last executing test programs: 5.910279113s ago: executing program 1 (id=6842): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) 5.640349866s ago: executing program 1 (id=6845): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000240), 0x0, 0x20049001) 5.637510278s ago: executing program 2 (id=6846): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd={0x4}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x2, [{0xb, 0x40, 0x7}, {0xe, 0x45, 0x81}, {0xe, 0x3, 0x7ff}, {0xe, 0x5c, 0x5}, {0x5, 0x7, 0x1}, {0xb, 0x4, 0x7fffffff}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xd, 0x2}, {0xb, 0x2}, {0xe, 0x1}, {0xb}, {0xd, 0x5}, {0x8, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000003c0)=""/231, 0xbf, 0xe7, 0x1, 0x9, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, 0xffffffffffffffff, 0x1000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) unshare(0x22020600) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r10 = socket(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 5.496205057s ago: executing program 1 (id=6849): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x4, 0x0, @mcast2, 0xa7a}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000001000000000071104900000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000fedbdf2502e90000000000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) 4.604268973s ago: executing program 2 (id=6853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) (async) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x64}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c0001800400010004000a00"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.444949799s ago: executing program 2 (id=6856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x3, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000740)="98e2", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, 0x0) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x83}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 3.708288356s ago: executing program 2 (id=6859): sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004004}, 0x40054) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.427856848s ago: executing program 2 (id=6863): r0 = socket(0x22, 0x3, 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r5, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) poll(0x0, 0x0, 0x9) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0x21, 0x0, &(0x7f0000000100)) 2.69500119s ago: executing program 4 (id=6867): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000ff5c72026fc2e136d80004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x4f}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003c80)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) 2.688220019s ago: executing program 4 (id=6869): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x23, 0xffffffff}]}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000002c0)={'bond0\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x91) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 2.685423577s ago: executing program 3 (id=6871): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fe7fffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 2.627583553s ago: executing program 3 (id=6872): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = gettid() recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/10, 0xa}], 0x8}, 0x42) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}, [@IFLA_MTU={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2.556198775s ago: executing program 0 (id=6873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2000000076000d0b000000000000000043c00e000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x2e, 0x20]}}, 0x0, 0x18, 0x0, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090300000000006910ae0000000000c4090000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) 2.512528208s ago: executing program 4 (id=6874): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x14, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f0006ac0f00"}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="919f31e60f56df74b694d3cc94ed8834859e582836", 0x15}, {&(0x7f00000001c0)="4c1d5e", 0x3}, {&(0x7f0000000380)="b4228bf21275e95864bd837e4998ddfc714cfc8f320b738c", 0x18}], 0x3}], 0x1, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x34, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002"], 0x38c}}, 0x0) 2.416802231s ago: executing program 0 (id=6875): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000020a050000000000000000000a0000080c00044000000000000000030900010073797a30000000000c000440000000000000000222000600c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a400000800024000000002080002400000000298000000080a010200000000000000000a00000961000740898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5d34790f80c549069cd8d17b04e48bea9a80d00000008000b4000000001080009400000000308000a400000000008000a400000000260000000000a01030000000000000000030000010600010073797a30000000000900010073797a300000000032000600821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab00006c000000120a0101000000000000000007000009580004800500020011000000140003800800014000000008080001407fffffff0c00038008000340000000052c000380080002400000010008000740000000080800064000000009080008400000010108000940000000c874000000140a050000000000000000000200000a0c00064000000000000000030900010073797a3100000000080003"], 0x504}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40010) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r7, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r7, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 2.356138798s ago: executing program 3 (id=6876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25e3ccc15e743310fcfb457008000000000006000a004e230000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf2501000000080008007f000001050003002900000006000a004e2300000500020002000000050003002c000000050002000a000000080006000a01010108000b00", @ANYRES32=r3, @ANYBLOB="0500020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r5, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r5, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x310, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 