last executing test programs: 13.153976524s ago: executing program 4 (id=3271): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x0, 0xff, 0xa, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8, 0x2}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x480d0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 12.977465921s ago: executing program 4 (id=3274): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000011140102"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 11.119681112s ago: executing program 3 (id=3286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000440)={0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) r4 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x3000000d}) 10.927644624s ago: executing program 3 (id=3289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff7}]}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xcf, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x87042a809f9842dd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44085}, 0x2000c814) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) 10.699897371s ago: executing program 3 (id=3293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_ADT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x240000c5}, 0x801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) r3 = socket$inet6(0xa, 0xa, 0x3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000280)='syz1\x00', 0x8000, &(0x7f00000002c0)={@_ha_fsid={[0x36, 0x8]}, {0x6, 0x8, 0x4, 0x3}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x8}, {[0xb, 0x8, 0x14000, 0x2]}, 0x453, 0x24, &(0x7f0000000380)=""/36}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10208}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x808, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000005c0)={0x5, 0x8}) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000600)={0x3, 0x49b6, 0x855, 0xa40}, 0x8) socket$kcm(0x29, 0xb031692267194547, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000840)={&(0x7f0000000780)=""/133, 0x85, 0x8, 0xffff0000}) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@newspdinfo={0x44, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, 0xfffffffc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x244, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "b3cea02ba088c1ce2d3758b881d41f6f97a16e1b7a58f3128cbbd10e10003b52694f7818fa5ed45f03db878fb1bd2e650b74f72a72807dba5697852fd985d17820d3864bd063"}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffa2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x57cb}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x28000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x44800) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x38200110}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5a}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x74, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ab3edd0024b3f6e7f87c3a4b881fb420"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e1dc10588fb90faee4750b2cd3d4f06c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_BSSID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x120, r10, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc1c}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7e9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$sock(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001340)="6d93693c82e9edd0661eb01cd37e2d777d9b311605154eb53effc6aefa7167250b6b1fc383e5b8b7641dc1fb4532016bdb7225918d45373814a5406a97d84f2816579d2110a33ac52294e91d206e22", 0x4f}, {&(0x7f00000013c0)="f751f1365070aaf90a4b6de67b5dd48bafa8a40051ab04d744c7374c069ffdd5e7995fe1944aa2f2b41e4d1613f6791758e772a2ed017dac19b528618744c27666a61437f9fcf0f237a0050c0892d10e3813c0e49c42192ef7f16aaca8651092edb4fab5", 0x64}, {&(0x7f0000001440)="a98cb721cdd2556a31190de234099bdee7fa028ccf68b5bac7f97b3d13f4a317c6e2dbc33ffa9438f8f96891c7bb", 0x2e}, {&(0x7f0000001480)="4f3820e7fe3d1a343962f853fe8f9d2577bebeb1f43691f47cd479c2f4d8d691a2e5bb2be4b44f914760247a6627", 0x2e}], 0x4, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0xe66}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x2b2f}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xc0}, 0x2000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r11) connect$inet6(r3, &(0x7f0000001640)={0xa, 0x4e20, 0x3, @local, 0x56}, 0x1c) 10.331459542s ago: executing program 3 (id=3298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x480d0) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2], 0x28}}, 0x802) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003940)=""/121, 0x79}], 0x1, &(0x7f0000003a00)=""/6, 0x6}, 0xe539}], 0x1, 0x40012182, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9.31679261s ago: executing program 3 (id=3300): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c000000950000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 9.185866215s ago: executing program 3 (id=3302): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000ae1d9ababe63662ad47c092406311edb4b151436847632b213f9d17b8fa6e76e07cbfe2964c6d945cc4a682ba7d7e6f367ce857eda46fdc1fcf7a4b70a99edc6e35d65700b8dbad3082b96e6b413fccc2ffdc22f72081718aec9c0fa939e51d0"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="7a9643b0f88a5a5365ec412c0f609f8ee46e35cadb8e229d22775d1f5154c53cdeb19fdf46c3ad82a44a4d3c377ba6d0603ab367e7b2cfc270112d9affaa1ff6324b9dabc5bea7f3426f477c534c86d6d19e485cc53f7f4f563cde97dcbb4be76fd6e6999dbe2cd91b10b8a504932e289747a1155f1095950ee27f80dc789c9ee1567458f234833894b7f9a9462e54698a79616afdf8733d3e81613f378cd215fe0db28a175f358bc453983bc35442a45d5b5d207d194d441987a4d6c84c9e6e4a3ee00bc934e69e1461514d21d2d41a17d4507cbeffc872de39d3e72ff0aafc4f48b1fc198659a4ea843b8c8b620a955f2f970b528952e2"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, 0xfffffffffffffffe}, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="41fcdd328beda620e862cc6ae9d5fca3fdf212a77b9d80af6fea0f60134d069d9effc3aec25cdf21ac7e59238640ad5a7059f2e10e3ac522da9d1031cb5e1583db4bdcddaab5595486b6d46e1d1ce1096a7ef6eda7c0be9bd89b607f986dd89b72580b7dbb26cf8035295fdb54f9cec2e2080b7a45f4f30937a4415cbcd1c03520212c78b0228a15b1b7131b373a8ec2b75138a617c6268ea985aa84732af1b759b33829dd7f761c85128902f0ca35a98f1233d26d36db918bcbf00032ac5f2e15427e3ad8b752188abbb4a0fb9c32670a", 0xd1}, {&(0x7f0000000380)="d93b36a74b9c40621f461756f155162bb04759f500fb7d7d7f981935c4ae476fd99e46e06fd9072aa09d67b3d6eb91d762d36eb75314c3b587399d7f602de290ad0cfd145de7d288887a1f3303ede1a97dcc9b24ea47d7316e24e3c9b9d9d171689addccf22a1a5f45718893caa84060ced12e54c96d07998c5a65da08c0dce1df5df1e430561322a8130ca7da1f67bfe5c09ca3aa72f4dd90481614391e6da1e20ec589bef52888", 0xa8}, {&(0x7f0000000180)="445eefffdea8c13affa08f17738b1934397cf75f40744ae6a71a1669d5213b6c4c94ca", 0x23}], 0x3, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @rand_addr=0x64010100}}}], 0x20}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB="4c000000100002002cbd70008300000000000000", @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b0001006d616373656300001400028005000a0001000000050008000800000008000500", @ANYRES32=r2, @ANYBLOB="9e441c4cb470df835cc356733d1683d632aa274468514c597d04c88837b72458ef3cc35a6b139ace23472e2a63fe8c05de39da018643e3f7d83a77509c669610cd82f31322db"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$inet6(0xa, 0x3, 0x7f) socket$nl_xfrm(0x10, 0x3, 0x6) 2.127501501s ago: executing program 0 (id=3351): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(r5, 0x5450) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r7, @ANYBLOB="06003400c5f3000008004a"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xa0, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "633c5c005031254a001a0000000000eb9700"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xe86a301670200e0b}, 0x40080) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b45a5f63afe2a1a2eed682b23e0377dc074acb2dfd2a3ecf8d5172498d12c74fe8fef69718e36208bdbebabcb5eb0af80ab663d2767ddf3255e20eed8d9438ff9099d2035d492608a3b9da493e68b05602261fd459833bcb59e1459ad2c463547a21df7c7b92fc34d3befb6c10a4cb2d7fbffc946a4baaef134fc9721dee8fc1bbe9b7b01a60d1fcc89dd8dfbae4a88f01e29cace34cf370cd15522818075c57a6b44968566cec8f533a555b6e5871e4055fb944822cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008390000b7040000020000008500000033000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x8001, @loopback, 0x8}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201, 0x1000}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 1.687394525s ago: executing program 1 (id=3354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000003c0)='pimreg\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x48804) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full', 0x20, 0x6, 0x20, 0x3}, 0x2f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32"], 0x38c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x40040000}, 0x40) 1.201038496s ago: executing program 1 (id=3356): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.cpus\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="8700040000000280"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r8, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0x7, 0x6, 0x3, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r8, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0x7, 0x6, 0x3, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ee20efa67caf4a73dc1c8ad3afefc06dd50dd51e0b6fa323"}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x12) write(r9, &(0x7f00000000c0)="29000000110005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) (async) write(r9, &(0x7f00000000c0)="29000000110005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 1.131229266s ago: executing program 2 (id=3357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x15, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) epoll_create1(0x80000) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() sendmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x10, 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f00000003c0)={0x1, 0x2, 0x1000, 0xf0, &(0x7f00000000c0)="637060f8f26238c3583ba5d506761d7f8c85059b1619c8263dade0ff87661720b3d6327b8c568cc2190cfec61ae8ac5441550e8911fc1e0d823f60cfcb29a144ca5440276794b0b5f124240d82a407f1f45ca99b097ca71156511e165110dbc67cb7afc5f14395ce4f874034f6211124b928d7e4921c2fefbe0c239a41b6b469a3c93a6bd097b9f560ea406af9e9e5340c1622805f974e685031fc99c944103f0dcc4b5f62f97556d698bdbfc709dffdf3c9caacea611b68a48500f765d7efec569df5e619c50d3308e61f854d44e385ee5394f9b78e793c0245d3173472bf8dc38ded1f550c392e734433577ee45fa5", 0x80, 0x0, &(0x7f00000002c0)="7d4f57a32fab2f53c8e1ed2827f3d069f2f6c771eac38476539c2f195287c36f27f9bea9772b2b63fbc3f8a47d1f9c54cde6a597418c31d7aeaf72a832b46acfaca98c3f526416eed6c93500a707ad5c32a3044d8e1d50e04d0a4e2b34e7b8b2ae313bfccba2cb79e9d2c1758f7db5394e4d54f4de8597e0ff3560fd489a8068"}) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r13, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) 1.089748229s ago: executing program 4 (id=3278): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000300000000000000001"], 0xa0}, 0x4004881) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x800) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0xfffffffffffffe0e, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r10 = socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r10, @ANYRESOCT=r11, @ANYRES16=r8, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x240000c5}, 0x20044880) (async) recvmsg$unix(r7, 0x0, 0x23) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) listen(r12, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 1.04537321s ago: executing program 0 (id=3358): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000006c0)="e6", 0x1}], 0x2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008800) readv(r0, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) 850.28576ms ago: executing program 0 (id=3359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x6c}}, 0x0) 849.725646ms ago: executing program 1 (id=3360): r0 = socket(0x29, 0x80805, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x5}}) (async) ioctl$TUNGETDEVNETNS(r1, 0xc0189436, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}, 0xff00}], 0x2, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700fffd08000a40000000000900020073797a31000000000900010073797a3000000000080005"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40) 814.013076ms ago: executing program 2 (id=3361): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000280)=0x4, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c00108004000880040008000c000200"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) recvfrom$llc(r7, &(0x7f0000000240)=""/128, 0x80, 0x0, &(0x7f0000000080)={0x1a, 0x30f, 0x4, 0x5, 0x3, 0xf6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000300)={r8, 0x7f, 0xd, 0x98, 0x2, 0xfffffffa}, 0x14) 700.925946ms ago: executing program 1 (id=3362): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/221, &(0x7f0000000000)=0xdd) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x1c}}, 0x8800) 695.710835ms ago: executing program 4 (id=3363): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff9f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffe0, 0xffffffffffffffe5}]}, &(0x7f0000000500)='GPL\x00', 0x3800000, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) 631.479851ms ago: executing program 0 (id=3364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620248000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6}, 0x10) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5ec37000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendto(r2, &(0x7f0000000200)="96595f5342679e12cb257159323c44fb0d01ac1dbe0b1ace8c7a181f8b702a0e22b234ee8a6db44a18e191e3833a3b30258abf15cdccabd898c82bea17d37736c203f0bfacf81c8b37ffc50b87b2994bc6ae6cfcc86b112ba6491ad8fc37ce9f7d0edbd77c1a94c655c4d9a379d50afa8b2a2bbd203e20b05b3c46c98879a59381874e6c9091eb9398", 0x89, 0x20000000, &(0x7f0000000000)=@rc={0x1f, @none, 0x4}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) mmap(&(0x7f0000350000/0x1000)=nil, 0x1000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 579.308293ms ago: executing program 2 (id=3365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4854}, 0x20004000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) 536.39957ms ago: executing program 1 (id=3366): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x100, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x100, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) 391.616894ms ago: executing program 0 (id=3367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 388.101839ms ago: executing program 2 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x27) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x4000000) writev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="5810", 0x2}], 0x1) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x27) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e26, @local}, 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x4000000) (async) writev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="5810", 0x2}], 0x1) (async) close(r4) (async) 387.60716ms ago: executing program 4 (id=3369): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb8}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb8}, 0x40000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 320.740268ms ago: executing program 0 (id=3370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x20000000) 250.915825ms ago: executing program 2 (id=3371): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r2, @ANYBLOB="0800ab3a0200", @ANYRESHEX=r0], 0x40}}, 0x0) 191.557155ms ago: executing program 1 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000740)={0x3, 'team_slave_0\x00', {0xfff}, 0x8001}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffffac1414bb14000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x16, 0xbe, 0x9, 0x0, @local, @remote, 0x8000, 0x80, 0xfffffff6, 0x2}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb12e1000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='-(@\\.