0x250 [ 520.564250][T18324] ? __pfx____ratelimit+0x10/0x10 [ 520.564276][T18324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.564302][T18324] ? __pfx__printk+0x10/0x10 [ 520.564322][T18324] ? __might_fault+0xb0/0x130 [ 520.564361][T18324] should_fail_ex+0x414/0x560 [ 520.564395][T18324] _copy_from_user+0x2d/0xb0 [ 520.564420][T18324] ___sys_sendmsg+0x158/0x2a0 [ 520.564443][T18324] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.564504][T18324] ? __might_fault+0xb0/0x130 [ 520.564536][T18324] __sys_sendmmsg+0x227/0x430 [ 520.564562][T18324] ? __pfx___sys_sendmmsg+0x10/0x10 [ 520.564594][T18324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 520.564640][T18324] ? ksys_write+0x22a/0x250 [ 520.564670][T18324] ? __pfx_ksys_write+0x10/0x10 [ 520.564703][T18324] __x64_sys_sendmmsg+0xa0/0xc0 [ 520.564733][T18324] do_syscall_64+0xfa/0xfa0 [ 520.564757][T18324] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.564783][T18324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.564801][T18324] ? clear_bhb_loop+0x60/0xb0 [ 520.564825][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.564844][T18324] RIP: 0033:0x7f2da0b8efc9 [ 520.564862][T18324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.564879][T18324] RSP: 002b:00007f2da1959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 520.564900][T18324] RAX: ffffffffffffffda RBX: 00007f2da0de5fa0 RCX: 00007f2da0b8efc9 [ 520.564915][T18324] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 520.564927][T18324] RBP: 00007f2da1959090 R08: 0000000000000000 R09: 0000000000000000 [ 520.564939][T18324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.564951][T18324] R13: 00007f2da0de6038 R14: 00007f2da0de5fa0 R15: 00007ffffba1c9f8 [ 520.564982][T18324] [ 520.853479][T18333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3530'. [ 521.035386][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 521.047602][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3533'. [ 522.261010][T14485] net_ratelimit: 23 callbacks suppressed [ 522.261031][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.381513][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.502159][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.530154][T18367] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 522.550507][T18361] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 522.611546][T14470] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.730893][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.754527][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 522.841603][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 522.963740][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 523.151444][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 523.311574][T18392] syzkaller0: entered promiscuous mode [ 523.317104][T18392] syzkaller0: entered allmulticast mode [ 523.342802][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3548'. [ 523.578480][T18404] FAULT_INJECTION: forcing a failure. [ 523.578480][T18404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.608628][T18404] CPU: 1 UID: 0 PID: 18404 Comm: syz.0.3549 Not tainted syzkaller #0 PREEMPT(full) [ 523.608655][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.608667][T18404] Call Trace: [ 523.608674][T18404] [ 523.608682][T18404] dump_stack_lvl+0x189/0x250 [ 523.608714][T18404] ? __pfx____ratelimit+0x10/0x10 [ 523.608739][T18404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.608764][T18404] ? __pfx__printk+0x10/0x10 [ 523.608784][T18404] ? __might_fault+0xb0/0x130 [ 523.608823][T18404] should_fail_ex+0x414/0x560 [ 523.608858][T18404] _copy_from_user+0x2d/0xb0 [ 523.608883][T18404] do_tcp_getsockopt+0x1dd/0x2680 [ 523.608917][T18404] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 523.608936][T18404] ? fixup_exception+0x1122/0x20b0 [ 523.608959][T18404] ? sock_recv_errqueue+0x4e0/0x510 [ 523.608994][T18404] ? __pfx_fixup_exception+0x10/0x10 [ 523.609030][T18404] ? __up_read+0x280/0x680 [ 523.609058][T18404] ? __pfx___up_read+0x10/0x10 [ 523.609085][T18404] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 523.609107][T18404] ? __bad_area_nosemaphore+0x11a/0x780 [ 523.609137][T18404] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 523.609173][T18404] ? irqentry_exit+0x74/0x90 [ 523.609198][T18404] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.609243][T18404] ? irqentry_exit+0x74/0x90 [ 523.609268][T18404] ? exc_page_fault+0xab/0x100 [ 523.609308][T18404] tcp_getsockopt+0x83/0x130 [ 523.609331][T18404] ? sock_recv_errqueue+0x4e0/0x510 [ 523.609360][T18404] ? sock_recv_errqueue+0x4e0/0x510 [ 523.609387][T18404] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 523.609418][T18404] do_sock_getsockopt+0x372/0x450 [ 523.609444][T18404] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 523.609464][T18404] ? do_syscall_64+0xa0/0xfa0 [ 523.609505][T18404] __x64_sys_getsockopt+0x1a5/0x250 [ 523.609525][T18404] ? do_syscall_64+0xa0/0xfa0 [ 523.609554][T18404] ? do_syscall_64+0xa0/0xfa0 [ 523.609584][T18404] do_syscall_64+0xfa/0xfa0 [ 523.609609][T18404] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.609635][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.609655][T18404] ? clear_bhb_loop+0x60/0xb0 [ 523.609679][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.609697][T18404] RIP: 0033:0x7fb95398efc9 [ 523.609715][T18404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.609731][T18404] RSP: 002b:00007fb954847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 523.609753][T18404] RAX: ffffffffffffffda RBX: 00007fb953be5fa0 RCX: 00007fb95398efc9 [ 523.609768][T18404] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 523.609780][T18404] RBP: 00007fb954847090 R08: 0000000000000000 R09: 0000000000000000 [ 523.609792][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.609804][T18404] R13: 00007fb953be6038 R14: 00007fb953be5fa0 R15: 00007ffed4720938 [ 523.609838][T18404] [ 524.026159][T18409] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3551'. [ 524.058661][T18409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3551'. [ 524.067845][T18409] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3551'. [ 524.076911][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3551'. [ 524.291542][T18414] netlink: 'syz.4.3553': attribute type 5 has an invalid length. [ 524.621931][T18434] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 524.693508][T18439] FAULT_INJECTION: forcing a failure. [ 524.693508][T18439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.727014][T18439] CPU: 0 UID: 