2.21340586s ago: executing program 4 (id=6877): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xd}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x3fa, 0x800, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r3, 0x0, 0x0, 0x40000142, 0x0, 0x0) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000340)=0xfe, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x1d, 0x0, 0x1, 0xfffff034}, {0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000140), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.715594461s ago: executing program 4 (id=6878): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0600000004000000020089000007000000000000", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x58, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600220000fc020000000000000000000000000000ff0200000000000000000000000000018400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762fcf3ed84427ccfca35643be0434dcdc8d97afcb5f3c608d4cee99899a9e6b92cd1bf347afeb4c713452ea23cd84f9c23e0b34df5c4c42091a94044e62bd363186a200108b4f56aff84e28b06bd4397e60bbf4800cf6834c4260a2ee820f00fc9b374e442e9b043757733eea1eaf29926fd1649a50ff3ac9d2c97629f01c9297f5dee61abb05b292ff238cb641b5db4a404d3ade1c6d848f720c9768627b46f0d5dc"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000003000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e6403e275f1972eb00a67a8f28f569ad6de837edbfa43bd5e2032b88483be0020000", @ANYRES16=r5, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000bc0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000000)={r9, 0x10, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00'], 0x24}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000540, 0x20000000060e, 0x20000000063e], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x108) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@local, @in=@broadcast, 0x4e21, 0x0, 0x4e23, 0xfff, 0xa, 0x80, 0x80, 0x3c, r12}, {0x56, 0xcfdf, 0x40, 0x5, 0x5, 0x3, 0x40, 0x447f}, {0xff, 0x2, 0xddc, 0xffffffffffff6eba}, 0x10000, 0x6e6bb4, 0x0, 0x0, 0x6}, {{@in=@private, 0x4d2, 0xff}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x1, 0x8, 0x5, 0x3ff, 0x78000000}}, 0xe8) sendmmsg(r10, &(0x7f00000000c0), 0x2c8, 0x0) 972.549869ms ago: executing program 3 (id=6879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000003780)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/191, 0xbf}, {&(0x7f0000003500)=""/168, 0xa8}, {&(0x7f00000035c0)=""/129, 0x81}], 0x4, &(0x7f00000036c0)=""/183, 0xb7}, 0x40000002) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x43, &(0x7f0000000000), 0xff7b) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08fa9a0000000000"], 0x34}}, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 945.439532ms ago: executing program 0 (id=6880): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80cd}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x200}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6fd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48c4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "e4253893972872868cb78f3c0b02885769c647a53600601c6785127df6e7aa6d71f7570bd2776d67268e751d2cab9904367d8d698da575745cc373f10b1ce5568cd6b35d539ab64f61c28cb9dc4f4e7ff041d5c1fef948cd52a70bf09a268b6d0f1c4c79c316330be93b358ce18fbeb1e4e94e4ce76cbe2f39d0a888a9ea351ed40090b1f79d4f705578ea857e05b5d9c698a876602c731531d8caed201077faaa994860f6101ca32720531a74279100e9b1bf3e6c2c432397431e4766c81939602a2577057fd73733f43a5adb1c06440375c95dee0b4d08baf59b4281ac1cf712658266"}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "299b7b26e366dd453e24bc45eeb3ec4b2df60b802deaeff95b8ebf067f541256c46434f4681ada6b90eeb45fc4c356dae30f707eeaa5586e0c3aa160a59df6b3d9ca2afc2d0ecf3933c302623cf6102ae9f45405721f06306f85"}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x40801) (async, rerun: 32) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x9, 0x18}, 0xc) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r4, &(0x7f00000006c0)="7699ed278af9c3a3bc3c9368e56f50df9220262870b75db30e4368f6dd0f49a8cc44587239ce5c85a985afbbe44a02c585385e43ad18c977ba360f61e1740a10a93661e6f33e75c35e7610055364ffec3db48758ba37aaa41ff748c56e11f878601b", &(0x7f0000000740)=""/229}, 0x20) close(0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x8d0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) read(r0, &(0x7f0000000a40)=""/87, 0x57) (async) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r10, 0x0, 0x0, 0x80800) (async) getsockopt$bt_hci(r10, 0x0, 0x1, &(0x7f0000000b00)=""/59, &(0x7f0000000b40)=0x3b) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r11) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000001dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d80)={&(0x7f0000000c00)={0x1180, r12, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @void, @val={0xc, 0x99, {0xeac3, 0x65}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1158, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1154, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x4}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="c8add53d92d3"}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1124, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x97, 0x3, "f7ebf537d4d32abb1d791495f81e1099b9b41053edd3873b9758e137f974420eb233a96157ace6a166cd2b3391cb749da2b1ef306b324a3355a45bbc2cbf15cbea40c934813b9dd32b3c528be2c36a91ab504bb700d5d69cad7aba0ef55bf00fbc76664f9a4733b93fb3ddff47d6bed513c43a5a01d414f19d8662840f5a4f8e88ba4ac15fca611bbb81b0802a0cb953ff6b20"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_6GHZ={0x82, 0x3, "e8700656c937bf394fa3811f476993018d8679a82e9903ba99649f6742e0ddfe6f9f7c53e8aa2e6373ed3e06f182fe0189efa06d01650ee223e76996cf759475a374e52a6cd7d6356107471d67ec72a8f1d85fd0a6753fa289e649862b67da3b07fe86bc714a9125d59c4ad3be00ab307e6f40224fef1b9c076870b1ba2a"}]}]}]}]}, 