\x00', 0x4000, &(0x7f0000000340)={@align=0x4, {0x3, 0x7, 0x435f, 0x3}}, 0x1ff, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)}) syz_extract_tcp_res(&(0x7f00000005c0), 0xa31e, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x28, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x24}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc824) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf2505000000050005000300000008000300080000001c00018008000300e000000108000700", @ANYRES32=r3, @ANYBLOB="0500029cb78f2000e003c3782de8530fda87a43ef01e87899f977d2762b3a9b944294844b0b030915ba02659cc5cf9567baac1e30d5112e62f524c2ac6ec55c5b406b491"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 42.467219ms ago: executing program 4 (id=3373): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 0s ago: executing program 2 (id=3374): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0570c2000014001200000400028008000400cdf30040000000000000fa02d80000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) kernel console output (not intermixed with test programs): an invalid length. [ 242.374254][T12911] vlan3: entered promiscuous mode [ 242.385917][T12911] veth1_virt_wifi: entered promiscuous mode [ 242.617835][T12914] netlink: 'syz.1.1813': attribute type 13 has an invalid length. [ 242.628582][T12914] netlink: 'syz.1.1813': attribute type 17 has an invalid length. [ 242.663781][T12921] netlink: 'syz.4.1811': attribute type 2 has an invalid length. [ 242.865215][T12914] bridge0: left allmulticast mode [ 242.881558][T12914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.215009][T12942] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 243.257465][T12942] netlink: 'syz.1.1818': attribute type 2 has an invalid length. [ 243.276363][T12942] netlink: 'syz.1.1818': attribute type 2 has an invalid length. [ 243.302840][T12932] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 243.809624][T12966] xt_hashlimit: size too large, truncated to 1048576 [ 243.886711][T12966] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 244.022553][T12976] ip6tnl0: entered promiscuous mode [ 244.039608][T12976] ip6tnl0: entered allmulticast mode [ 244.070787][T12977] team0: Port device dummy0 removed [ 244.105184][T12977] dummy0: entered promiscuous mode [ 244.137558][T12977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.317164][T12991] bond5: entered promiscuous mode [ 244.383778][T13000] bond6: entered promiscuous mode [ 244.390226][T12998] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 244.390614][T13000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.404843][T12996] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 244.412815][T12991] vcan1: entered promiscuous mode [ 244.418122][T12991] vcan1: entered allmulticast mode [ 244.425651][T12991] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 244.438276][T12991] bond5: (slave vcan1): Error -95 calling set_mac_address [ 244.536101][T13000] bond6: (slave bridge9): making interface the new active one [ 244.546744][T13000] bridge9: entered promiscuous mode [ 244.554825][T13000] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 244.597761][T13009] bond6: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.614003][T13009] bond6: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 244.653976][T13011] __nla_validate_parse: 11 callbacks suppressed [ 244.653997][T13011] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1836'. [ 244.786608][T13023] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 244.796288][T13023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1839'. [ 244.899467][ T60] net_ratelimit: 10 callbacks suppressed [ 244.899486][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 245.045133][ T29] audit: type=1804 audit(1772894160.549:10): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1844" name="/newroot/345/memory.events" dev="tmpfs" ino=1781 res=1 errno=0 [ 245.119420][ T29] audit: type=1800 audit(1772894160.549:11): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1844" name="memory.events" dev="tmpfs" ino=1781 res=0 errno=0 [ 245.250888][T13049] tipc: Enabled bearer , priority 0 [ 245.314342][T13049] syzkaller0: entered promiscuous mode [ 245.320248][T13049] syzkaller0: entered allmulticast mode [ 245.326677][T13049] tipc: Resetting bearer [ 245.358409][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 245.402461][T13047] tipc: Resetting bearer [ 245.603006][T13068] validate_nla: 7 callbacks suppressed [ 245.603025][T13068] netlink: 'syz.4.1850': attribute type 21 has an invalid length. [ 245.656484][T13072] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1850'. [ 245.675257][T13073] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1850'. [ 245.803147][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 245.841548][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 245.873540][T13079] netlink: 'syz.2.1853': attribute type 14 has an invalid length. [ 245.883785][T13079] netlink: 'syz.2.1853': attribute type 11 has an invalid length. [ 246.995992][T13047] tipc: Disabling bearer [ 247.009656][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 247.021627][ T797] tipc: Node number set to 2624482195 [ 247.155452][T13094] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1858'. [ 247.212511][T13097] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 247.238518][T13098] netlink: 'syz.2.1859': attribute type 4 has an invalid length. [ 247.258563][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 247.273945][T13095] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.349025][T13095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.386960][T13112] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.396730][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 247.406954][T13106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1861'. [ 247.419494][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 247.442011][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1861'. [ 247.545083][T13095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.631670][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 247.685366][T13131] ip6t_srh: unknown srh match flags 4000 [ 247.722860][T13095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.802601][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 247.817683][T13133] netlink: 'syz.3.1866': attribute type 14 has an invalid length. [ 247.844803][ T29] audit: type=1107 audit(1772894163.349:12): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+#X_&Aы/R/ALQ/[ϓG$r,$T즈+.+za1T[*yM3<hm~و [ 247.844803][ T29] -Z`jw$ ~[? QoEQ}x7j!J29UF|nlwܱI5L~/%C|V@|wJ\({u)Dl@T5eRF`l>Lgʖ' [ 247.852144][T13133] netlink: 'syz.3.1866': attribute type 12 has an invalid length. [ 247.930353][ T29] audit: type=1107 audit(1772894163.349:13): pid=13138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+#X_&Aы/R/ALQ/[ϓG$r,$T즈+.+za1T[*yM3<hm~و [ 247.930353][ T29] -Z`jw$ ~[? QoEQ}x7j!J29UF|nlwܱI5L~/%C|V@|wJ\({u)Dl@T5eRF`l>Lgʖ' [ 248.025243][T13095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.052440][T13153] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 248.078896][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 248.175681][ T8160] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.210892][T13160] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 248.226823][ T8160] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.306750][ T8160] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.328915][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 248.358125][T13168] netlink: 'syz.2.1876': attribute type 10 has an invalid length. [ 248.359919][ T8160] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.459891][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.020336][ T8296] net_ratelimit: 12 callbacks suppressed [ 250.020382][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.138681][T13254] __nla_validate_parse: 12 callbacks suppressed [ 250.138701][T13254] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1900'. [ 250.181373][T13256] openvswitch: netlink: VXLAN extension message has 4393 unknown bytes. [ 250.234705][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1902'. [ 250.255896][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1902'. [ 250.265859][T13258] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1902'. [ 250.288480][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.314949][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 250.398705][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.561282][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.688936][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.799101][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 250.909470][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 251.018304][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 251.109488][T13307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1918'. [ 251.119737][T13307] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1918'. [ 251.139588][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 251.555641][T13336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.636529][T13336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.663043][T13336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 251.898728][T13336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.918303][T13336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.931295][T13336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 251.977500][T13359] validate_nla: 3 callbacks suppressed [ 251.977518][T13359] netlink: 'syz.3.1929': attribute type 16 has an invalid length. [ 252.053806][T13359] nbd: must specify at least one socket [ 252.115785][T13336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.140298][T13336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.152300][T13336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.287220][T13336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.299901][T13336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.312623][T13336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.496721][T13375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1933'. [ 252.767320][ T8296] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.776217][ T8296] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.785714][ T8296] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.824778][ T8296] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.838334][ T8296] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.852438][ T8296] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.872127][T13393] syzkaller1: entered promiscuous mode [ 252.877634][T13393] syzkaller1: entered allmulticast mode [ 252.913080][ T8292] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.921531][ T8292] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.938384][ T8292] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.975036][ T42] IPVS: starting estimator thread 0... [ 253.096041][ T8160] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.105587][T13400] IPVS: using max 36 ests per chain, 86400 per kthread [ 253.114772][ T8160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.123588][ T8160] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.129898][T13402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1942'. [ 253.221225][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1942'. [ 254.601744][T13460] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 254.695080][T13467] xt_hashlimit: size too large, truncated to 1048576 [ 254.723169][T13462] ip6tnl0: left promiscuous mode [ 254.738103][T13462] ip6tnl0: left allmulticast mode [ 254.781896][T13462] bridge0: port 1(gretap0) entered blocking state [ 254.784894][T13476] netlink: 'syz.4.1960': attribute type 12 has an invalid length. [ 254.788597][T13462] bridge0: port 1(gretap0) entered forwarding state [ 254.809725][T13476] netlink: 'syz.4.1960': attribute type 11 has an invalid length. [ 254.843037][T13472] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 254.941244][T13481] macsec2: entered allmulticast mode [ 254.946723][T13481] syz_tun: entered allmulticast mode [ 254.956089][T13481] syz_tun: left allmulticast mode [ 255.026131][T13483] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 255.119309][ T8160] net_ratelimit: 24 callbacks suppressed [ 255.119329][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.249765][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.369059][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.488342][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.598381][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.634162][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719381][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.828322][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 255.951358][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 256.098689][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 256.293036][T13543] __nla_validate_parse: 9 callbacks suppressed [ 256.293054][T13543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'. [ 256.343054][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 256.601007][T13554] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1980'. [ 256.782976][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 257.637960][T13594] netlink: 'syz.0.1990': attribute type 5 has an invalid length. [ 258.174900][T13606] pim6reg1: entered allmulticast mode [ 258.351790][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1998'. [ 258.389312][T13618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1998'. [ 258.748880][T13639] vlan1: entered promiscuous mode [ 258.754134][T13639] vlan1: entered allmulticast mode [ 258.858644][T13639] geneve1: entered allmulticast mode [ 258.980033][T13639] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 258.989983][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 258.999375][T13639] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2004'. [ 259.095003][T13667] netlink: 'syz.4.2011': attribute type 15 has an invalid length. [ 259.231150][T13671] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2013'. [ 259.378867][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 259.631663][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 259.856128][T13716] ip6gretap0: entered promiscuous mode [ 260.212007][T13733] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 260.300261][ T8296] net_ratelimit: 25 callbacks suppressed [ 260.300279][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 260.364771][T13733] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 260.408633][T13740] veth11: entered promiscuous mode [ 260.416846][T13740] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 260.432194][ T8296] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.454761][T13733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.479519][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 260.548634][T13750] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 260.569288][ T8322] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.629994][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 260.769956][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 260.892347][T13765] batman_adv: batadv0: Adding interface: macvlan1 [ 260.949930][T13765] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.018309][T13765] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 261.049513][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 261.146655][T13779] SET target dimension over the limit! [ 261.167700][T13780] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 261.190031][T13772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.250168][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 261.371310][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 261.447590][T13795] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 261.448659][T13793] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 261.771250][T13818] netlink: 'syz.4.2057': attribute type 13 has an invalid length. [ 262.501240][T13866] gretap1: entered promiscuous mode [ 262.534555][T13866] batman_adv: batadv0: Adding interface: gretap1 [ 262.578358][T13866] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 262.652604][T13866] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 263.395230][T13906] __nla_validate_parse: 6 callbacks suppressed [ 263.395250][T13906] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2079'. [ 263.467282][T13909] "syz.1.2080" (13909) uses obsolete ecb(arc4) skcipher [ 263.475023][T13906] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.526525][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2080'. [ 263.732446][T13913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2081'. [ 263.825523][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 263.871771][T13920] : entered promiscuous mode [ 264.352293][T13895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2074'. [ 264.404208][T13895] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2074'. [ 264.562127][T13940] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 264.582025][T13940] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 264.806799][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2095'. [ 264.850579][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2095'. [ 265.318782][ T8296] net_ratelimit: 33 callbacks suppressed [ 265.318801][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.405680][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 265.448359][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.559022][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.668535][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.778381][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.888296][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 265.998284][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 266.140517][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 266.248733][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 266.315899][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 266.439598][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 266.484433][T14019] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.591063][T14019] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.971607][T14047] netlink: 'syz.3.2118': attribute type 13 has an invalid length. [ 267.004300][T14047] netlink: 'syz.3.2118': attribute type 17 has an invalid length. [ 267.027405][T14047] lo: left allmulticast mode [ 267.290780][T14047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.316987][T14063] mac80211_hwsim hwsim8 wlan0: default FDB implementation only supports local addresses [ 267.864673][T14083] : renamed from team_slave_1 [ 268.177551][T14095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.553100][T14118] __nla_validate_parse: 5 callbacks suppressed [ 268.553120][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 268.795838][T14133] unsupported nlmsg_type 40 [ 268.804246][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 269.005762][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 269.355337][T14160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2147'. [ 269.365470][T14159] Cannot find set identified by id 0 to match [ 269.914110][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2154'. [ 270.077006][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 270.088053][T14195] x_tables: unsorted entry at hook 3 [ 270.332852][T14211] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2161'. [ 270.501772][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 270.661300][ T8296] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.675676][ T8296] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.693882][ T8296] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.708558][ T8296] net_ratelimit: 28 callbacks suppressed [ 270.708579][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 270.751116][ T60] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.825375][T14227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.869247][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 270.891900][T14227] sctp: [Deprecated]: syz.2.2168 (pid 14227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.891900][T14227] Use struct sctp_sack_info instead [ 270.934000][T14227] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2168'. [ 271.278304][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 271.408795][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 271.529698][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 271.649253][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 271.694911][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2180'. [ 271.726450][T14277] batadv0: entered promiscuous mode [ 271.779069][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 271.889512][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 272.000045][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 272.087586][T14286] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 272.117226][T14286] netlink: 'syz.2.2183': attribute type 22 has an invalid length. [ 272.361883][T14295] tunl0: Caught tx_queue_len zero misconfig [ 272.711884][T14303] bridge7: entered promiscuous mode [ 273.573294][T14341] __nla_validate_parse: 3 callbacks suppressed [ 273.573317][T14341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2202'. [ 273.689774][T14341] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2202'. [ 274.024990][T14363] netlink: 'syz.2.2207': attribute type 13 has an invalid length. [ 274.073572][T14372] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.126717][T14372] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 274.159262][T14372] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.261820][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.272468][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.291157][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.315922][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2212'. [ 274.480464][T14393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.487854][T14393] IPv6: NLM_F_CREATE should be set when creating new route [ 274.495146][T14393] IPv6: NLM_F_CREATE should be set when creating new route [ 274.502414][T14393] IPv6: NLM_F_CREATE should be set when creating new route [ 274.666116][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 274.850946][T14413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2222'. [ 275.429469][T14440] Cannot find add_set index 0 as target [ 275.838372][ T8318] net_ratelimit: 27 callbacks suppressed [ 275.838392][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 275.891516][T14475] pim6reg: entered allmulticast mode [ 276.041544][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.216695][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.399311][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.589305][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.622694][T14514] netlink: 'syz.1.2247': attribute type 5 has an invalid length. [ 276.698414][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.924494][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 276.993225][T14525] IPVS: Scheduler module ip_vs_sip not found [ 277.051882][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 277.196496][T14534] syzkaller0: entered promiscuous mode [ 277.207731][T14534] syzkaller0: entered allmulticast mode [ 277.279144][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 277.384410][T14538] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 277.389873][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 278.611925][T14587] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 278.664435][T14587] bond3: entered promiscuous mode [ 278.671847][T14587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.690069][T14587] tipc: Enabling of bearer <eth:ca0> rejected, media not registered [ 278.715078][T14587] __nla_validate_parse: 10 callbacks suppressed [ 278.715099][T14587] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2272'. [ 278.734406][T14587] 0X: renamed from caif0 [ 278.750782][T14587] 0X: entered allmulticast mode [ 278.794785][T14582] tipc: Enabled bearer , priority 0 [ 278.833731][T14600] vlan4: entered promiscuous mode [ 278.843349][T14600] macvlan0: entered promiscuous mode [ 278.865991][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2270'. [ 278.882484][T14581] tipc: Resetting bearer [ 278.890322][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 278.900672][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 278.933209][T14581] tipc: Disabling bearer [ 278.976105][ T8292] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 278.984943][ T8292] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.022224][ T8292] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.045297][ T8292] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.107479][T14613] netlink: 'syz.2.2278': attribute type 11 has an invalid length. [ 279.595082][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 280.072240][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 280.152706][T14673] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2296'. [ 280.181827][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2299'. [ 280.326072][T14682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2301'. [ 280.978017][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 281.076066][ T8292] net_ratelimit: 25 callbacks suppressed [ 281.076087][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 281.260571][T14716] netlink: 'syz.3.2308': attribute type 4 has an invalid length. [ 281.278665][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 281.304351][T14722] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 281.437210][T14721] syzkaller0: entered promiscuous mode [ 281.442951][T14721] syzkaller0: entered allmulticast mode [ 281.456443][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.591354][T14741] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 281.691272][T14746] netlink: 'syz.3.2308': attribute type 4 has an invalid length. [ 283.087225][T14741] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 283.100042][T14741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.138506][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 283.269079][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 283.311618][T14770] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 283.397043][ T8160] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 283.435764][T14780] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.444210][T14773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.481058][T14781] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 283.509681][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 283.569490][T14787] netlink: 'syz.3.2328': attribute type 4 has an invalid length. [ 283.621808][T14789] SET target dimension over the limit! [ 283.639563][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 283.971671][T14809] __nla_validate_parse: 9 callbacks suppressed [ 283.971692][T14809] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2333'. [ 284.057778][T14815] xt_hashlimit: size too large, truncated to 1048576 [ 284.129742][T14818] xt_connbytes: Forcing CT accounting to be enabled [ 284.136488][T14818] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.773504][T14834] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2341'. [ 285.055705][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 285.074205][T14856] ip6gretap3: entered promiscuous mode [ 285.081089][T14856] ip6gretap3: entered allmulticast mode [ 285.496352][T14872] netlink: 'syz.0.2352': attribute type 1 has an invalid length. [ 285.637059][T14875] netlink: 'syz.3.2353': attribute type 10 has an invalid length. [ 285.683811][T14875] bond0: (slave wlan1): Opening slave failed [ 286.078404][ T60] net_ratelimit: 18 callbacks suppressed [ 286.078424][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 286.102963][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 286.126749][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 286.147504][T14907] netlink: 58 bytes leftover after parsing attributes in process `syz.4.2363'. [ 286.399910][ T8318] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 286.532797][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 286.580804][T14929] netlink: 'syz.3.2372': attribute type 7 has an invalid length. [ 286.615884][ T8318] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.635909][ T8318] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.683662][ T8318] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.716493][ T8318] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.738365][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 286.848277][ T8296] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 286.861517][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 286.959495][T14950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2378'. [ 286.974441][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 287.030005][T14956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2381'. [ 287.070786][T14956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2381'. [ 287.119273][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 287.256717][T14975] netlink: 'syz.1.2384': attribute type 1 has an invalid length. [ 287.264598][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 287.269981][T14978] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 287.386569][T14985] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 287.410479][T14985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.429593][T14977] netlink: 'syz.0.2385': attribute type 2 has an invalid length. [ 287.437479][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 287.468112][T14991] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 287.534348][T14996] macvlan5: entered promiscuous mode [ 287.541535][T14996] macvlan5: entered allmulticast mode [ 287.582751][T14998] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.597489][T14998] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 287.644485][T14980] bond7: (slave ip6gretap0): making interface the new active one [ 287.655224][T14980] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 287.666836][T14991] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.705129][T14998] macvlan2: entered promiscuous mode [ 287.713107][T14998] macvlan2: entered allmulticast mode [ 287.720679][T14998] bond8: entered promiscuous mode [ 287.727343][T14998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.759396][T14998] bond8: left promiscuous mode [ 287.765891][T15011] netlink: 'syz.0.2391': attribute type 1 has an invalid length. [ 287.867355][T15006] bond0: (slave dummy0): Releasing backup interface [ 287.877641][T15006] dummy0: left promiscuous mode [ 287.887112][T15013] tipc: Resetting bearer [ 287.940016][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 287.997644][T15012] tipc: Resetting bearer [ 288.461199][T15056] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 288.766253][T15072] pimreg: tun_chr_ioctl cmd 1074025673 [ 288.830413][ T8308] tipc: Resetting bearer [ 288.844519][T15071] pimreg: tun_chr_ioctl cmd 1074025677 [ 288.850235][T15071] pimreg: linktype set to 1 [ 288.873607][T15083] ip6erspan0: entered allmulticast mode [ 289.050147][T15088] __nla_validate_parse: 18 callbacks suppressed [ 289.050167][T15088] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2414'. [ 289.144766][T15102] netlink: 'syz.2.2418': attribute type 2 has an invalid length. [ 289.153209][T15102] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2418'. [ 289.180311][T15095] tipc: Enabling of bearer rejected, media not registered [ 289.366951][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 289.497036][T15124] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2422'. [ 289.696338][T15137] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2425'. [ 289.712741][T15134] tipc: Enabling of bearer rejected, failed to enable media [ 289.770048][T15140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2427'. [ 289.786873][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2427'. [ 289.863780][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 289.907098][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 290.074131][T15158] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2431'. [ 290.096098][T15158] netlink: 'syz.2.2431': attribute type 1 has an invalid length. [ 290.106614][T15160] netlink: 'syz.3.2432': attribute type 5 has an invalid length. [ 290.204162][T15162] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 290.700525][T15186] batadv_slave_1: entered promiscuous mode [ 290.713358][T15186] batman_adv: batadv0: Removing interface: ipvlan2 [ 290.724021][T15186] batman_adv: batadv0: Removing interface: ipvlan3 [ 290.734645][T15186] batadv_slave_1 (unregistering): left promiscuous mode [ 290.785579][T15185] syzkaller0: entered promiscuous mode [ 290.792467][T15185] syzkaller0: entered allmulticast mode [ 291.020834][T15199] SET target dimension over the limit! [ 291.189902][ T8322] net_ratelimit: 20 callbacks suppressed [ 291.189922][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.272172][T15221] tipc: Failed to remove unknown binding: 66,1,1/2529103944:2659495967/2659495969 [ 291.282315][T15221] tipc: Failed to remove unknown binding: 66,1,1/2529103944:2659495967/2659495969 [ 291.318577][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.439811][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.562567][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.698906][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.820029][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 291.924221][T15263] netlink: 'syz.1.2465': attribute type 1 has an invalid length. [ 291.932179][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 292.051959][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 292.238503][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 292.253112][T15280] 8021q: VLANs not supported on ip6gre0 [ 292.360646][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 292.690559][T15301] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 292.743101][T15301] bond8 (unregistering): Released all slaves [ 292.817475][T15320] batman_adv: batadv0: Adding interface: ipvlan0 [ 292.833654][T15320] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.860889][T15320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.888607][T15320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.905183][T15320] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 293.179536][T15341] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 293.183907][T15339] ksmbd: Unknown IPC event: 1, ignore. [ 293.248030][T15341] bond10: entered promiscuous mode [ 293.268868][T15341] bond10: entered allmulticast mode [ 293.294407][T15341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.383901][ T42] IPVS: starting estimator thread 0... [ 294.447789][T15411] __nla_validate_parse: 21 callbacks suppressed [ 294.447811][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 294.479196][T15418] IPVS: using max 31 ests per chain, 74400 per kthread [ 294.580619][T15428] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2512'. [ 294.806851][T15447] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2518'. [ 294.950382][T15451] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 294.963665][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2520'. [ 294.998007][T15455] x_tables: duplicate underflow at hook 1 [ 295.014275][T15453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2520'. [ 295.127788][T15463] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 