0 PID: 18439 Comm: syz.1.3562 Not tainted syzkaller #0 PREEMPT(full) [ 524.727043][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.727055][T18439] Call Trace: [ 524.727063][T18439] [ 524.727072][T18439] dump_stack_lvl+0x189/0x250 [ 524.727107][T18439] ? __pfx____ratelimit+0x10/0x10 [ 524.727134][T18439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.727163][T18439] ? __pfx__printk+0x10/0x10 [ 524.727197][T18439] should_fail_ex+0x414/0x560 [ 524.727234][T18439] _copy_to_user+0x31/0xb0 [ 524.727263][T18439] simple_read_from_buffer+0xe1/0x170 [ 524.727299][T18439] proc_fail_nth_read+0x1b3/0x220 [ 524.727328][T18439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.727358][T18439] ? rw_verify_area+0x2a6/0x4d0 [ 524.727386][T18439] ? irqentry_exit+0x74/0x90 [ 524.727412][T18439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.727440][T18439] vfs_read+0x200/0xa30 [ 524.727477][T18439] ? __pfx_vfs_read+0x10/0x10 [ 524.727503][T18439] ? sock_recv_errqueue+0x4e0/0x510 [ 524.727533][T18439] ? sock_recv_errqueue+0x4e0/0x510 [ 524.727559][T18439] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 524.727591][T18439] ? do_sock_getsockopt+0x372/0x450 [ 524.727615][T18439] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 524.727644][T18439] ksys_read+0x145/0x250 [ 524.727676][T18439] ? __pfx_ksys_read+0x10/0x10 [ 524.727708][T18439] ? do_syscall_64+0xbe/0xfa0 [ 524.727741][T18439] do_syscall_64+0xfa/0xfa0 [ 524.727767][T18439] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.727793][T18439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.727814][T18439] ? clear_bhb_loop+0x60/0xb0 [ 524.727840][T18439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.727859][T18439] RIP: 0033:0x7f2da0b8d9dc [ 524.727878][T18439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.727896][T18439] RSP: 002b:00007f2da1959030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.727918][T18439] RAX: ffffffffffffffda RBX: 00007f2da0de5fa0 RCX: 00007f2da0b8d9dc [ 524.727933][T18439] RDX: 000000000000000f RSI: 00007f2da19590a0 RDI: 0000000000000004 [ 524.727947][T18439] RBP: 00007f2da1959090 R08: 0000000000000000 R09: 0000000000000000 [ 524.727959][T18439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.727972][T18439] R13: 00007f2da0de6038 R14: 00007f2da0de5fa0 R15: 00007ffffba1c9f8 [ 524.728018][T18439] [ 526.388672][T18502] syzkaller0: entered promiscuous mode [ 526.423957][T18502] syzkaller0: entered allmulticast mode [ 527.137556][T18523] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3585'. [ 527.282844][T14485] net_ratelimit: 29 callbacks suppressed [ 527.282866][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.401759][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.617633][T18536] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3588'. [ 527.653201][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.710890][T18539] tipc: Enabling of bearer rejected, failed to enable media [ 527.773832][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.908071][T18540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3590'. [ 527.917416][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 527.967291][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 527.989311][T18550] netlink: 'syz.4.3592': attribute type 10 has an invalid length. [ 528.111326][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 528.251097][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 528.502541][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 528.551343][T18558] x_tables: duplicate underflow at hook 3 [ 528.610907][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 528.669722][T18560] syzkaller1: entered promiscuous mode [ 528.685820][T18560] syzkaller1: entered allmulticast mode [ 528.730933][T14465] bond2: (slave macvlan2): failed to get link speed/duplex [ 528.785388][T18557] syzkaller1: left promiscuous mode [ 528.792680][T18557] syzkaller1: left allmulticast mode [ 529.109585][T18572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 529.161598][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 529.253849][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3602'. [ 529.363409][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3604'. [ 529.579711][T18594] netlink: 'syz.5.3607': attribute type 11 has an invalid length. [ 529.615384][T18594] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3607'. [ 530.317023][T18617] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 530.338403][T18617] bond1 (unregistering): Released all slaves [ 530.429723][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 530.719366][T18638] netlink: 'syz.4.3620': attribute type 5 has an invalid length. [ 530.734780][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 530.806223][T18642] 8021q: VLANs not supported on xfrm0 [ 530.923109][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 532.204832][T18701] netlink: 'syz.5.3635': attribute type 3 has an invalid length. [ 532.213602][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 532.352123][T14463] net_ratelimit: 24 callbacks suppressed [ 532.352142][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.465832][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 532.481763][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.603145][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.721846][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.833178][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.940950][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 532.966786][T18734] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 532.998114][T18734] tipc: Enabled bearer , priority 0 [ 533.009017][T18734] syzkaller0: entered promiscuous mode [ 533.015388][T18734] syzkaller0: entered allmulticast mode [ 533.045853][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'. [ 533.055723][T18736] sch_fq: defrate 4 ignored. [ 533.126347][T18738] tipc: Resetting bearer [ 533.144052][T18733] tipc: Resetting bearer [ 533.167577][T18733] tipc: Disabling bearer [ 533.190926][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 533.300884][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 533.420980][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 533.530894][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 533.684502][T18759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.277190][T18765] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 534.867658][T18783] vxcan3: entered allmulticast mode [ 535.152418][T18794] bridge2: entered promiscuous mode [ 535.167049][T18794] bridge2: entered allmulticast mode [ 535.258585][T18796] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3665'. [ 535.270070][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 535.577234][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 535.587963][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 535.688356][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'. [ 535.854180][T18827] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3671'. [ 536.587354][T18861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 536.896070][T18879] netlink: 'syz.2.3694': attribute type 7 has an invalid length. [ 536.959571][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 536.979992][T18881] xt_socket: unknown flags 0xfc [ 537.275416][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 537.285277][T18900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3701'. [ 537.411571][T14433] net_ratelimit: 30 callbacks suppressed [ 537.411592][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 537.477025][T18909] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 537.523441][T18909] x_tables: duplicate underflow at hook 1 [ 537.552765][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 537.775884][T18924] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 537.791686][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 537.911293][T18927] bond1: (slave geneve2): making interface the new active one [ 537.952862][T18927] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 537.979244][T14433] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 538.013114][T14433] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 538.045185][T14433] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 538.081061][T14433] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 538.116658][T18900] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 538.150605][T18901] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 538.321157][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 538.593543][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 538.620978][T18942] batadv_slave_1: entered promiscuous mode [ 538.731870][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 538.850928][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 538.898135][T18935] batadv_slave_1: left promiscuous mode [ 538.970903][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 539.115050][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 539.243208][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 540.221847][T18982] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3717'. [ 540.262920][T18982] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3717'. [ 540.291845][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3717'. [ 540.333945][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3717'. [ 540.394867][T18984] IPVS: Error connecting to the multicast addr [ 540.416506][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 540.457307][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3718'. [ 540.493010][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3719'. [ 540.509861][T18988] æÿîÿ: entered promiscuous mode [ 540.590156][T18990] tipc: Enabling of bearer rejected, failed to enable media [ 540.692421][T18996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.820614][T19005] FAULT_INJECTION: forcing a failure. [ 540.820614][T19005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.850507][T19003] syzkaller0: entered promiscuous mode [ 540.854252][T19005] CPU: 1 UID: 0 PID: 19005 Comm: syz.2.3726 Not tainted syzkaller #0 PREEMPT(full) [ 540.854301][T19005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.854315][T19005] Call Trace: [ 540.854325][T19005] [ 540.854336][T19005] dump_stack_lvl+0x189/0x250 [ 540.854376][T19005] ? __pfx____ratelimit+0x10/0x10 [ 540.854411][T19005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.854443][T19005] ? __pfx__printk+0x10/0x10 [ 540.854467][T19005] ? __might_fault+0xb0/0x130 [ 540.854514][T19005] should_fail_ex+0x414/0x560 [ 540.854557][T19005] _copy_from_user+0x2d/0xb0 [ 540.854590][T19005] ___sys_sendmsg+0x158/0x2a0 [ 540.854626][T19005] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.854703][T19005] ? __fget_files+0x2a/0x420 [ 540.854726][T19005] ? __fget_files+0x3a0/0x420 [ 540.854761][T19005] __x64_sys_sendmsg+0x19b/0x260 [ 540.854789][T19005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.854828][T19005] ? __pfx_ksys_write+0x10/0x10 [ 540.854869][T19005] ? do_syscall_64+0xbe/0xfa0 [ 540.854906][T19005] do_syscall_64+0xfa/0xfa0 [ 540.854936][T19005] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.854967][T19005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.854997][T19005] ? clear_bhb_loop+0x60/0xb0 [ 540.855025][T19005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.855049][T19005] RIP: 0033:0x7f7c8fb8efc9 [ 540.855069][T19005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.855090][T19005] RSP: 002b:00007f7c90a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.855115][T19005] RAX: ffffffffffffffda RBX: 00007f7c8fde5fa0 RCX: 00007f7c8fb8efc9 [ 540.855133][T19005] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 540.855149][T19005] RBP: 00007f7c90a44090 R08: 0000000000000000 R09: 0000000000000000 [ 540.855164][T19005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.855177][T19005] R13: 00007f7c8fde6038 R14: 00007f7c8fde5fa0 R15: 00007fffc45f7a38 [ 540.855217][T19005] [ 541.084741][T19003] syzkaller0: entered allmulticast mode [ 541.356882][T19022] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3732'. [ 541.665007][T19027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.963877][T19039] FAULT_INJECTION: forcing a failure. [ 541.963877][T19039] name failslab, interval 1, probability 0, space 0, times 0 [ 542.000387][T19039] CPU: 0 UID: 0 PID: 19039 Comm: syz.5.3738 Not tainted syzkaller #0 PREEMPT(full) [ 542.000418][T19039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.000431][T19039] Call Trace: [ 542.000441][T19039] [ 542.000449][T19039] dump_stack_lvl+0x189/0x250 [ 542.000484][T19039] ? __pfx____ratelimit+0x10/0x10 [ 542.000518][T19039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.000546][T19039] ? __pfx__printk+0x10/0x10 [ 542.000574][T19039] ? __pfx___might_resched+0x10/0x10 [ 542.000597][T19039] ? fs_reclaim_acquire+0x7d/0x100 [ 542.000645][T19039] should_fail_ex+0x414/0x560 [ 542.000684][T19039] should_failslab+0xa8/0x100 [ 542.000734][T19039] kmem_cache_alloc_node_noprof+0x77/0x710 [ 542.000764][T19039] ? __alloc_skb+0x112/0x2d0 [ 