0x1180}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040000) (async) socket(0x2, 0x80000, 0x1) ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000001e00)={r9, 0x0, 0x5d, 0x2, 0xe67, 0xf, [0x7, 0x77b, 0x8, 0x4, 0x8000000000000001, 0x6]}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r10, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r12, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x26, 0x26}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x20008004) (async) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000002000)=0x0) sendmsg$AUDIT_SET(r10, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r14, 0xe, 0x61d4, 0x8, 0xd263, 0x0, 0x567, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x841) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000002100)) 912.380203ms ago: executing program 3 (id=6881): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xfff1}, {0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r4, &(0x7f00000001c0), 0x20000000}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) listen(r6, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r8, @ANYBLOB="0000d20000000000850b5d61335d40f9536cde4d3016ecad3b000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001b31a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800ab580000877100000000000000000700000006000000150000070000000000612e00616100"], 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x20) recvfrom$inet(r6, 0x0, 0x0, 0x40000020, 0x0, 0x64) socket$netlink(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="2dd9194d", @ANYRES16=r11, @ANYBLOB="21172abd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) 728.365443ms ago: executing program 0 (id=6882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff0000000000000085000000410000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd4, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'ip_vti0\x00', r3, 0x8, 0x8000, 0x7, 0x3, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0xc, 0x43, 0x0, 0x9, [0x0, 0x57a4]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x101}, @TCA_FQ_QUANTUM={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 726.726972ms ago: executing program 3 (id=6883): socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r2, 0x1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x400000000000000, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0x3, 0x80}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7d9bbffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff7f}]}, &(0x7f0000000400)=0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 633.824933ms ago: executing program 1 (id=6884): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x15, 0x5, 0x0) socket$inet6(0xa, 0xa, 0x8) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4916a", 0x7) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}}}, 0x24}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x60, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) close(0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xfff3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getchain={0x44, 0x66, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0x7, 0xf}, {0xe, 0xfff3}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x800000}]}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @loopback, r5}, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095", @ANYRES8=0x0], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 525.268433ms ago: executing program 4 (id=6885): getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000840)={0x9, 0x2000, 0x3, 0x40, 0xc, 0x6, 0xffff, 0x7, r0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000250002000000000005000200000000004500000000000000a500feff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)=@in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x47}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10, 0x1000) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = accept$inet(r1, 0x0, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x9, 0x80, 0x6, 0x3, 0x5, 0x8, 0x0, 0xc1, 0xf, 0x7, 0x1}, 0xe) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r8, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 215.929656ms ago: executing program 0 (id=6886): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async, rerun: 64) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x2402c0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000800)={0x0, 0x1, 0xb, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000f80)={{r0}, 0x0, 0xc, @unused=[0x8, 0x5, 0x8, 0x7], @name="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"}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030500400000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00128009000100626f6e64ff0000000c00028008000900fdffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000007d80)={0x8a0, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 206.232035ms ago: executing program 2 (id=6887): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000004c65b1f67ce893f6fba000a263540000000300260014000600736974300000000000000000000000001400070000000000000000000000ffff7f000001"], 0x3c}, 0x8, 0x3000000000002}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, '\x00'}}}}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x77, &(0x7f00000003c0)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @tipc={{0x14, 0x4, 0x0, 0x2e, 0x69, 0x68, 0x0, 0x8, 0x6, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0xf, 0xd5, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0xc5, 0xb, "c903b37ca81064731c"}, @ra={0x94, 0x4, 0x1}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x2, 0xffff, 0x0, 0x1, 0x3, 0x4, 0x0, 0xf, 0x3, 0x0, 0x4e23, 0x4e21}}, [0x0]}}}}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r12, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 151.818843ms ago: executing program 1 (id=6888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.918482ms ago: executing program 0 (id=6889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@deltclass={0x4c, 0x29, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x15}, {0xfff3, 0xfff1}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1d}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 0s ago: executing program 1 (id=6890): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r2, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x2a, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@exp_fastopen={0xfe, 0x6, 0xf989, '\rO'}, @timestamp={0x5, 0xa, 0x7fffff8}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffc, 0x1}, 0xe) (async, rerun: 32) writev(r5, &(0x7f0000000200), 0x20) (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r7}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0) (async) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f00000000c0)={r5, 0x0, 0x0, 0xb2f, 0xe15e, 0x1, [0x4, 0x6, 0x7, 0xe, 0x8, 0x8]}) kernel console output (not intermixed with test programs): mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.895467][T15154] net_ratelimit: 6 callbacks suppressed [ 880.895489][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 881.124825][T30268] netlink: 'syz.4.5984': attribute type 33 has an invalid length. [ 881.170866][T30268] openvswitch: netlink: Flow actions attr not present in new flow. [ 881.174364][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 881.250204][T30265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5984'. [ 881.303534][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 881.317302][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5984'. [ 881.628415][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 881.649341][T30289] netlink: 'syz.1.5989': attribute type 30 has an invalid length. [ 881.749925][T30289] bond0: option arp_missed_max: invalid value (0) [ 881.763853][T30289] bond0: option arp_missed_max: allowed values 1 - 255 [ 881.785165][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 881.937419][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 882.098830][T30303] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 882.175250][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 882.325225][ T165] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 882.435219][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 883.690590][T30352] ipt_ECN: cannot use operation on non-tcp rule [ 883.759358][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.840559][T20910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.856956][T20910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.866674][T20910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.898270][T20910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.910121][T20910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.139408][T17631] syz_tun (unregistering): left allmulticast mode [ 884.418382][T30370] __nla_validate_parse: 4 callbacks suppressed [ 884.418404][T30370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6010'. [ 884.732932][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.763251][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.846595][T30367] geneve3: left promiscuous mode [ 884.851620][T30367] geneve3: left allmulticast mode [ 884.882345][T15156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 885.012543][ T165] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.064465][ T165] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 885.074598][ T165] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.180332][T15156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 885.212674][T15156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 885.247772][T15156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 885.302240][ T165] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.344236][ T165] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 885.375670][ T165] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.547762][T30398] netlink: 'syz.2.6017': attribute type 1 has an invalid length. [ 885.625679][T30404] netlink: 'syz.4.6018': attribute type 4 has an invalid length. [ 885.645596][T30404] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6018'. [ 885.728707][T30398] bond8: entered promiscuous mode [ 885.753526][T30398] 8021q: adding VLAN 0 to HW filter on device bond8 [ 885.853727][T30409] bond8: (slave bridge8): making interface the new active one [ 885.898499][T30409] bridge8: entered promiscuous mode [ 885.926153][T30409] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 885.995659][T20910] Bluetooth: hci1: command tx timeout [ 886.004268][ T165] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.014249][ T165] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.030686][ T165] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 886.061479][T30403] ipvlan2: entered allmulticast mode [ 886.074663][T30403] bond8: entered allmulticast mode [ 886.081516][T30403] bridge8: entered allmulticast mode [ 886.110496][T30406] ipvlan3: entered allmulticast mode [ 886.177932][ T165] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.213958][ T165] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.243047][ T165] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 886.453280][T30421] x_tables: duplicate underflow at hook 1 [ 886.476770][T30354] lo speed is unknown, defaulting to 1000 [ 886.483955][T15154] net_ratelimit: 13 callbacks suppressed [ 886.483976][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 886.602063][T30354] lo speed is unknown, defaulting to 1000 [ 886.619385][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 886.753563][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 886.782510][T30429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6022'. [ 887.035783][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 