295.153010][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2525'. [ 295.300912][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 295.417945][T15479] vlan3: entered allmulticast mode [ 295.423528][T15479] bridge10: entered allmulticast mode [ 295.600995][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 295.611672][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'. [ 295.676130][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 295.685682][T15502] bridge_slave_0: default FDB implementation only supports local addresses [ 295.723727][T15502] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 296.364431][T15544] xt_l2tp: wrong L2TP version: 0 [ 296.389677][T15541] netlink: 'syz.1.2544': attribute type 11 has an invalid length. [ 296.397644][T15541] netlink: 'syz.1.2544': attribute type 23 has an invalid length. [ 296.592632][ T3584] net_ratelimit: 23 callbacks suppressed [ 296.592653][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 296.729658][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 296.838602][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.072705][ T8292] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.118714][ T5898] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 297.232623][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.248479][ T5898] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 297.273974][ T3584] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 297.357677][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.414412][T15604] ip6tnl3: entered allmulticast mode [ 297.458645][T15610] batadv_slave_0: entered promiscuous mode [ 297.502444][T15610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.530252][T15609] batadv_slave_0: left promiscuous mode [ 297.559711][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.669687][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.779019][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 297.811829][T15629] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 298.620482][T15677] IPVS: set_ctl: invalid protocol: 181 0.0.0.0:20002 [ 298.783149][T15692] bond4: option packets_per_slave: invalid value (1048582) [ 298.841737][T15692] bond4: option packets_per_slave: allowed values 0 - 65535 [ 298.881404][T15692] bond4 (unregistering): Released all slaves [ 299.024905][T15708] IPVS: Scheduler module ip_vs_sip not found [ 299.077232][T15699] 8021q: adding VLAN 0 to HW filter on device bond9 [ 299.396367][T15725] xt_socket: unknown flags 0xfc [ 299.691954][T15733] __nla_validate_parse: 7 callbacks suppressed [ 299.691970][T15733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2591'. [ 299.707829][T15734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2591'. [ 299.743298][T15733] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 299.980635][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'. [ 300.207082][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 300.264263][T15778] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2601'. [ 300.341311][T15776] netlink: 'syz.0.2602': attribute type 24 has an invalid length. [ 300.479495][T15782] macvlan0: entered promiscuous mode [ 300.494450][T15782] netlink: 'syz.1.2603': attribute type 2 has an invalid length. [ 300.837699][T15797] x_tables: duplicate underflow at hook 1 [ 301.223830][T15821] nft_compat: unsupported protocol 5 [ 301.414046][ T5890] IPVS: starting estimator thread 0... [ 301.423176][T15825] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2615'. [ 301.474445][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2617'. [ 301.477872][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 301.502565][T15833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2617'. [ 301.519396][T15836] IPVS: using max 27 ests per chain, 64800 per kthread [ 301.539369][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2617'. [ 301.575929][T15835] netlink: 'syz.3.2618': attribute type 3 has an invalid length. [ 301.723648][T15848] netlink: 'syz.4.2622': attribute type 3 has an invalid length. [ 301.749272][T15846] xt_hashlimit: size too large, truncated to 1048576 [ 301.846709][T15853] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 301.854339][T15853] syzkaller1: linktype set to 260 [ 301.898316][ T8322] net_ratelimit: 28 callbacks suppressed [ 301.898336][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 301.979315][T15862] netlink: 'syz.2.2628': attribute type 4 has an invalid length. [ 302.019779][T15863] netlink: 'syz.2.2628': attribute type 4 has an invalid length. [ 302.112443][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 302.307145][T15867] syzkaller0: entered promiscuous mode [ 302.324526][T15867] syzkaller0: entered allmulticast mode [ 302.376438][T15880] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 302.441720][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 302.600205][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 302.738581][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 302.849232][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 303.202550][T15932] netlink: 'syz.4.2648': attribute type 16 has an invalid length. [ 303.216091][T15932] netlink: 'syz.4.2648': attribute type 17 has an invalid length. [ 304.456690][T15933] 8021q: VLANs not supported on ip6gre0 [ 304.490000][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 304.595757][T15932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.606570][T15932] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.620512][T15932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.638663][ T8322] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 304.768973][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 304.769554][T15961] __nla_validate_parse: 4 callbacks suppressed [ 304.769571][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2653'. [ 304.796647][T15959] netlink: 'syz.2.2655': attribute type 22 has an invalid length. [ 305.019395][T15975] netlink: 'syz.1.2658': attribute type 13 has an invalid length. [ 305.037503][T15975] netlink: 'syz.1.2658': attribute type 17 has an invalid length. [ 305.195376][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 305.432171][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 305.644671][T16007] bond8: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 305.659789][T16007] bond8 (unregistering): Released all slaves [ 305.806696][T16015] tipc: Invalid UDP bearer configuration [ 305.806741][T16015] tipc: Enabling of bearer rejected, failed to enable media [ 306.335177][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 306.346545][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 306.567997][T16064] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 306.600913][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'. [ 306.872787][T16049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2678'. [ 306.914342][T16049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2678'. [ 306.997198][T16049] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2678'. [ 307.071468][ T8315] net_ratelimit: 11 callbacks suppressed [ 307.071489][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.240737][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.371987][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.473128][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 307.501033][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.629911][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.743809][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.868583][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 307.933556][ T5142] block nbd0: Receive control failed (result -32) [ 307.979309][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 308.064380][T16116] netlink: 'syz.0.2694': attribute type 13 has an invalid length. [ 308.088269][T16116] netlink: 'syz.0.2694': attribute type 17 has an invalid length. [ 308.089586][ T8321] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 308.155523][T16116] sit0: left promiscuous mode [ 308.190987][T16116] bridge0: left allmulticast mode [ 308.202891][T16116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.212781][T16116] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.223154][T16116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.242909][T16120] netlink: 'syz.3.2693': attribute type 1 has an invalid length. [ 308.291883][T16120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.397534][T16120] macvlan4: entered promiscuous mode [ 308.404266][T16120] macvlan4: entered allmulticast mode [ 308.421320][T16133] xt_policy: output policy not valid in PREROUTING and INPUT [ 308.799195][T16160] netlink: 'syz.1.2706': attribute type 21 has an invalid length. [ 308.807245][T16160] netlink: 'syz.1.2706': attribute type 3 has an invalid length. [ 308.919216][T16169] netlink: 'syz.0.2709': attribute type 2 has an invalid length. [ 309.094208][T16180] netlink: 'syz.3.2715': attribute type 21 has an invalid length. [ 309.116898][T16180] netlink: 'syz.3.2715': attribute type 5 has an invalid length. [ 309.127253][T16175] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 309.135371][T16175] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 309.207508][T16180] veth5: entered promiscuous mode [ 309.691455][T16215] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 309.977788][T16231] __nla_validate_parse: 46 callbacks suppressed [ 309.977808][T16231] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2731'. [ 310.312490][T16249] bridge10: entered promiscuous mode [ 310.364299][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2739'. [ 310.373596][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2739'. [ 310.495658][T16262] netlink: 'syz.4.2742': attribute type 6 has an invalid length. [ 310.563946][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 310.741050][T16277] vxcan2: entered allmulticast mode [ 310.951192][T16281] lo speed is unknown, defaulting to 1000 [ 310.957021][T16281] lo speed is unknown, defaulting to 1000 [ 310.973700][T16281] lo speed is unknown, defaulting to 1000 [ 311.021093][T16281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.129644][T16281] lo speed is unknown, defaulting to 1000 [ 311.144578][T16281] lo speed is unknown, defaulting to 1000 [ 311.157236][T16281] lo speed is unknown, defaulting to 1000 [ 311.166037][T16281] lo speed is unknown, defaulting to 1000 [ 311.174874][T16281] lo speed is unknown, defaulting to 1000 [ 311.808968][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 311.839606][T16313] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 311.847739][T16313] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2754'. [ 312.179559][ T3584] net_ratelimit: 32 callbacks suppressed [ 312.179577][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.284885][T16341] syzkaller0: entered promiscuous mode [ 312.306163][T16341] syzkaller0: entered allmulticast mode [ 312.319688][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.329683][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 312.349610][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 312.448962][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.559969][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.599242][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 312.669712][ T8308] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.779427][ T3584] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 312.822292][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 312.889761][ T8304] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 313.000291][ T8304] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 313.091959][T16387] lo speed is unknown, defaulting to 1000 [ 313.259221][ T8304] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 313.437300][T16404] sctp: [Deprecated]: syz.1.2782 (pid 16404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.437300][T16404] Use struct sctp_sack_info instead [ 313.453818][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 313.517195][T16408] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 313.604997][T16415] 8021q: VLANs not supported on ip6gre0 [ 313.773023][T16430] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 313.861761][T16430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.883508][T16433] bond7: (slave gretap3): making interface the new active one [ 313.896103][T16433] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 313.958710][T16430] bond7 (unregistering): (slave gretap3): Releasing active interface [ 313.993137][T16430] bond7 (unregistering): Released all slaves [ 314.223577][T16453] team1: entered promiscuous mode [ 314.232444][T16453] team1: entered allmulticast mode [ 314.238008][T16453] 8021q: adding VLAN 0 to HW filter on device team1 [ 314.297148][T16453] team2: entered promiscuous mode [ 314.302634][T16453] team2: entered allmulticast mode [ 314.308714][T16453] 8021q: adding VLAN 0 to HW filter on device team2 [ 314.529745][T16474] netlink: 'syz.3.2808': attribute type 13 has an invalid length. [ 314.983817][T16481] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 315.016888][T16485] __nla_validate_parse: 9 callbacks suppressed [ 315.016911][T16485] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2807'. [ 315.095182][T16494] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.105660][T16494] team0: Port device bond11 added [ 315.284127][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 315.321030][T16503] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2812'. [ 315.348037][T16507] netlink: 'syz.1.2814': attribute type 1 has an invalid length. [ 315.357532][T16505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2813'. [ 315.388581][T16507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.399269][ T5890] IPVS: starting estimator thread 0... [ 315.404389][T16507] vlan3: entered promiscuous mode [ 315.407184][T16505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2813'. [ 315.410418][T16507] bond11: entered promiscuous mode [ 315.410572][T16507] vlan3: entered allmulticast mode [ 315.410585][T16507] bond11: entered allmulticast mode [ 315.489229][T16511] IPVS: using max 39 ests per chain, 93600 per kthread [ 315.502843][T16518] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2817'. [ 315.515034][T16520] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2812'. [ 315.525249][T16505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2813'. [ 315.559459][T16518] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2817'. [ 315.609318][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'. [ 315.822712][T16532] syzkaller0: entered promiscuous mode [ 315.834975][T16532] syzkaller0: entered allmulticast mode [ 315.889539][T16532] tipc: Enabled bearer , priority 0 [ 315.914727][T16532] tipc: Resetting bearer [ 315.956252][T16529] tipc: Resetting bearer [ 316.008687][T16529] tipc: Disabling bearer [ 316.209281][T16556] set match dimension is over the limit! [ 316.216194][T16556] bridge0: Caught tx_queue_len zero misconfig [ 316.315423][T16558] lo speed is unknown, defaulting to 1000 [ 317.112786][T16609] tipc: Resetting bearer [ 317.182402][T16622] ipt_REJECT: TCP_RESET invalid for non-tcp [ 317.193091][T16623] ipt_REJECT: TCP_RESET invalid for non-tcp [ 317.420313][ T8298] net_ratelimit: 380 callbacks suppressed [ 317.420342][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 317.545746][T16633] vlan2: entered promiscuous mode [ 317.679693][T16615] bond0: (slave netdevsim0): Releasing backup interface [ 317.727237][T16608] tipc: Resetting bearer [ 317.768828][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.008399][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.079232][T16657] netlink: 'syz.0.2854': attribute type 2 has an invalid length. [ 318.080002][T16655] lo: Caught tx_queue_len zero misconfig [ 318.130830][T16657] hmac(sha224: entered promiscuous mode [ 318.145381][ T8315] tipc: Resetting bearer [ 318.168305][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.279268][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.402151][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.550043][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.669100][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.756456][T16713] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 318.798924][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 318.918885][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 319.265989][T16743] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 319.281457][T16743] pim6reg1: linktype set to 805 [ 319.626627][T16767] .70: renamed from hsr0 [ 319.638924][T16767] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.650246][T16767] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.661520][T16767] .70: entered allmulticast mode [ 319.666692][T16767] hsr_slave_0: entered allmulticast mode [ 319.674688][T16767] hsr_slave_1: entered allmulticast mode [ 319.823274][T16780] bridge0: port 1(gretap0) entered disabled state [ 320.104109][T16782] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.108228][T16786] __nla_validate_parse: 21 callbacks suppressed [ 320.108247][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'. [ 320.220543][T16786] bond8 (unregistering): Released all slaves [ 