542.000794][T19039] ? netlink_autobind+0xdb/0x300 [ 542.000820][T19039] __alloc_skb+0x112/0x2d0 [ 542.000856][T19039] netlink_sendmsg+0x5c6/0xb30 [ 542.000887][T19039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.000911][T19039] ? aa_sock_msg_perm+0xf1/0x1d0 [ 542.000944][T19039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.000964][T19039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.000985][T19039] __sock_sendmsg+0x21c/0x270 [ 542.001016][T19039] ____sys_sendmsg+0x505/0x830 [ 542.001045][T19039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.001095][T19039] ? import_iovec+0x74/0xa0 [ 542.001126][T19039] ___sys_sendmsg+0x21f/0x2a0 [ 542.001152][T19039] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.001215][T19039] ? __fget_files+0x2a/0x420 [ 542.001234][T19039] ? __fget_files+0x3a0/0x420 [ 542.001267][T19039] __x64_sys_sendmsg+0x19b/0x260 [ 542.001293][T19039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.001339][T19039] ? __pfx_ksys_write+0x10/0x10 [ 542.001373][T19039] ? do_syscall_64+0xbe/0xfa0 [ 542.001405][T19039] do_syscall_64+0xfa/0xfa0 [ 542.001432][T19039] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.001459][T19039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.001480][T19039] ? clear_bhb_loop+0x60/0xb0 [ 542.001513][T19039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.001533][T19039] RIP: 0033:0x7fca79d8efc9 [ 542.001551][T19039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.001569][T19039] RSP: 002b:00007fca7ac93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.001592][T19039] RAX: ffffffffffffffda RBX: 00007fca79fe5fa0 RCX: 00007fca79d8efc9 [ 542.001607][T19039] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 542.001620][T19039] RBP: 00007fca7ac93090 R08: 0000000000000000 R09: 0000000000000000 [ 542.001633][T19039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.001645][T19039] R13: 00007fca79fe6038 R14: 00007fca79fe5fa0 R15: 00007ffeb7ea6578 [ 542.001681][T19039] [ 543.827711][T19068] __nla_validate_parse: 4 callbacks suppressed [ 543.827731][T19068] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3746'. [ 543.960943][T14485] net_ratelimit: 16 callbacks suppressed [ 543.960962][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.003709][T19079] netlink: 'syz.4.3750': attribute type 13 has an invalid length. [ 544.032207][T19080] netlink: 'syz.1.3747': attribute type 11 has an invalid length. [ 544.044686][T19081] netlink: 'syz.4.3750': attribute type 13 has an invalid length. [ 544.054099][T19079] netlink: 'syz.4.3750': attribute type 17 has an invalid length. [ 544.070636][T19080] netlink: 'syz.1.3747': attribute type 11 has an invalid length. [ 544.073908][T19081] netlink: 'syz.4.3750': attribute type 17 has an invalid length. [ 544.131061][T19080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3747'. [ 544.746404][T19085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.156210][T19113] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 545.320045][T19115] rdma_rxe: rxe_newlink: failed to add lo [ 545.424464][T19118] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3758'. [ 545.441519][T19098] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 545.490142][T19114] dvmrp0: left allmulticast mode [ 545.542394][T14479] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.564816][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 545.576221][T14432] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.612844][T14432] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.671621][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 545.704271][T14432] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.948469][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 545.988369][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 545.998172][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 546.009585][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 546.020161][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 546.042268][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3760'. [ 546.192141][T19131] bridge0: port 3(dummy0) entered disabled state [ 546.361432][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 546.481634][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 546.611544][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 546.736735][T19150] netlink: 'syz.5.3769': attribute type 10 has an invalid length. [ 546.837473][T19152] netlink: 'syz.2.3768': attribute type 12 has an invalid length. [ 546.940858][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 547.051027][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 547.121727][T19162] syzkaller1: entered promiscuous mode [ 547.127354][T19162] syzkaller1: entered allmulticast mode [ 547.161521][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 547.271763][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 547.381690][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 548.106936][T19188] netlink: 'syz.1.3781': attribute type 4 has an invalid length. [ 548.378606][T19172] siw: device registration error -23 [ 548.994302][T14479] net_ratelimit: 9 callbacks suppressed [ 548.994322][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.078663][T19218] __nla_validate_parse: 191 callbacks suppressed [ 549.078683][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3790'. [ 549.222617][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.331644][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.462104][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.601895][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.712111][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.833145][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 550.126053][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 550.261514][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 550.382083][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 550.565772][T19248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3801'. [ 550.761884][T19257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3804'. [ 550.778841][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 550.802723][T19257] netlink: 'syz.2.3804': attribute type 29 has an invalid length. [ 550.839143][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 550.943026][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 550.955177][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 551.288822][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 551.634779][T19283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3811'. [ 