887.044233][T30435] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6025'. [ 887.261775][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 887.474333][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 887.572235][T30452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6029'. [ 887.653000][T30452] block nbd3: Unsupported socket: should be TCP or UNIX. [ 887.810211][ T165] vlan0: left allmulticast mode [ 887.839179][ T165] dummy0: left allmulticast mode [ 887.881412][ T165] vlan0: left promiscuous mode [ 887.886255][ T165] dummy0: left promiscuous mode [ 887.891644][ T165] bridge0: port 1(vlan0) entered disabled state [ 888.031656][ T165] dvmrp0: left allmulticast mode [ 888.072391][ T165] batman_adv: batadv0: Interface deactivated: gretap3 [ 888.075634][T20910] Bluetooth: hci1: command tx timeout [ 888.903786][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6032'. [ 889.626140][ T165] bond6 (unregistering): (slave erspan2): Releasing active interface [ 889.634664][ T165] erspan2 (unregistering): left promiscuous mode [ 889.740308][ T165] batman_adv: batadv0: Removing interface: gretap3 [ 890.065960][ T165] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 890.082706][ T165] bond0 (unregistering): Released all slaves [ 890.100398][ T165] bond1 (unregistering): Released all slaves [ 890.123050][ T165] bond2 (unregistering): Released all slaves [ 890.148579][ T165] bond3 (unregistering): Released all slaves [ 890.155464][T20910] Bluetooth: hci1: command tx timeout [ 890.184896][ T165] bond4 (unregistering): Released all slaves [ 890.210361][ T165] bond5 (unregistering): Released all slaves [ 890.238360][ T165] bond6 (unregistering): Released all slaves [ 890.274127][ T165] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 890.283577][ T165] wireguard0: left promiscuous mode [ 890.294052][ T165] bond7 (unregistering): Released all slaves [ 890.342898][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 890.495073][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 890.587323][T30489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6034'. [ 890.788663][T30493] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6034'. [ 890.799372][ T165] tipc: Disabling bearer [ 890.845435][ T165] tipc: Left network mode [ 890.919653][T30497] siw: device registration error -23 [ 890.942443][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 891.088443][T30501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6036'. [ 891.145122][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 891.385161][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 891.485708][T30507] lo speed is unknown, defaulting to 1000 [ 891.603783][T30520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6042'. [ 891.722160][T30524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 891.866723][T30507] lo speed is unknown, defaulting to 1000 [ 891.877217][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 892.245907][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 892.253866][T20910] Bluetooth: hci1: command tx timeout [ 892.262577][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6048'. [ 892.466838][T30551] hmac(sh: entered promiscuous mode [ 892.994391][T30570] netlink: 'syz.2.6052': attribute type 30 has an invalid length. [ 893.379913][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 893.419527][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 893.535203][T30596] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6059'. [ 893.597749][T30596] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.607109][T30596] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.644698][T30354] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.652437][T30354] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.663347][T30354] bridge_slave_0: entered allmulticast mode [ 893.677846][T30354] bridge_slave_0: entered promiscuous mode [ 893.784138][T30606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6061'. [ 893.809556][T30354] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.817646][T30354] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.836522][T30354] bridge_slave_1: entered allmulticast mode [ 893.885944][T30354] bridge_slave_1: entered promiscuous mode [ 894.459598][T30354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.550283][T30354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.735931][T30354] team0: Port device team_slave_0 added [ 894.770631][T30354] team0: Port device team_slave_1 added [ 894.966274][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 895.060951][T30635] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.6066'. [ 895.070431][T30635] netlink: Unknown conntrack attr (type=2304, max=9) [ 895.089675][T30636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6065'. [ 895.311717][T30642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6066'. [ 895.385554][T30644] netlink: 'syz.2.6067': attribute type 1 has an invalid length. [ 895.539435][T30637] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 895.559855][T30354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.584919][T30354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.645089][T30354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.743805][ T165] hsr0: left allmulticast mode [ 896.244064][ T165] pim6reg (unregistering): left allmulticast mode [ 896.330604][T30666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6071'. [ 896.698305][T28926] smbdirect: ib_dev[syz1] removed [ 897.277985][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 897.287760][T30354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.324768][T30354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.356145][T30354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.419510][ T6447] infiniband syz1: ib_query_port failed (-19) [ 897.453126][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 897.584766][T30675] netlink: 'syz.3.6075': attribute type 1 has an invalid length. [ 