320.336832][T16789] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2890'. [ 320.901702][T16823] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 320.949558][T16823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2900'. [ 321.017200][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 321.194491][ T5142] block nbd1: Receive control failed (result -32) [ 321.642681][T16873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2915'. [ 321.754632][T16879] lo speed is unknown, defaulting to 1000 [ 321.871696][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 321.970367][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.996090][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.004671][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.023198][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.034184][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.103527][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.116529][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.125015][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.133702][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.143099][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.153930][T16901] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 322.182146][T16901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2922'. [ 322.231180][T16898] ip6tnl0: Caught tx_queue_len zero misconfig [ 322.377935][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'. [ 322.426317][T16907] netlink: 'syz.1.2923': attribute type 13 has an invalid length. [ 322.441360][T16907] netlink: 'syz.1.2923': attribute type 12 has an invalid length. [ 322.450529][T16891] lo speed is unknown, defaulting to 1000 [ 322.460932][ T8331] net_ratelimit: 24 callbacks suppressed [ 322.460949][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 322.520265][T16915] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2925'. [ 322.599333][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 322.720717][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 322.749606][T16927] netlink: 'syz.1.2928': attribute type 3 has an invalid length. [ 322.793402][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 322.805570][T16891] chnl_net:caif_netlink_parms(): no params data found [ 323.042967][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.053092][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.061124][T16891] bridge_slave_0: entered allmulticast mode [ 323.069396][T16891] bridge_slave_0: entered promiscuous mode [ 323.078976][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.086176][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.095341][T16891] bridge_slave_1: entered allmulticast mode [ 323.106922][T16891] bridge_slave_1: entered promiscuous mode [ 323.143454][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.155709][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.238901][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 323.254256][T16891] team0: Port device team_slave_0 added [ 323.284439][T16891] team0: Port device team_slave_1 added [ 323.428184][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.435177][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.524039][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.542462][T16975] team_slave_1: Caught tx_queue_len zero misconfig [ 323.570163][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.587779][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.637955][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.662043][T16980] xt_bpf: check failed: parse error [ 323.690294][T16976] lo speed is unknown, defaulting to 1000 [ 323.775015][T16891] hsr_slave_0: entered promiscuous mode [ 323.783188][T16891] hsr_slave_1: entered promiscuous mode [ 324.043060][T16988] syzkaller1: entered promiscuous mode [ 324.059396][T16988] syzkaller1: entered allmulticast mode [ 324.189998][ T5142] Bluetooth: hci5: command tx timeout [ 324.416628][T17018] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 324.469036][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 324.599115][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 324.714740][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 324.888325][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 324.941102][T16891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.007897][T16891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.077406][T16891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.095676][T16891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.280286][T17077] syzkaller0: entered promiscuous mode [ 325.286329][T17077] syzkaller0: entered allmulticast mode [ 325.350290][ T8326] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 325.363763][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.404462][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.423706][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.430948][ T8326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.454213][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.461417][ T8326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.501770][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 325.624887][T17098] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 325.767137][T17102] tipc: Resetting bearer [ 325.836042][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.889824][T17107] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 325.903794][T17109] lo speed is unknown, defaulting to 1000 [ 325.969720][T17115] __nla_validate_parse: 2 callbacks suppressed [ 325.969740][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 326.043248][T16891] veth0_vlan: entered promiscuous mode [ 326.081604][T16891] veth1_vlan: entered promiscuous mode [ 326.207788][T16891] veth0_macvtap: entered promiscuous mode [ 326.270170][ T5142] Bluetooth: hci5: command tx timeout [ 326.282175][T16891] veth1_macvtap: entered promiscuous mode [ 326.305958][T17128] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2978'. [ 326.352420][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.385481][T17131] syzkaller1: entered promiscuous mode [ 326.405089][T17131] syzkaller1: entered allmulticast mode [ 326.423158][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.503553][ T8326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.521535][ T8326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.541097][ T8326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.559851][ T8326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.592420][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'. [ 326.645213][T17149] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2985'. [ 326.872359][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.901895][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.041762][ T8304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.063307][ T8304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.349932][T17185] netlink: 'syz.0.2995': attribute type 1 has an invalid length. [ 327.577435][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 327.587196][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 327.638533][T17193] netlink: 'syz.1.2997': attribute type 4 has an invalid length. [ 327.687545][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.692203][T17188] sit1: entered promiscuous mode [ 327.722314][T17197] netlink: 'syz.1.2997': attribute type 4 has an invalid length. [ 327.731642][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.759643][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.802359][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.821933][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.829783][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 327.894155][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 327.908295][ T8304] net_ratelimit: 8 callbacks suppressed [ 327.908315][ T8304] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 328.203728][T17195] lo speed is unknown, defaulting to 1000 [ 328.222726][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 328.348281][ T5831] Bluetooth: hci5: command tx timeout [ 328.369660][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 328.479810][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 328.602055][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 328.637423][T17195] chnl_net:caif_netlink_parms(): no params data found [ 328.662383][T17238] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 328.663197][T17231] syzkaller0: entered promiscuous mode [ 328.691153][T17231] syzkaller0: entered allmulticast mode [ 328.697817][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 329.038335][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 329.049318][T17255] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 329.167559][T17195] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.216010][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.224770][T17195] bridge_slave_0: entered allmulticast mode [ 329.232920][T17195] bridge_slave_0: entered promiscuous mode [ 329.279544][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 329.288672][T17195] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.295821][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.303808][T17195] bridge_slave_1: entered allmulticast mode [ 329.313458][T17195] bridge_slave_1: entered promiscuous mode [ 329.384093][T17275] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.410353][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.429820][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.452688][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 329.463017][T17283] netlink: 'syz.4.3016': attribute type 14 has an invalid length. [ 329.472333][T17283] netlink: 'syz.4.3016': attribute type 13 has an invalid length. [ 329.544201][T17195] team0: Port device team_slave_0 added [ 329.567404][T17195] team0: Port device team_slave_1 added [ 329.672013][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.687320][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.724663][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.740227][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 329.749429][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.757314][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.787604][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.851013][T17195] hsr_slave_0: entered promiscuous mode [ 329.861390][T17195] hsr_slave_1: entered promiscuous mode [ 329.868011][T17195] debugfs: 'hsr0' already exists in 'hsr' [ 329.874942][ T5831] Bluetooth: hci0: command tx timeout [ 329.882143][T17195] Cannot create hsr debugfs directory [ 329.909582][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 330.108910][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 330.206592][T17316] bond8: option packets_per_slave: invalid value (1048582) [ 330.218961][T17316] bond8: option packets_per_slave: allowed values 0 - 65535 [ 330.244554][T17316] bond8 (unregistering): Released all slaves [ 330.429548][ T5831] Bluetooth: hci5: command tx timeout [ 330.600048][T17328] ..0{X: renamed from gretap0 (while UP) [ 330.611781][T17328] ..0{X: entered allmulticast mode [ 330.673858][T17328] xfrm0: entered promiscuous mode [ 330.680424][T17328] xfrm0: entered allmulticast mode [ 330.750555][T17330] lo speed is unknown, defaulting to 1000 [ 330.933846][T17351] netlink: 'syz.2.3035': attribute type 13 has an invalid length. [ 331.129939][ T5898] lo speed is unknown, defaulting to 1000 [ 331.154189][T17351] tipc: Resetting bearer [ 331.263945][T17365] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 331.297300][T17195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.353533][T17195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.412877][T17330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.471416][T17195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.544574][T17195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.545317][T17386] __nla_validate_parse: 3 callbacks suppressed [ 331.545332][T17386] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3043'. [ 331.896581][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3049'. [ 331.925659][T17195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.950065][ T5831] Bluetooth: hci0: command tx timeout [ 331.967149][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 332.011983][T17195] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.014763][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 332.026386][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.037277][ T8323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.053956][T17419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3050'. [ 332.076165][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.083385][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.202240][T17426] netlink: 'syz.2.3050': attribute type 9 has an invalid length. [ 332.283907][T17429] netlink: 'syz.0.3053': attribute type 4 has an invalid length. [ 332.462149][T17424] lo speed is unknown, defaulting to 1000 [ 332.666004][T17195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.708001][T17456] xt_hashlimit: max too large, truncated to 1048576 [ 332.859411][T17464] netlink: 'syz.1.3057': attribute type 13 has an invalid length. [ 332.878077][T17464] netlink: 'syz.1.3057': attribute type 17 has an invalid length. [ 332.907763][T17464] netlink: 'syz.1.3057': attribute type 27 has an invalid length. [ 332.958532][T17195] veth0_vlan: entered promiscuous mode [ 332.971167][T17195] veth1_vlan: entered promiscuous mode [ 333.021379][T17195] veth0_macvtap: entered promiscuous mode [ 333.041412][T17195] veth1_macvtap: entered promiscuous mode [ 333.075798][T17195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.102365][T17195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.118812][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.127554][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.158948][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.186404][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 333.192505][T17474] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3060'. [ 333.196044][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.222992][ T1158] net_ratelimit: 13 callbacks suppressed [ 333.223009][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 333.237545][T17472] netlink: 'syz.4.3061': attribute type 2 has an invalid length. [ 333.359877][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 333.432976][T17484] netlink: 'syz.1.3063': attribute type 2 has an invalid length. [ 333.446880][T17484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3063'. [ 333.467876][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3064'. [ 333.505231][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 333.635540][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 333.671423][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3067'. [ 333.734987][T17495] vlan3: entered promiscuous mode [ 333.779553][T17495] veth0_to_team: entered promiscuous mode [ 333.785497][T17495] vlan3: entered allmulticast mode [ 333.867306][T17495] veth0_to_team: entered allmulticast mode [ 333.916075][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.944645][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.983975][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.056251][ T8323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.067672][ T8323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.128563][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.238335][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.374410][T17530] netlink: 'syz.0.3074': attribute type 2 has an invalid length. [ 334.382818][T17530] tipc: Started in network mode [ 334.389339][T17530] tipc: Node identity 1340008, cluster identity 4711 [ 334.422957][T17530] tipc: Node number set to 20185096 [ 334.468417][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.596087][T17545] netlink: 'syz.3.3077': attribute type 10 has an invalid length. [ 334.608384][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.687552][T17550] syzkaller0: entered promiscuous mode [ 334.703654][T17550] syzkaller0: entered allmulticast mode [ 334.831361][T17545] team0: Port device geneve0 added [ 334.841200][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.852949][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.864649][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.869248][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 334.874413][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.920530][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.951854][T17562] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 335.331586][T17559] lo speed is unknown, defaulting to 1000 [ 335.557468][T17586] lo speed is unknown, defaulting to 1000 [ 335.875275][ T8315] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.937097][T17601] bond12: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 335.954832][T17601] bond12: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 335.982287][ T8315] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.063848][ T8298] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.105324][T17621] netlink: 'syz.0.3095': attribute type 27 has an invalid length. [ 