552.142820][T19305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3813'. [ 552.178890][T19305] lo: entered promiscuous mode [ 552.212884][T19305] tunl0: entered promiscuous mode [ 552.237540][T19305] gre0: entered promiscuous mode [ 552.259751][T19305] gretap0: entered promiscuous mode [ 552.277860][T19305] erspan0: entered promiscuous mode [ 552.305873][T19305] ip_vti0: entered promiscuous mode [ 552.312545][T19305] ip6_vti0: entered promiscuous mode [ 552.318666][T19305] sit0: entered promiscuous mode [ 552.325327][T19305] ip6tnl0: entered promiscuous mode [ 552.333770][T19305] ip6gre0: entered promiscuous mode [ 552.343550][T19305] syz_tun: entered promiscuous mode [ 552.350515][T19305] vcan0: entered promiscuous mode [ 552.356771][T19305] bond0: entered promiscuous mode [ 552.363292][T19305] bond_slave_0: entered promiscuous mode [ 552.369126][T19305] bond_slave_1: entered promiscuous mode [ 552.377369][T19305] team0: entered promiscuous mode [ 552.382700][T19305] team_slave_0: entered promiscuous mode [ 552.388469][T19305] team_slave_1: entered promiscuous mode [ 552.396253][T19305] dummy0: entered promiscuous mode [ 552.402700][T19305] nlmon0: entered promiscuous mode [ 552.408667][T19305] caif0: entered promiscuous mode [ 552.439203][T19308] bond2: option arp_all_targets: invalid value (3) [ 552.450486][T19308] bond2 (unregistering): Released all slaves [ 554.021752][T14479] net_ratelimit: 26 callbacks suppressed [ 554.021773][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.180897][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.305430][T19355] __nla_validate_parse: 3 callbacks suppressed [ 554.305450][T19355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3829'. [ 554.321210][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.431216][T14428] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.561911][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.676254][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.809046][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.929755][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 555.041798][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 555.152742][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 555.270135][T19390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3842'. [ 555.371836][T19393] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3843'. [ 556.053404][T19400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3844'. [ 556.098270][T19402] FAULT_INJECTION: forcing a failure. [ 556.098270][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.121666][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.0.3846 Not tainted syzkaller #0 PREEMPT(full) [ 556.121697][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.121710][T19402] Call Trace: [ 556.121718][T19402] [ 556.121727][T19402] dump_stack_lvl+0x189/0x250 [ 556.121762][T19402] ? __pfx____ratelimit+0x10/0x10 [ 556.121789][T19402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.121819][T19402] ? __pfx__printk+0x10/0x10 [ 556.121870][T19402] ? __might_fault+0xb0/0x130 [ 556.121914][T19402] should_fail_ex+0x414/0x560 [ 556.121953][T19402] _copy_to_iter+0x1de/0x1790 [ 556.121977][T19402] ? kernel_text_address+0xa5/0xe0 [ 556.122011][T19402] ? __kernel_text_address+0xd/0x40 [ 556.122041][T19402] ? unwind_get_return_address+0x4d/0x90 [ 556.122072][T19402] ? __lock_acquire+0xab9/0xd20 [ 556.122095][T19402] ? __pfx__copy_to_iter+0x10/0x10 [ 556.122137][T19402] __skb_datagram_iter+0xf8/0x990 [ 556.122162][T19402] ? look_up_lock_class+0x74/0x170 [ 556.122193][T19402] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 556.122228][T19402] skb_copy_datagram_iter+0xc5/0x230 [ 556.122258][T19402] tcp_recvmsg_locked+0xeb4/0x3650 [ 556.122304][T19402] ? process_measurement+0x72d/0x1a40 [ 556.122334][T19402] ? up_write+0x1c4/0x420 [ 556.122376][T19402] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 556.122421][T19402] ? __lock_acquire+0xab9/0xd20 [ 556.122456][T19402] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.122479][T19402] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.122508][T19402] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.122545][T19402] tcp_recvmsg+0x210/0x810 [ 556.122564][T19402] ? __pfx___might_resched+0x10/0x10 [ 556.122589][T19402] ? __pfx_tcp_recvmsg+0x10/0x10 [ 556.122617][T19402] ? aa_sk_perm+0x81e/0x950 [ 556.122647][T19402] ? __pfx_tcp_recvmsg+0x10/0x10 [ 556.122664][T19402] inet6_recvmsg+0x138/0x6b0 [ 556.122688][T19402] ? __pfx_aa_sk_perm+0x10/0x10 [ 556.122718][T19402] ? __pfx_inet6_recvmsg+0x10/0x10 [ 556.122739][T19406] netlink: 'syz.5.3847': attribute type 1 has an invalid length. [ 556.122743][T19402] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 556.122764][T19402] ? security_socket_recvmsg+0x7e/0x2e0 [ 556.122786][T19402] sock_recvmsg+0x105/0x270 [ 556.122829][T19402] ____sys_recvmsg+0x1c9/0x460 [ 556.123017][T19402] ? __pfx_____sys_recvmsg+0x10/0x10 [ 556.123077][T19402] ? import_iovec+0x74/0xa0 [ 556.123136][T19402] ___sys_recvmsg+0x1b5/0x510 [ 556.123172][T19402] ? __pfx____sys_recvmsg+0x10/0x10 [ 556.123231][T19402] ? __fget_files+0x3a0/0x420 [ 556.123267][T19402] __x64_sys_recvmsg+0x198/0x260 [ 556.123298][T19402] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 556.123337][T19402] ? __pfx_ksys_write+0x10/0x10 [ 556.123377][T19402] ? do_syscall_64+0xbe/0xfa0 [ 556.123414][T19402] do_syscall_64+0xfa/0xfa0 [ 556.123443][T19402] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.123474][T19402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.123498][T19402] ? clear_bhb_loop+0x60/0xb0 [ 556.123527][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.123551][T19402] RIP: 0033:0x7fb95398efc9 [ 556.123573][T19402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.123596][T19402] RSP: 002b:00007fb954847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 556.123621][T19402] RAX: ffffffffffffffda RBX: 00007fb953be5fa0 RCX: 00007fb95398efc9 [ 556.123639][T19402] RDX: 0000000000000142 RSI: 00002000000006c0 RDI: 0000000000000003 [ 556.123653][T19402] RBP: 00007fb954847090 R08: 0000000000000000 R09: 0000000000000000 [ 556.123667][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.123682][T19402] R13: 00007fb953be6038 R14: 00007fb953be5fa0 R15: 00007ffed4720938 [ 556.123721][T19402] [ 556.501317][T19406] netlink: 'syz.5.3847': attribute type 3 has an invalid length. [ 556.509136][T19406] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3847'. [ 556.707871][T19417] netlink: 'syz.1.3851': attribute