897.966575][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 898.035825][T30677] bond14: (slave bridge11): making interface the new active one [ 898.056838][T30677] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 898.136910][T30354] hsr_slave_0: entered promiscuous mode [ 898.144851][T30354] hsr_slave_1: entered promiscuous mode [ 898.162676][T30683] bond14: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 898.292210][T30687] 8021q: adding VLAN 0 to HW filter on device bond15 [ 898.347736][T30689] bond6: option tlb_dynamic_lb: invalid value (5) [ 898.359300][T30689] bond6 (unregistering): Released all slaves [ 898.376337][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6080'. [ 898.408669][T30707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6080'. [ 898.625967][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 898.985147][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 898.994636][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'. [ 899.133995][T30728] netlink: 'syz.2.6085': attribute type 21 has an invalid length. [ 899.200481][T30728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6085'. [ 899.311227][ T165] IPVS: stop unused estimator thread 0... [ 899.405325][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 899.520870][T30734] bond10: option min_links: invalid value (18446744073709551612) [ 899.539125][T30734] bond10: option min_links: allowed values 0 - 2147483647 [ 899.578843][T30734] bond10 (unregistering): Released all slaves [ 899.662349][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 899.688023][T30741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6088'. [ 899.720270][T30741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6088'. [ 899.838164][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 900.068148][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 900.083429][T30764] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 900.094692][T30764] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6093'. [ 900.185194][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 900.267691][T30770] netlink: 'syz.1.6095': attribute type 1 has an invalid length. [ 900.294019][T30770] netlink: 'syz.1.6095': attribute type 1 has an invalid length. [ 900.415937][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 900.420469][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'. [ 900.474467][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'. [ 901.336501][T30779] macsec2: entered promiscuous mode [ 901.348643][T30791] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6100'. [ 901.372716][T30791] openvswitch: netlink: Missing key (keys=40, expected=100) [ 901.411816][T30794] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6100'. [ 901.461745][T30794] openvswitch: netlink: Missing key (keys=40, expected=100) [ 901.671330][T30805] xt_hashlimit: size too large, truncated to 1048576 [ 901.753829][T30808] bridge_slave_0 (unregistering): left allmulticast mode [ 901.788040][T30808] bridge_slave_0 (unregistering): left promiscuous mode [ 901.819741][T30808] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.944038][T30811] netlink: 'syz.2.6104': attribute type 10 has an invalid length. [ 901.987459][T30811] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6104'. [ 902.218581][T30823] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6106'. [ 902.525344][ T8183] net_ratelimit: 5 callbacks suppressed [ 902.525366][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 902.686847][T30834] xt_cgroup: xt_cgroup: no path or classid specified [ 902.737397][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 902.865554][ T165] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 902.884692][T30354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.936738][T30354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.983145][T30354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 903.048305][T30354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.079094][T30354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 903.121521][T30354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.150009][T30354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 903.187912][T30354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.365466][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 903.499289][ T165] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 903.596850][T30354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.633474][T30872] geneve3: entered promiscuous mode [ 903.641416][ T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.674137][ T47] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.706437][ T47] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.734456][ T47] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.785255][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 903.888520][T30354] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.959255][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.966537][T15154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.046586][T28926] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.053853][T28926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.136902][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 904.158970][T30886] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 904.168435][T30886] syzkaller1: linktype set to 260 [ 904.216829][T30886] syzkaller1: tun_chr_ioctl cmd 35108 [ 904.392454][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 904.545865][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 904.577993][T30897] netlink: 'syz.4.6121': attribute type 3 has an invalid length. [ 904.738517][T30902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6122'. [ 904.800077][T30899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 904.977448][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 905.068758][T30916] netlink: 'syz.4.6124': attribute type 8 has an invalid length. [ 