336.121884][ T8298] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.255750][ T8303] gretap0: left allmulticast mode [ 336.288511][ T8303] gretap0: left promiscuous mode [ 336.307451][ T8303] bridge0: port 1(gretap0) entered disabled state [ 336.450124][ T8303] dvmrp0: left allmulticast mode [ 336.694784][ T8303] bond7 (unregistering): (slave ip6gretap0): Releasing active interface [ 336.814421][ T8303] batman_adv: batadv0: Removing interface: gretap1 [ 336.887196][ T8303] geneve1 (unregistering): left allmulticast mode [ 336.895713][ T8303] geneve1 (unregistering): left promiscuous mode [ 336.982842][ T8303] bond2 (unregistering): (slave bridge1): Releasing active interface [ 336.989166][ T5142] Bluetooth: hci1: command tx timeout [ 337.203551][ T8303] bond4 (unregistering): (slave bridge6): Releasing active interface [ 337.253148][ T8303] bond4 (unregistering): (slave bridge7): Releasing active interface [ 337.362306][ T8303] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 337.370977][ T8303] bridge9 (unregistering): left promiscuous mode [ 337.506613][ T8303] bond0 (unregistering): Released all slaves [ 337.517896][ T8303] bond1 (unregistering): Released all slaves [ 337.533649][ T8303] bond2 (unregistering): Released all slaves [ 337.547412][ T8303] bond3 (unregistering): (slave veth5): Releasing active interface [ 337.561065][ T8303] bond3 (unregistering): Released all slaves [ 337.580783][ T8303] bond4 (unregistering): Released all slaves [ 337.594163][ T8303] bond5 (unregistering): Released all slaves [ 337.606587][ T8303] bond6 (unregistering): Released all slaves [ 337.624109][ T8303] bond7 (unregistering): Released all slaves [ 337.712585][T17559] chnl_net:caif_netlink_parms(): no params data found [ 337.729565][T17660] sctp: [Deprecated]: syz.1.3102 (pid 17660) Use of int in maxseg socket option. [ 337.729565][T17660] Use struct sctp_assoc_value instead [ 337.877116][ T8303] M: left promiscuous mode [ 338.044553][ T8303] : left promiscuous mode [ 338.131925][T17666] lo speed is unknown, defaulting to 1000 [ 338.165148][ T8303] tipc: Disabling bearer [ 338.199309][ T8303] tipc: Disabling bearer [ 338.217037][ T8303] tipc: Left network mode [ 338.316696][ T8298] net_ratelimit: 7 callbacks suppressed [ 338.316714][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 338.363605][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.387349][T17698] __nla_validate_parse: 13 callbacks suppressed [ 338.387371][T17698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3109'. [ 338.392667][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.427191][T17559] bridge_slave_0: entered allmulticast mode [ 338.441883][T17559] bridge_slave_0: entered promiscuous mode [ 338.494062][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 338.532513][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.537807][T17702] Cannot find add_set index 0 as target [ 338.540765][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.549811][T17704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.554763][T17559] bridge_slave_1: entered allmulticast mode [ 338.575694][T17559] bridge_slave_1: entered promiscuous mode [ 338.786970][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.842216][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 338.871156][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.031885][T17559] team0: Port device team_slave_0 added [ 339.064464][T17559] team0: Port device team_slave_1 added [ 339.069476][ T5142] Bluetooth: hci1: command tx timeout [ 339.170493][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 339.212251][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.247075][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.306104][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.356590][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.370587][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.372044][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 339.449482][T17733] netlink: 580 bytes leftover after parsing attributes in process `syz.0.3117'. [ 339.452697][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.475189][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 339.539733][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 339.757672][T17751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3120'. [ 339.798066][T17559] hsr_slave_0: entered promiscuous mode [ 339.830515][T17559] hsr_slave_1: entered promiscuous mode [ 339.837170][T17559] debugfs: 'hsr0' already exists in 'hsr' [ 339.850073][T17559] Cannot create hsr debugfs directory [ 339.899300][T17754] netlink: zone id is out of range [ 339.917688][T17754] netlink: zone id is out of range [ 339.943682][T17754] netlink: zone id is out of range [ 339.964615][T17754] netlink: zone id is out of range [ 339.980868][T17763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3122'. [ 339.983263][T17754] netlink: zone id is out of range [ 339.997132][T17755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3122'. [ 340.033766][ T8303] hsr_slave_0: left promiscuous mode [ 340.052744][ T8303] hsr_slave_1: left promiscuous mode [ 340.061272][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 340.062018][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 340.098563][T17754] netlink: get zone limit has 4 unknown bytes [ 340.576559][T17755] bond2: entered promiscuous mode [ 340.624329][T17763] bond3: entered promiscuous mode [ 340.870676][T17795] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 340.892637][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.4.3130 Not tainted syzkaller #0 PREEMPT(full) [ 340.892665][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.892682][T17795] Call Trace: [ 340.892690][T17795] [ 340.892698][T17795] dump_stack_lvl+0xe8/0x150 [ 340.892731][T17795] sysfs_warn_dup+0x8e/0xa0 [ 340.892760][T17795] sysfs_do_create_link_sd+0xc0/0x110 [ 340.892787][T17795] device_add_class_symlinks+0x1cf/0x240 [ 340.892810][T17795] device_add+0x475/0xb70 [ 340.892832][T17795] wiphy_register+0x1d73/0x2d50 [ 340.892869][T17795] ? __pfx_wiphy_register+0x10/0x10 [ 340.892890][T17795] ? __pfx_netdev_run_todo+0x10/0x10 [ 340.892909][T17795] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 340.892936][T17795] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 340.892968][T17795] ieee80211_register_hw+0x35f0/0x42c0 [ 340.893000][T17795] ? ieee80211_register_hw+0x1501/0x42c0 [ 340.893028][T17795] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 340.893063][T17795] ? __hrtimer_setup+0x181/0x200 [ 340.893085][T17795] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 340.893109][T17795] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 340.893155][T17795] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 340.893172][T17795] ? kstrndup+0xbf/0x160 [ 340.893203][T17795] hwsim_new_radio_nl+0xf6a/0x1c00 [ 340.893242][T17795] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 340.893269][T17795] ? rcu_is_watching+0x15/0xb0 [ 340.893293][T17795] ? trace_kmalloc+0x2a/0x110 [ 340.893318][T17795] ? __nla_parse+0x40/0x60 [ 340.893346][T17795] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 340.893374][T17795] genl_family_rcv_msg_doit+0x22a/0x330 [ 340.893398][T17795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 340.893429][T17795] ? bpf_lsm_capable+0x9/0x20 [ 340.893452][T17795] ? security_capable+0x7e/0x2c0 [ 340.893480][T17795] genl_rcv_msg+0x61c/0x7a0 [ 340.893509][T17795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.893526][T17795] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 340.893545][T17795] ? __lock_acquire+0x6b5/0x2cf0 [ 340.893577][T17795] netlink_rcv_skb+0x232/0x4b0 [ 340.893603][T17795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.893639][T17795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.893680][T17795] ? down_read+0x272/0x2e0 [ 340.893698][T17795] ? genl_rcv+0xd/0x40 [ 340.893716][T17795] genl_rcv+0x28/0x40 [ 340.893732][T17795] netlink_unicast+0x80f/0x9b0 [ 340.893762][T17795] ? __pfx_netlink_unicast+0x10/0x10 [ 340.893786][T17795] ? netlink_sendmsg+0x650/0xb40 [ 340.893808][T17795] ? skb_put+0x11b/0x210 [ 340.893836][T17795] netlink_sendmsg+0x813/0xb40 [ 340.893869][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.893896][T17795] ? aa_sock_msg_perm+0xf1/0x1b0 [ 340.893920][T17795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.893942][T17795] ____sys_sendmsg+0x972/0x9f0 [ 340.893968][T17795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.893994][T17795] ? import_iovec+0x73/0xa0 [ 340.894024][T17795] ___sys_sendmsg+0x2a5/0x360 [ 340.894046][T17795] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.894070][T17795] ? futex_wake+0x4ac/0x580 [ 340.894119][T17795] ? __fget_files+0x2a/0x420 [ 340.894144][T17795] ? __fget_files+0x3a0/0x420 [ 340.894178][T17795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.894198][T17795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.894224][T17795] ? rcu_is_watching+0x15/0xb0 [ 340.894260][T17795] do_syscall_64+0x14d/0xf80 [ 340.894275][T17795] ? trace_irq_disable+0x3b/0x150 [ 340.894300][T17795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.894317][T17795] ? clear_bhb_loop+0x40/0x90 [ 340.894339][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.894356][T17795] RIP: 0033:0x7f3e2539c799 [ 340.894374][T17795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.894389][T17795] RSP: 002b:00007f3e26301028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.894414][T17795] RAX: ffffffffffffffda RBX: 00007f3e25615fa0 RCX: 00007f3e2539c799 [ 340.894428][T17795] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 340.894440][T17795] RBP: 00007f3e25432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 340.894450][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.894461][T17795] R13: 00007f3e25616038 R14: 00007f3e25615fa0 R15: 00007ffdf5d9dbf8 [ 340.894491][T17795] [ 341.320991][ T5142] Bluetooth: hci1: command tx timeout [ 341.416252][T17559] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.863554][T17559] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.970494][T17841] netlink: 'syz.1.3140': attribute type 21 has an invalid length. [ 342.075799][T17808] veth3: entered promiscuous mode [ 342.361286][T17559] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.404733][T17849] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 342.441564][T17860] nbd: nbd0 already in use [ 342.490850][T17860] block nbd0: NBD_DISCONNECT [ 342.495510][T17860] block nbd0: Send disconnect failed -32 [ 342.519477][T17860] block nbd0: shutting down sockets [ 342.610503][T17559] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.647624][ T8303] IPVS: stop unused estimator thread 0... [ 342.892730][T17889] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 343.086743][T17905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.196073][T17908] netlink: 'syz.1.3157': attribute type 1 has an invalid length. [ 343.197577][T17906] netlink: 'syz.3.3155': attribute type 11 has an invalid length. [ 343.303533][T17559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.371226][T17559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.394934][ T5142] Bluetooth: hci1: command tx timeout [ 343.421118][ T195] net_ratelimit: 4 callbacks suppressed [ 343.421137][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 343.501123][T17559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.532902][T17926] dvmrp0: entered allmulticast mode [ 343.542703][T17559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.699215][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 343.848543][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 343.941429][T17950] __nla_validate_parse: 9 callbacks suppressed [ 343.941449][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 343.979846][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 343.980039][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 344.005880][T17559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.058345][T17559] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.081731][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.088982][ T8303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.161473][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.168734][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.280037][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.409273][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.519599][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.628829][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.739541][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.814428][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.889842][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 344.940647][T17559] veth0_vlan: entered promiscuous mode [ 345.084036][T17559] veth1_vlan: entered promiscuous mode [ 345.304764][T18010] tipc: Enabling of bearer rejected, failed to enable media [ 345.342658][T17559] veth0_macvtap: entered promiscuous mode [ 345.370636][T17559] veth1_macvtap: entered promiscuous mode [ 345.450617][ T8326] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.510591][ T8326] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.545035][ T8326] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.588673][ T8326] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.623600][T17559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.714635][T17559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.767093][ T8315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.819072][ T8315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.865717][ T8315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.893519][ T8315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.023972][T18043] lo: entered promiscuous mode [ 346.053708][T18042] lo: left promiscuous mode [ 346.158410][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.178296][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.243392][T18055] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 346.272391][T18058] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 346.300549][T18058] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 346.392653][ T8303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.411171][ T8303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.535437][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3190'. [ 346.774725][T18079] netlink: 'syz.2.3193': attribute type 6 has an invalid length. [ 346.822134][T18079] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3193'. [ 346.873515][T18081] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.3193'. [ 346.914100][T18079] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 347.213161][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 347.236260][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 347.425596][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.446912][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.456531][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.482112][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.494026][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.594893][T18102] lo speed is unknown, defaulting to 1000 [ 347.733997][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 347.771045][T18108] lo speed is unknown, defaulting to 1000 [ 347.884158][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 347.947640][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 348.292258][T18137] netlink: 'syz.4.3205': attribute type 1 has an invalid length. [ 348.529251][ T8303] net_ratelimit: 17 callbacks suppressed [ 348.529269][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 348.562287][T18143] veth0_to_bridge: entered promiscuous mode [ 348.595945][T18142] veth0_to_bridge: left promiscuous mode [ 348.788360][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 348.868042][T18102] chnl_net:caif_netlink_parms(): no params data found [ 349.125312][T18102] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.135918][T18102] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.145068][T18102] bridge_slave_0: entered allmulticast mode [ 349.154625][T18102] bridge_slave_0: entered promiscuous mode [ 349.164039][T18102] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.173079][T18102] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.180555][T18102] bridge_slave_1: entered allmulticast mode [ 349.188796][T18102] bridge_slave_1: entered promiscuous mode [ 349.232329][T18102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.246189][T18102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.290505][T18102] team0: Port device team_slave_0 added [ 349.304672][T18102] team0: Port device team_slave_1 added [ 349.373540][T18102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.401351][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.452862][T18102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.486648][T18102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.500631][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.530650][T18102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.549912][ T5142] Bluetooth: hci3: command tx timeout [ 349.684296][T18102] hsr_slave_0: entered promiscuous mode [ 349.701902][T18102] hsr_slave_1: entered promiscuous mode [ 349.712567][T18102] debugfs: 'hsr0' already exists in 'hsr' [ 349.768332][T18102] Cannot create hsr debugfs directory [ 350.115265][T18198] __nla_validate_parse: 3 callbacks suppressed [ 350.115287][T18198] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3218'. [ 350.196519][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 350.243894][T18209] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 350.272228][T18209] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 350.369521][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 350.451331][T18102] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.486264][T18102] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.496412][T18102] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.518629][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 350.535301][T18216] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 350.543907][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'. [ 350.596927][T18102] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.623050][T18102] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 350.633875][T18102] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.679392][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 350.742927][T18226] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 350.767325][T18226] bond1 (unregistering): Released all slaves [ 350.858324][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 350.950789][T18236] Bluetooth: MGMT ver 1.23 [ 350.962404][T18102] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.986177][T18102] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.009336][T18102] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.052842][T18238] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 351.065066][T18238] pim6reg0: linktype set to 773 [ 351.087156][T18245] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 351.105429][T18245] pim6reg0: linktype set to 773 [ 351.112728][T18238] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 351.125091][T18254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3233'. [ 351.142288][T18102] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.168651][T18102] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 351.186017][T18102] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.212491][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 351.282893][T18259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3235'. [ 351.402606][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 351.636577][ T5831] Bluetooth: hci3: command tx timeout [ 351.718754][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 351.775389][T18102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.808049][T18102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.847230][T18102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.863086][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'. [ 351.875093][T18102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.971021][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 351.998768][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 352.030817][T18278] syzkaller0: entered promiscuous mode [ 352.036324][T18278] syzkaller0: entered allmulticast mode [ 353.713872][ T5831] Bluetooth: hci3: command tx timeout [ 354.619213][ T8298] net_ratelimit: 2 callbacks suppressed [ 354.619233][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 354.728686][T18102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.773756][T18102] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.830938][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 354.859877][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.867149][ T8298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.881485][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.888771][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.993164][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 355.119265][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 355.221138][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 355.230322][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 355.269186][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 355.283706][T18102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.339955][ T8315] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 355.395648][T18102] veth0_vlan: entered promiscuous mode [ 355.424997][T18353] FAULT_INJECTION: forcing a failure. [ 355.424997][T18353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.425005][T18102] veth1_vlan: entered promiscuous mode [ 355.425029][T18353] CPU: 1 UID: 0 PID: 18353 Comm: syz.2.3254 Not tainted syzkaller #0 PREEMPT(full) [ 355.425045][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.425053][T18353] Call Trace: [ 355.425059][T18353] [ 355.425066][T18353] dump_stack_lvl+0xe8/0x150 [ 355.425242][T18353] should_fail_ex+0x412/0x560 [ 355.425366][T18353] _copy_from_iter+0x1d3/0x1670 [ 355.425463][T18353] ? rcu_is_watching+0x15/0xb0 [ 355.425514][T18353] ? __pfx__copy_from_iter+0x10/0x10 [ 355.425544][T18353] ? netlink_sendmsg+0x650/0xb40 [ 355.425625][T18353] ? skb_put+0x11b/0x210 [ 355.425720][T18353] netlink_sendmsg+0x6c0/0xb40 [ 355.425750][T18353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.425776][T18353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.425846][T18353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.425884][T18353] ____sys_sendmsg+0x972/0x9f0 [ 355.425934][T18353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.425958][T18353] ? import_iovec+0x73/0xa0 [ 355.425986][T18353] ___sys_sendmsg+0x2a5/0x360 [ 355.426007][T18353] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.426055][T18353] ? __fget_files+0x2a/0x420 [ 355.426101][T18353] ? __fget_files+0x3a0/0x420 [ 355.426133][T18353] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.426153][T18353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.426178][T18353] ? __pfx_ksys_write+0x10/0x10 [ 355.426213][T18353] do_syscall_64+0x14d/0xf80 [ 355.426344][T18353] ? trace_irq_disable+0x3b/0x150 [ 355.426389][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.426420][T18353] ? clear_bhb_loop+0x40/0x90 [ 355.426441][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.426458][T18353] RIP: 0033:0x7f22d579c799 [ 355.426476][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.426491][T18353] RSP: 002b:00007f22d672f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.426510][T18353] RAX: ffffffffffffffda RBX: 00007f22d5a15fa0 RCX: 00007f22d579c799 [ 355.426523][T18353] RDX: 0000000000008800 RSI: 0000200000000180 RDI: 0000000000000003 [ 355.426535][T18353] RBP: 00007f22d672f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.426546][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.426556][T18353] R13: 00007f22d5a16038 R14: 00007f22d5a15fa0 R15: 00007fffb89f32a8 [ 355.426584][T18353] [ 355.619754][T18102] veth0_macvtap: entered promiscuous mode [ 355.782472][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 355.816279][ T5831] Bluetooth: hci3: command tx timeout [ 355.876792][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 355.913004][T18102] veth1_macvtap: entered promiscuous mode [ 355.940809][T18364] syzkaller0: entered promiscuous mode [ 355.946466][T18364] syzkaller0: entered allmulticast mode [ 356.025526][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 356.045099][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 356.079588][T18102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.116632][T18102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.236051][ T8298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.259924][ T8298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.290030][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 356.321859][ T8298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.349636][ T8298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.473657][T18381] bridge_slave_0: left allmulticast mode [ 356.494768][T18381] bridge_slave_0: left promiscuous mode [ 356.502662][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.515766][T18381] bridge_slave_1: left allmulticast mode [ 356.523875][T18381] bridge_slave_1: left promiscuous mode [ 356.534550][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.550850][T18381] bond0: (slave bond_slave_0): Releasing backup interface [ 356.602531][T18381] bond0: (slave bond_slave_1): Releasing backup interface [ 356.637994][T18381] team0: Port device team_slave_0 removed [ 356.670157][T18381] team0: Port device team_slave_1 removed [ 356.690213][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.707154][T18381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.717616][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.726617][T18381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.736411][T18381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.788482][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 356.846759][ T8303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.877836][ T8303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.011924][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.038465][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.611810][T18454] pim6reg: entered allmulticast mode [ 357.703779][T18455] pim6reg: left allmulticast mode [ 357.841266][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 357.916157][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.937439][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.956081][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.956140][T18459] IPVS: set_ctl: invalid protocol: 43 172.20.20.11:21 [ 357.979103][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.990447][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.008592][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 358.077992][T18465] lo speed is unknown, defaulting to 1000 [ 358.147654][T18459] lo speed is unknown, defaulting to 1000 [ 358.237799][T18441] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3276'. [ 358.319759][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3276'. [ 358.483374][T18480] lo speed is unknown, defaulting to 1000 [ 358.820074][T18488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3285'. [ 358.840638][T18488] nbd: illegal input index 38656 [ 358.847323][T18488] nbd: illegal input index 38656 [ 358.853052][T18488] nbd: illegal input index 38656 [ 358.858727][T18488] nbd: illegal input index 38656 [ 358.863992][T18488] nbd: illegal input index 38656 [ 358.870740][T18488] nbd: illegal input index 38656 [ 358.875869][T18488] nbd: illegal input index 38656 [ 358.881697][T18488] nbd: illegal input index 38656 [ 358.887029][T18488] nbd: illegal input index 38656 [ 358.911872][T18465] chnl_net:caif_netlink_parms(): no params data found [ 359.324908][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.333521][T18465] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.342255][T18465] bridge_slave_0: entered allmulticast mode [ 359.352936][T18465] bridge_slave_0: entered promiscuous mode [ 359.366744][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.375017][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.386111][T18465] bridge_slave_1: entered allmulticast mode [ 359.395464][T18465] bridge_slave_1: entered promiscuous mode [ 359.482814][T18522] sctp: [Deprecated]: syz.0.3294 (pid 18522) Use of int in max_burst socket option deprecated. [ 359.482814][T18522] Use struct sctp_assoc_value instead [ 359.525380][ T1158] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.534785][ T1158] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.615223][T18465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.649474][ T1158] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.695400][T18465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.716583][ T1158] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.792873][T18529] hsr0: entered promiscuous mode [ 359.834922][ T195] dvmrp0: left allmulticast mode [ 359.841202][ T195] pimreg3: left allmulticast mode [ 359.847278][ T195] tipc: Resetting bearer [ 360.030372][ T5142] Bluetooth: hci2: command tx timeout [ 360.155792][ T195] tipc: Disabling bearer [ 360.536387][ T195] bond0 (unregistering): Released all slaves [ 360.547318][ T195] bond1 (unregistering): (slave veth3): Releasing active interface [ 360.557397][ T195] bond1 (unregistering): Released all slaves [ 360.579595][ T195] bond2 (unregistering): Released all slaves [ 360.598977][ T195] bond3 (unregistering): Released all slaves [ 360.615989][ T195] team0: Port device bond4 removed [ 360.624615][ T195] bond4 (unregistering): Released all slaves [ 360.637112][ T195] bond5 (unregistering): Released all slaves [ 360.650091][ T195] bond6 (unregistering): Released all slaves [ 360.663619][ T195] bond7 (unregistering): Released all slaves [ 360.677204][T18465] team0: Port device team_slave_0 added [ 360.686528][T18465] team0: Port device team_slave_1 added [ 360.900165][ T1158] net_ratelimit: 15 callbacks suppressed [ 360.900185][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 360.997525][ T195] m1Ie5: left promiscuous mode [ 361.064468][T18465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.083068][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.110161][ T797] IPVS: starting estimator thread 0... [ 361.123014][T18465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.139337][T18465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.146400][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.175345][T18465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.187068][T18567] __nla_validate_parse: 9 callbacks suppressed [ 361.187085][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 361.209326][T18569] IPVS: using max 35 ests per chain, 84000 per kthread [ 361.219330][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 361.260923][ T195] tipc: Disabling bearer [ 361.268675][ T195] tipc: Left network mode [ 361.441547][T18465] hsr_slave_0: entered promiscuous mode [ 361.471037][T18465] hsr_slave_1: entered promiscuous mode [ 361.491979][T18465] debugfs: 'hsr0' already exists in 'hsr' [ 361.520763][T18465] Cannot create hsr debugfs directory [ 361.742958][T18595] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 361.942087][T18604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'. [ 361.965596][T18604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.108914][ T5142] Bluetooth: hci2: command tx timeout [ 362.126194][T18595] veth5: entered promiscuous mode [ 362.161912][T18595] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 362.180961][T18615] netlink: 'syz.2.3313': attribute type 22 has an invalid length. [ 362.312341][T18620] netlink: 'syz.2.3314': attribute type 4 has an invalid length. [ 362.343309][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 362.373065][T18622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3314'. [ 362.409617][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'. [ 362.659204][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 362.815177][T18638] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 362.830586][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 362.870116][T18638] gtp0: entered promiscuous mode [ 362.885321][T18638] gtp0: entered allmulticast mode [ 362.898858][ T8303] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 362.954808][ T195] hsr_slave_0: left promiscuous mode [ 362.969411][ T195] hsr_slave_1: left promiscuous mode [ 363.093806][ T195] pim6reg (unregistering): left allmulticast mode [ 364.091703][T18465] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.189802][ T5142] Bluetooth: hci2: command tx timeout [ 364.203019][ T5898] lo speed is unknown, defaulting to 1000 [ 364.209025][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.218807][ T5898] infiniband syz2: ib_query_port failed (-19) [ 364.355773][T18465] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.403358][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'. [ 364.415672][T18679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3325'. [ 364.448347][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.606612][T18465] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.718321][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.881078][T18699] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3328'. [ 364.894543][T18465] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.950742][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.993587][ T195] IPVS: stop unused estimator thread 0... [ 365.234968][T18708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3331'. [ 365.268408][T18708] netem: unknown loss type 4 [ 365.287926][T18708] netem: change failed [ 365.684281][T18465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.715036][T18465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.783068][T18465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.887338][T18465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.968287][ T8328] net_ratelimit: 3 callbacks suppressed [ 365.968306][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.197196][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.273113][ T5142] Bluetooth: hci2: command tx timeout [ 