type 9 has an invalid length. [ 558.097872][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3867'. [ 558.128096][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3867'. [ 558.259664][T19472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3868'. [ 558.365234][T19474] netlink: 'syz.5.3869': attribute type 10 has an invalid length. [ 558.399567][T19476] xt_ecn: cannot match TCP bits for non-tcp packets [ 559.151795][T14432] net_ratelimit: 17 callbacks suppressed [ 559.151816][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.198187][T19502] netlink: zone id is out of range [ 559.226375][T19502] netlink: zone id is out of range [ 559.239085][T19502] netlink: zone id is out of range [ 559.267513][T19502] netlink: zone id is out of range [ 559.281224][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.310049][T19502] netlink: zone id is out of range [ 559.314300][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3880'. [ 559.320747][T19502] netlink: zone id is out of range [ 559.441476][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.449302][T19509] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3882'. [ 559.551578][T14462] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.606894][T19517] syz_tun: entered allmulticast mode [ 559.635391][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3886'. [ 559.725703][T19517] syz_tun (unregistering): left allmulticast mode [ 559.757415][T19524] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3889'. [ 559.789096][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 559.937429][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 560.042906][ T5839] Bluetooth: hci5: command 0x040f tx timeout [ 560.143537][T19547] bond0: (slave bond_slave_0): Releasing backup interface [ 560.159261][T19547] bond_slave_0: left promiscuous mode [ 560.177878][T19547] bond0: (slave bond_slave_1): Releasing backup interface [ 560.204198][T19547] bond_slave_1: left promiscuous mode [ 560.222035][T19547] team_slave_0: left promiscuous mode [ 560.257903][T19547] team0: Port device team_slave_0 removed [ 560.274159][T19547] team_slave_1: left promiscuous mode [ 560.295331][T19547] team0: Port device team_slave_1 removed [ 560.335485][T19547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.353009][T19547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.363655][T19547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.371660][T19547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.412354][T19562] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3898'. [ 560.599091][T14428] nci: nci_rx_work: unknown MT 0x7 [ 560.743123][T19585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3907'. [ 560.753977][T19585] x_tables: ip_tables: udp match: only valid for protocol 17 [ 560.937931][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3908'. [ 562.456881][T19635] vlan2: entered promiscuous mode [ 562.493078][T19635] geneve1: entered promiscuous mode [ 562.498585][T19635] vlan2: entered allmulticast mode [ 562.525132][T19635] geneve1: entered allmulticast mode [ 563.776427][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 563.863338][T19684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.090031][T19692] netlink: 'syz.2.3931': attribute type 4 has an invalid length. [ 564.163406][T19692] netlink: 'syz.2.3931': attribute type 4 has an invalid length. [ 564.172093][T14463] net_ratelimit: 32 callbacks suppressed [ 564.172111][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.291621][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.511566][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.701623][T19708] tipc: Started in network mode [ 564.706596][T19708] tipc: Node identity , cluster identity 4711 [ 564.727785][T19708] tipc: Failed to obtain node identity [ 564.743342][T19708] tipc: Enabling of bearer rejected, failed to enable media [ 564.771243][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.784474][T19708] __nla_validate_parse: 2 callbacks suppressed [ 564.784489][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 564.901532][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.938959][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'. [ 565.006675][T19722] vlan4: entered promiscuous mode [ 565.017977][T19727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3938'. [ 565.042328][T19722] erspan0: entered promiscuous mode [ 565.194963][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 565.222447][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.359250][T19733] nbd: nbd0 already in use [ 565.361609][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.371954][T19733] block nbd0: NBD_DISCONNECT [ 565.391658][T19733] block nbd0: Send disconnect failed -32 [ 565.415652][T19733] block nbd0: shutting down sockets [ 565.543574][T19733] bond3: entered promiscuous mode [ 565.558934][T19733] bond3: entered allmulticast mode [ 565.572220][T19733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.614195][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.751572][T14432] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.847816][T19748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3947'. [ 565.871217][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 566.116539][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3955'. [ 566.117091][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'. [ 566.126104][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3955'. [ 566.156379][T19766] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 566.263189][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3958'. [ 566.284215][T19766] bond4: entered promiscuous mode [ 566.289302][T19766] bond4: entered allmulticast mode [ 566.325553][T19766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.385593][T19766] bridge3: entered promiscuous mode [ 566.391419][T19766] bridge3: entered allmulticast mode [ 566.397537][T19766] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 566.574359][T19788] veth0: entered promiscuous mode [ 566.587146][T19791] netlink: 'syz.2.3965': attribute type 1 has an invalid length. [ 566.622547][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 566.632926][T19787] veth0: left promiscuous mode [ 566.653046][T19791] bond2: (slave geneve3): making interface the new active one [ 566.665554][T19791] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 566.675096][T14479] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 566.705807][T14479] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 566.736964][T14479] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 