366.324718][T18465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.360479][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.389997][T18465] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.405232][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.412480][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.454980][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.462274][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.528466][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.648278][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.780315][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 366.922205][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 367.009539][T18775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3341'. [ 367.075138][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.082784][T18777] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 367.127113][T18777] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3343'. [ 367.139843][ T1158] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 367.258696][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 367.390753][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 367.639271][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'. [ 367.670055][T18798] netlink: 'syz.0.3347': attribute type 2 has an invalid length. [ 367.702781][T18798] : entered promiscuous mode [ 367.786320][T18798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3347'. [ 367.840661][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3347'. [ 367.921602][T18811] netlink: 'syz.2.3349': attribute type 21 has an invalid length. [ 367.954889][T18811] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3349'. [ 367.966544][T18465] veth0_vlan: entered promiscuous mode [ 368.012616][T18465] veth1_vlan: entered promiscuous mode [ 368.049943][T18811] netlink: 'syz.2.3349': attribute type 3 has an invalid length. [ 368.058103][T18811] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3349'. [ 368.175503][T18465] veth0_macvtap: entered promiscuous mode [ 368.218989][T18465] veth1_macvtap: entered promiscuous mode [ 368.297463][T18465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.352291][T18465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.395624][T18825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3351'. [ 368.431348][ T8331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.476356][ T8331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.503180][ T8331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.561281][ T8331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.729598][ T8298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.737492][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.841867][ T8323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.862985][ T8323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.137292][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'. [ 369.250769][T18866] x_tables: unsorted entry at hook 2 [ 369.538984][T18883] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3363'. [ 369.801520][T18898] veth0_virt_wifi: entered promiscuous mode [ 369.828011][T18898] vlan2: entered promiscuous mode [ 369.986365][T18915] gtp1: entered promiscuous mode [ 369.994286][T18915] gtp1: entered allmulticast mode [ 370.149926][T18910] [ 370.152291][T18910] ====================================================== [ 370.159313][T18910] WARNING: possible circular locking dependency detected [ 370.166355][T18910] syzkaller #0 Not tainted [ 370.170816][T18910] ------------------------------------------------------ [ 370.177843][T18910] syz.0.3370/18910 is trying to acquire lock: [ 370.183922][T18910] ffffffff8e85f168 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 370.193563][T18910] [ 370.193563][T18910] but task is already holding lock: [ 370.200929][T18910] ffff88802656b008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 370.211379][T18910] [ 370.211379][T18910] which lock already depends on the new lock. [ 370.211379][T18910] [ 370.221789][T18910] [ 370.221789][T18910] the existing dependency chain (in reverse order) is: [ 370.230808][T18910] [ 370.230808][T18910] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 370.239453][T18910] blk_alloc_queue+0x546/0x680 [ 370.244858][T18910] __blk_mq_alloc_disk+0x197/0x390 [ 370.250606][T18910] nbd_dev_add+0x499/0xb50 [ 370.255553][T18910] nbd_init+0x168/0x1f0 [ 370.260329][T18910] do_one_initcall+0x250/0x8d0 [ 370.265615][T18910] do_initcall_level+0x104/0x190 [ 370.271169][T18910] do_initcalls+0x59/0xa0 [ 370.276007][T18910] kernel_init_freeable+0x2a6/0x3e0 [ 370.281720][T18910] kernel_init+0x1d/0x1d0 [ 370.286630][T18910] ret_from_fork+0x51e/0xb90 [ 370.291746][T18910] ret_from_fork_asm+0x1a/0x30 [ 370.297030][T18910] [ 370.297030][T18910] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 370.304233][T18910] fs_reclaim_acquire+0x71/0x100 [ 370.309761][T18910] prepare_alloc_pages+0x152/0x650 [ 370.315399][T18910] __alloc_frozen_pages_noprof+0x12f/0x380 [ 370.321718][T18910] __alloc_pages_noprof+0xa/0x30 [ 370.327166][T18910] pcpu_populate_chunk+0x182/0xb30 [ 370.332788][T18910] pcpu_alloc_noprof+0xc6c/0x19c0 [ 370.338324][T18910] xt_percpu_counter_alloc+0x161/0x220 [ 370.344376][T18910] translate_table+0x1332/0x20b0 [ 370.349873][T18910] ip6t_register_table+0x11b/0x800 [ 370.355498][T18910] ip6table_filter_table_init+0x75/0xb0 [ 370.361562][T18910] xt_find_table_lock+0x30c/0x3e0 [ 370.367180][T18910] xt_request_find_table_lock+0x26/0x100 [ 370.373334][T18910] do_ip6t_get_ctl+0x716/0x1230 [ 370.378755][T18910] nf_getsockopt+0x26e/0x290 [ 370.383916][T18910] ipv6_getsockopt+0x1fd/0x2b0 [ 370.389262][T18910] do_sock_getsockopt+0x2d3/0x3f0 [ 370.394850][T18910] __x64_sys_getsockopt+0x1a4/0x240 [ 370.400565][T18910] do_syscall_64+0x14d/0xf80 [ 370.405668][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.412081][T18910] [ 370.412081][T18910] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 370.419812][T18910] __lock_acquire+0x15a5/0x2cf0 [ 370.425189][T18910] lock_acquire+0xf0/0x2e0 [ 370.430135][T18910] __mutex_lock+0x19f/0x1300 [ 370.435233][T18910] pcpu_alloc_noprof+0x218/0x19c0 [ 370.440769][T18910] sbitmap_init_node+0x1e1/0x640 [ 370.446302][T18910] sbitmap_queue_init_node+0x3e/0x4d0 [ 370.452200][T18910] blk_mq_init_tags+0x15c/0x2d0 [ 370.457585][T18910] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 370.463562][T18910] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 370.469890][T18910] nbd_start_device+0x17f/0xb10 [ 370.475263][T18910] nbd_genl_connect+0x165b/0x1cf0 [ 370.480806][T18910] genl_family_rcv_msg_doit+0x22a/0x330 [ 370.486863][T18910] genl_rcv_msg+0x61c/0x7a0 [ 370.491873][T18910] netlink_rcv_skb+0x232/0x4b0 [ 370.497146][T18910] genl_rcv+0x28/0x40 [ 370.501632][T18910] netlink_unicast+0x80f/0x9b0 [ 370.506910][T18910] netlink_sendmsg+0x813/0xb40 [ 370.512189][T18910] ____sys_sendmsg+0x972/0x9f0 [ 370.517466][T18910] ___sys_sendmsg+0x2a5/0x360 [ 370.522650][T18910] __x64_sys_sendmsg+0x1bd/0x2a0 [ 370.528094][T18910] do_syscall_64+0x14d/0xf80 [ 370.533193][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.539598][T18910] [ 370.539598][T18910] other info that might help us debug this: [ 370.539598][T18910] [ 370.549811][T18910] Chain exists of: [ 370.549811][T18910] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 370.549811][T18910] [ 370.563454][T18910] Possible unsafe locking scenario: [ 370.563454][T18910] [ 370.570889][T18910] CPU0 CPU1 [ 370.576241][T18910] ---- ---- [ 370.581590][T18910] lock(&q->q_usage_counter(io)#51); [ 370.586959][T18910] lock(fs_reclaim); [ 370.593447][T18910] lock(&q->q_usage_counter(io)#51); [ 370.601333][T18910] lock(pcpu_alloc_mutex); [ 370.605849][T18910] [ 370.605849][T18910] *** DEADLOCK *** [ 370.605849][T18910] [ 370.613983][T18910] 6 locks held by syz.0.3370/18910: [ 370.619175][T18910] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 370.627459][T18910] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 370.636421][T18910] #2: ffff8880266381d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 370.647820][T18910] #3: ffff8880266380d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 370.658801][T18910] #4: ffff88802656b008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 370.669526][T18910] #5: ffff88802656b040 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 370.680511][T18910] [ 370.680511][T18910] stack backtrace: [ 370.686400][T18910] CPU: 1 UID: 0 PID: 18910 Comm: syz.0.3370 Not tainted syzkaller #0 PREEMPT(full) [ 370.686419][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.686433][T18910] Call Trace: [ 370.686441][T18910] [ 370.686449][T18910] dump_stack_lvl+0xe8/0x150 [ 370.686474][T18910] print_circular_bug+0x2e1/0x300 [ 370.686500][T18910] check_noncircular+0x12e/0x150 [ 370.686526][T18910] __lock_acquire+0x15a5/0x2cf0 [ 370.686554][T18910] lock_acquire+0xf0/0x2e0 [ 370.686572][T18910] ? pcpu_alloc_noprof+0x218/0x19c0 [ 370.686593][T18910] __mutex_lock+0x19f/0x1300 [ 370.686609][T18910] ? pcpu_alloc_noprof+0x218/0x19c0 [ 370.686625][T18910] ? stack_depot_save_flags+0x3f3/0x810 [ 370.686648][T18910] ? kasan_save_track+0x4f/0x80 [ 370.686682][T18910] ? kasan_save_track+0x3e/0x80 [ 370.686696][T18910] ? pcpu_alloc_noprof+0x218/0x19c0 [ 370.686712][T18910] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 370.686729][T18910] ? blk_mq_init_tags+0x83/0x2d0 [ 370.686750][T18910] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 370.686767][T18910] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 370.686786][T18910] ? __pfx___mutex_lock+0x10/0x10 [ 370.686799][T18910] ? genl_rcv+0x28/0x40 [ 370.686813][T18910] ? ____sys_sendmsg+0x972/0x9f0 [ 370.686827][T18910] ? ___sys_sendmsg+0x2a5/0x360 [ 370.686846][T18910] pcpu_alloc_noprof+0x218/0x19c0 [ 370.686869][T18910] sbitmap_init_node+0x1e1/0x640 [ 370.686895][T18910] sbitmap_queue_init_node+0x3e/0x4d0 [ 370.686921][T18910] blk_mq_init_tags+0x15c/0x2d0 [ 370.686943][T18910] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 370.686962][T18910] ? kfree+0x1c1/0x630 [ 370.686974][T18910] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 370.686995][T18910] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 370.687019][T18910] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 370.687041][T18910] ? sysfs_add_file_mode_ns+0x259/0x300 [ 370.687079][T18910] nbd_start_device+0x17f/0xb10 [ 370.687105][T18910] ? device_create_file+0xf4/0x1b0 [ 370.687184][T18910] nbd_genl_connect+0x165b/0x1cf0 [ 370.687211][T18910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 370.687235][T18910] ? rcu_is_watching+0x15/0xb0 [ 370.687266][T18910] ? __nla_parse+0x40/0x60 [ 370.687289][T18910] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 370.687308][T18910] genl_family_rcv_msg_doit+0x22a/0x330 [ 370.687327][T18910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.687348][T18910] ? __lock_acquire+0x6b5/0x2cf0 [ 370.687369][T18910] genl_rcv_msg+0x61c/0x7a0 [ 370.687386][T18910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.687401][T18910] ? __pfx_nbd_genl_connect+0x10/0x10 [ 370.687422][T18910] ? __lock_acquire+0x6b5/0x2cf0 [ 370.687445][T18910] netlink_rcv_skb+0x232/0x4b0 [ 370.687466][T18910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.687482][T18910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.687508][T18910] ? down_read+0x272/0x2e0 [ 370.687523][T18910] ? genl_rcv+0xd/0x40 [ 370.687537][T18910] genl_rcv+0x28/0x40 [ 370.687551][T18910] netlink_unicast+0x80f/0x9b0 [ 370.687571][T18910] ? __pfx_netlink_unicast+0x10/0x10 [ 370.687589][T18910] ? netlink_sendmsg+0x650/0xb40 [ 370.687609][T18910] ? skb_put+0x11b/0x210 [ 370.687632][T18910] netlink_sendmsg+0x813/0xb40 [ 370.687656][T18910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.687678][T18910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.687699][T18910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.687717][T18910] ____sys_sendmsg+0x972/0x9f0 [ 370.687731][T18910] ? futex_unqueue+0x211/0x240 [ 370.687759][T18910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.687777][T18910] ? import_iovec+0x73/0xa0 [ 370.687801][T18910] ___sys_sendmsg+0x2a5/0x360 [ 370.687817][T18910] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.687833][T18910] ? futex_wait+0x29a/0x380 [ 370.687864][T18910] ? __fget_files+0x2a/0x420 [ 370.687887][T18910] ? __fget_files+0x3a0/0x420 [ 370.687912][T18910] __x64_sys_sendmsg+0x1bd/0x2a0 [ 370.687927][T18910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.687945][T18910] ? rcu_is_watching+0x15/0xb0 [ 370.687969][T18910] do_syscall_64+0x14d/0xf80 [ 370.687984][T18910] ? trace_irq_disable+0x3b/0x150 [ 370.688007][T18910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.688023][T18910] ? clear_bhb_loop+0x40/0x90 [ 370.688040][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.688059][T18910] RIP: 0033:0x7f2df4f9c799 [ 370.688074][T18910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.688087][T18910] RSP: 002b:00007f2df31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.688104][T18910] RAX: ffffffffffffffda RBX: 00007f2df5215fa0 RCX: 00007f2df4f9c799 [ 370.688117][T18910] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 370.688128][T18910] RBP: 00007f2df5032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 370.688138][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.688148][T18910] R13: 00007f2df5216038 R14: 00007f2df5215fa0 R15: 00007ffe4b984688 [ 370.688166][T18910] [ 371.174725][ T195] net_ratelimit: 20 callbacks suppressed [ 371.174746][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.261848][ T5142] block nbd2: Receive control failed (result -32) [ 371.269397][ T5831] block nbd2: Receive control failed (result -32) [ 371.276116][ T5831] block nbd2: Receive control failed (result -107) [ 371.298342][T18910] nbd2: detected capacity change from 0 to 63 [ 371.307713][T18662] block nbd2: Dead connection, failed to find a fallback [ 371.316364][T18662] block nbd2: shutting down sockets [ 371.322660][T18662] blk_print_req_error: 136 callbacks suppressed [ 371.322675][T18662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.338739][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.341212][T18662] buffer_io_error: 138 callbacks suppressed [ 371.341225][T18662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 371.362997][T18662] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.373046][T18662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 371.381003][T18662] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.394339][T18662] Buffer I/O error on dev nbd2, logical block 2, async page read [ 371.402693][T18662] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.413221][T18662] Buffer I/O error on dev nbd2, logical block 3, async page read [ 371.421957][T18662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.432819][T18662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 371.441685][T18662] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.452058][T18662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 371.458262][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.460908][T18662] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.478264][T18662] Buffer I/O error on dev nbd2, logical block 2, async page read [ 371.487023][T18662] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.497430][T18662] Buffer I/O error on dev nbd2, logical block 3, async page read [ 371.506486][T18662] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.517081][T18662] Buffer I/O error on dev nbd2, logical block 0, async page read [ 371.525968][T18662] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 371.537033][T18662] Buffer I/O error on dev nbd2, logical block 1, async page read [ 371.546312][T18662] ldm_validate_partition_table(): Disk read failed. [ 371.554421][T18662] Dev nbd2: unable to read RDB block 0 [ 371.560872][T18662] nbd2: unable to read partition table [ 371.572823][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.582366][T18662] ldm_validate_partition_table(): Disk read failed. [ 371.589936][T18662] Dev nbd2: unable to read RDB block 0 [ 371.595875][T18662] nbd2: unable to read partition table [ 371.698307][ T195] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.808919][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.918324][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 372.029270][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 372.138369][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 372.249786][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.278830][ T8298] net_ratelimit: 35 callbacks suppressed [ 376.278851][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.398943][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.512495][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.628846][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.738269][ T8323] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.858317][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 376.969089][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 377.078361][ T8298] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 377.188934][ T8328] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 377.298769][ T8331] bond6: (slave ip6gretap2): failed to get link speed/duplex