566.757095][T14433] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 566.852311][T19804] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20002 [ 566.870034][T19804] netlink: 'syz.1.3971': attribute type 12 has an invalid length. [ 566.927977][T19813] netlink: 'syz.1.3973': attribute type 10 has an invalid length. [ 566.928698][T19811] netlink: 'syz.1.3973': attribute type 10 has an invalid length. [ 566.950482][T19811] team0: Port device dummy0 removed [ 566.964667][T19811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 567.068208][T19816] x_tables: unsorted entry at hook 1 [ 567.092512][T19808] [ 567.094865][T19808] ====================================================== [ 567.101893][T19808] WARNING: possible circular locking dependency detected [ 567.108917][T19808] syzkaller #0 Not tainted [ 567.113325][T19808] ------------------------------------------------------ [ 567.120366][T19808] syz.2.3972/19808 is trying to acquire lock: [ 567.126427][T19808] ffffffff8e025208 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 567.136031][T19808] [ 567.136031][T19808] but task is already holding lock: [ 567.143382][T19808] ffff88814336b1b8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 567.153647][T19808] [ 567.153647][T19808] which lock already depends on the new lock. [ 567.153647][T19808] [ 567.164039][T19808] [ 567.164039][T19808] the existing dependency chain (in reverse order) is: [ 567.173044][T19808] [ 567.173044][T19808] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 567.181657][T19808] lock_acquire+0x120/0x360 [ 567.186701][T19808] blk_alloc_queue+0x538/0x620 [ 567.191996][T19808] __blk_mq_alloc_disk+0x15c/0x340 [ 567.197628][T19808] nbd_dev_add+0x46c/0xae0 [ 567.202574][T19808] nbd_init+0x1c6/0x240 [ 567.207268][T19808] do_one_initcall+0x236/0x820 [ 567.212584][T19808] do_initcall_level+0x104/0x190 [ 567.218053][T19808] do_initcalls+0x59/0xa0 [ 567.222905][T19808] kernel_init_freeable+0x334/0x4b0 [ 567.228639][T19808] kernel_init+0x1d/0x1d0 [ 567.233493][T19808] ret_from_fork+0x4bc/0x870 [ 567.238616][T19808] ret_from_fork_asm+0x1a/0x30 [ 567.243921][T19808] [ 567.243921][T19808] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 567.251147][T19808] lock_acquire+0x120/0x360 [ 567.256183][T19808] fs_reclaim_acquire+0x72/0x100 [ 567.261654][T19808] prepare_alloc_pages+0x153/0x610 [ 567.267290][T19808] __alloc_frozen_pages_noprof+0x123/0x370 [ 567.273635][T19808] __alloc_pages_noprof+0xa/0x30 [ 567.279125][T19808] pcpu_populate_chunk+0x182/0xb30 [ 567.284901][T19808] pcpu_alloc_noprof+0xcbf/0x1720 [ 567.290463][T19808] xt_percpu_counter_alloc+0x161/0x220 [ 567.296451][T19808] translate_table+0x12e9/0x2000 [ 567.301919][T19808] ipt_register_table+0x106/0x7c0 [ 567.307480][T19808] iptable_nat_table_init+0x43/0x2e0 [ 567.313293][T19808] xt_find_table_lock+0x30c/0x3e0 [ 567.318845][T19808] xt_request_find_table_lock+0x26/0x100 [ 567.325000][T19808] do_ipt_get_ctl+0x730/0x1180 [ 567.330280][T19808] nf_getsockopt+0x26e/0x290 [ 567.335389][T19808] ip_getsockopt+0x1c4/0x220 [ 567.340493][T19808] do_sock_getsockopt+0x372/0x450 [ 567.346036][T19808] __x64_sys_getsockopt+0x1a5/0x250 [ 567.351780][T19808] do_syscall_64+0xfa/0xfa0 [ 567.356815][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.363226][T19808] [ 567.363226][T19808] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 567.370971][T19808] validate_chain+0xb9b/0x2140 [ 567.376253][T19808] __lock_acquire+0xab9/0xd20 [ 567.381452][T19808] lock_acquire+0x120/0x360 [ 567.386473][T19808] __mutex_lock+0x187/0x1350 [ 567.391587][T19808] pcpu_alloc_noprof+0x286/0x1720 [ 567.397140][T19808] sbitmap_init_node+0x1e1/0x640 [ 567.402596][T19808] sbitmap_queue_init_node+0x3e/0x4d0 [ 567.408491][T19808] blk_mq_init_tags+0x15c/0x2d0 [ 567.413877][T19808] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 567.419859][T19808] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 567.426183][T19808] nbd_start_device+0x17f/0xb10 [ 567.431557][T19808] nbd_genl_connect+0x135b/0x18f0 [ 567.437106][T19808] genl_family_rcv_msg_doit+0x215/0x300 [ 567.443175][T19808] genl_rcv_msg+0x60e/0x790 [ 567.448199][T19808] netlink_rcv_skb+0x208/0x470 [ 567.453491][T19808] genl_rcv+0x28/0x40 [ 567.458001][T19808] netlink_unicast+0x82f/0x9e0 [ 567.463290][T19808] netlink_sendmsg+0x805/0xb30 [ 567.468578][T19808] __sock_sendmsg+0x21c/0x270 [ 567.473782][T19808] ____sys_sendmsg+0x505/0x830 [ 567.479068][T19808] ___sys_sendmsg+0x21f/0x2a0 [ 567.484284][T19808] __x64_sys_sendmsg+0x19b/0x260 [ 567.489739][T19808] do_syscall_64+0xfa/0xfa0 [ 567.494766][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.501181][T19808] [ 567.501181][T19808] other info that might help us debug this: [ 567.501181][T19808] [ 567.511407][T19808] Chain exists of: [ 567.511407][T19808] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 567.511407][T19808] [ 567.525057][T19808] Possible unsafe locking scenario: [ 567.525057][T19808] [ 567.532504][T19808] CPU0 CPU1 [ 567.537861][T19808] ---- ---- [ 567.543221][T19808] lock(&q->q_usage_counter(io)#49); [ 567.548610][T19808] lock(fs_reclaim); [ 567.555114][T19808] lock(&q->q_usage_counter(io)#49); [ 567.563031][T19808] lock(pcpu_alloc_mutex); [ 567.567533][T19808] [ 567.567533][T19808] *** DEADLOCK *** [ 567.567533][T19808] [ 567.575669][T19808] 6 locks held by syz.2.3972/19808: [ 567.580865][T19808] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.589056][T19808] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.598027][T19808] #2: ffff888024e531c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 567.609426][T19808] #3: ffff888024e530d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 567.620393][T19808] #4: ffff88814336b1b8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 567.631102][T19808] #5: ffff88814336b1f0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 567.642069][T19808] [ 567.642069][T19808] stack backtrace: [ 567.647960][T19808] CPU: 0 UID: 0 PID: 19808 Comm: syz.2.3972 Not tainted syzkaller #0 PREEMPT(full) [ 567.647981][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.647994][T19808] Call Trace: [ 567.648002][T19808] [ 567.648010][T19808] dump_stack_lvl+0x189/0x250 [ 567.648049][T19808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.648072][T19808] ? __pfx__printk+0x10/0x10 [ 567.648090][T19808] ? print_lock_name+0xde/0x100 [ 567.648107][T19808] print_circular_bug+0x2ee/0x310 [ 567.648131][T19808] check_noncircular+0x134/0x160 [ 567.648155][T19808] validate_chain+0xb9b/0x2140 [ 567.648185][T19808] __lock_acquire+0xab9/0xd20 [ 567.648203][T19808] ? pcpu_alloc_noprof+0x286/0x1720 [ 567.648229][T19808] lock_acquire+0x120/0x360 [ 567.648244][T19808] ? pcpu_alloc_noprof+0x286/0x1720 [ 567.648276][T19808] __mutex_lock+0x187/0x1350 [ 567.648299][T19808] ? pcpu_alloc_noprof+0x286/0x1720 [ 567.648328][T19808] ? kasan_save_track+0x4f/0x80 [ 567.648352][T19808] ? kasan_save_track+0x3e/0x80 [ 567.648375][T19808] ? __kasan_kmalloc+0x93/0xb0 [ 567.648399][T19808] ? blk_mq_init_tags+0x83/0x2d0 [ 567.648419][T19808] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 567.648444][T19808] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 567.648461][T19808] ? pcpu_alloc_noprof+0x286/0x1720 [ 567.648486][T19808] ? nbd_genl_connect+0x135b/0x18f0 [ 567.648501][T19808] ? genl_family_rcv_msg_doit+0x215/0x300 [ 567.648523][T19808] ? genl_rcv_msg+0x60e/0x790 [ 567.648543][T19808] ? __pfx___mutex_lock+0x10/0x10 [ 567.648566][T19808] ? ____sys_sendmsg+0x505/0x830 [ 567.648584][T19808] ? do_syscall_64+0xfa/0xfa0 [ 567.648606][T19808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.648630][T19808] pcpu_alloc_noprof+0x286/0x1720 [ 567.648662][T19808] sbitmap_init_node+0x1e1/0x640 [ 567.648686][T19808] sbitmap_queue_init_node+0x3e/0x4d0 [ 567.648708][T19808] blk_mq_init_tags+0x15c/0x2d0 [ 567.648730][T19808] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 567.648759][T19808] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 567.648776][T19808] ? kfree+0x19a/0x6d0 [ 567.648797][T19808] ? blk_mq_update_nr_hw_queues+0x8d0/0x1ab0 [ 567.648817][T19808] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 567.648842][T19808] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 567.648868][T19808] ? sysfs_add_file_mode_ns+0x259/0x300 [ 567.648890][T19808] nbd_start_device+0x17f/0xb10 [ 567.648910][T19808] ? device_create_file+0xf4/0x1c0 [ 567.648929][T19808] nbd_genl_connect+0x135b/0x18f0 [ 567.648949][T19808] ? __pfx_nbd_genl_connect+0x10/0x10 [ 567.648973][T19808] ? rcu_is_watching+0x15/0xb0 [ 567.648994][T19808] ? __nla_parse+0x40/0x60 [ 567.649013][T19808] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 567.649039][T19808] genl_family_rcv_msg_doit+0x215/0x300 [ 567.649065][T19808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 567.649093][T19808] ? stack_trace_save+0x9c/0xe0 [ 567.649117][T19808] genl_rcv_msg+0x60e/0x790 [ 567.649141][T19808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.649161][T19808] ? __pfx_nbd_genl_connect+0x10/0x10 [ 567.649183][T19808] netlink_rcv_skb+0x208/0x470 [ 567.649208][T19808] ? __lock_acquire+0xab9/0xd20 [ 567.649224][T19808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.649245][T19808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.649280][T19808] ? down_read+0x1ad/0x2e0 [ 567.649306][T19808] genl_rcv+0x28/0x40 [ 567.649324][T19808] netlink_unicast+0x82f/0x9e0 [ 567.649352][T19808] ? __pfx_netlink_unicast+0x10/0x10 [ 567.649376][T19808] ? netlink_sendmsg+0x642/0xb30 [ 567.649392][T19808] ? skb_put+0x11b/0x210 [ 567.649409][T19808] netlink_sendmsg+0x805/0xb30 [ 567.649428][T19808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.649446][T19808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 567.649471][T19808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.649488][T19808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.649505][T19808] __sock_sendmsg+0x21c/0x270 [ 567.649528][T19808] ____sys_sendmsg+0x505/0x830 [ 567.649548][T19808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.649569][T19808] ? import_iovec+0x74/0xa0 [ 567.649591][T19808] ___sys_sendmsg+0x21f/0x2a0 [ 567.649609][T19808] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.649641][T19808] ? __fget_files+0x2a/0x420 [ 567.649656][T19808] ? __fget_files+0x3a0/0x420 [ 567.649675][T19808] __x64_sys_sendmsg+0x19b/0x260 [ 567.649694][T19808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.649720][T19808] ? do_syscall_64+0xbe/0xfa0 [ 567.649744][T19808] do_syscall_64+0xfa/0xfa0 [ 567.649765][T19808] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.649787][T19808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.649804][T19808] ? clear_bhb_loop+0x60/0xb0 [ 567.649823][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.649839][T19808] RIP: 0033:0x7f7c8fb8efc9 [ 567.649855][T19808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.649870][T19808] RSP: 002b:00007f7c90a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.649887][T19808] RAX: ffffffffffffffda RBX: 00007f7c8fde5fa0 RCX: 00007f7c8fb8efc9 [ 567.649900][T19808] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 567.649912][T19808] RBP: 00007f7c8fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 567.649923][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.649934][T19808] R13: 00007f7c8fde6038 R14: 00007f7c8fde5fa0 R15: 00007fffc45f7a38 [ 567.649958][T19808] [ 568.197231][ T5830] block nbd0: Receive control failed (result -32) [ 568.197248][ T5839] block nbd0: Receive control failed (result -32) [ 568.197464][ T5839] block nbd0: Receive control failed (result -32) [ 568.242591][T19808] nbd0: detected capacity change from 0 to 127 [ 569.200959][T14485] net_ratelimit: 20 callbacks suppressed [ 569.200983][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.321318][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.430880][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.551236][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.661415][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.771350][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.880875][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 569.990829][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 570.101393][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 570.211482][T14433] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.231370][T14463] net_ratelimit: 35 callbacks suppressed [ 574.231391][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.351397][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.461132][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.571332][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.691373][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.801152][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 574.920899][T14485] bond2: (slave macvlan2): failed to get link speed/duplex [ 575.041072][T14463] bond2: (slave macvlan2): failed to get link speed/duplex [ 575.161365][T14479] bond2: (slave macvlan2): failed to get link speed/duplex [ 575.271285][T14463] bond2: (slave macvlan2): failed to get link speed/duplex