905.133209][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6124'. [ 905.263023][T30919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6125'. [ 906.749639][T30943] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6130'. [ 907.153346][T30941] lo speed is unknown, defaulting to 1000 [ 907.172257][T30941] lo speed is unknown, defaulting to 1000 [ 907.665441][T30354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.719354][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6135'. [ 907.762130][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6135'. [ 907.787105][T28926] net_ratelimit: 9 callbacks suppressed [ 907.787126][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 907.880959][T30354] veth0_vlan: entered promiscuous mode [ 907.943886][T30354] veth1_vlan: entered promiscuous mode [ 907.981281][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 908.024911][T30354] veth0_macvtap: entered promiscuous mode [ 908.091868][T30354] veth1_macvtap: entered promiscuous mode [ 908.101475][T31005] lo speed is unknown, defaulting to 1000 [ 908.136180][T30354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.192980][T30354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.239532][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.264660][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.299398][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.323617][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.357288][T31005] lo speed is unknown, defaulting to 1000 [ 908.896759][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 909.066082][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 909.107032][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.137753][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.257074][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 909.274708][T15153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.303838][T15153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.149215][T31047] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.157033][T31047] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.514405][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.532615][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.547397][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.561107][T31047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.564576][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.579021][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.599806][T31047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.039331][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 911.048236][T28926] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.057216][T28926] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.247563][T28926] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.256549][T28926] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.335371][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 911.486306][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 911.597985][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 911.654433][T31087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6147'. [ 911.734684][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 911.979935][T31058] lo speed is unknown, defaulting to 1000 [ 912.086772][T31058] lo speed is unknown, defaulting to 1000 [ 912.635543][ T5629] Bluetooth: hci2: command tx timeout [ 912.789617][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6150'. [ 913.107124][T31115] 8021q: adding VLAN 0 to HW filter on device bond10 [ 913.235830][T31116] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 913.258386][T31126] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 913.266183][T31126] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6152'. [ 913.288782][T31116] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 913.297607][T15154] net_ratelimit: 6 callbacks suppressed [ 913.297626][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 913.305217][T31126] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 913.305242][T31126] netlink: 638 bytes leftover after parsing attributes in process `syz.0.6152'. [ 913.305260][T31126] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6152'. [ 913.448869][T31126] netlink: 'syz.0.6152': attribute type 4 has an invalid length. [ 913.485984][T31126] netlink: 'syz.0.6152': attribute type 4 has an invalid length. [ 913.516410][T31134] syzkaller0: entered promiscuous mode [ 913.530479][T31134] syzkaller0: entered allmulticast mode [ 913.560917][T31126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6152'. [ 913.668891][T31145] netlink: 'syz.1.6155': attribute type 10 has an invalid length. [ 913.729534][T31145] syz_tun: entered promiscuous mode [ 913.795622][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 914.309269][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 914.498744][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 914.608775][T31181] syzkaller0: entered promiscuous mode [ 914.615220][T31181] syzkaller0: entered allmulticast mode [ 914.652450][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 914.715068][ T5629] Bluetooth: hci2: command tx timeout [ 915.042878][T31195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6165'. [ 915.211388][T31204] netlink: 'syz.1.6167': attribute type 1 has an invalid length. [ 915.231473][T31204] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6167'. [ 915.263770][T31207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6167'. [ 916.806056][ T5629] Bluetooth: hci2: command tx timeout [ 918.490088][T31207] geneve4: entered promiscuous mode [ 918.594263][T31058] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.618536][T31058] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.626121][T31058] bridge_slave_0: entered allmulticast mode [ 918.638886][T31058] bridge_slave_0: entered promiscuous mode [ 918.656000][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 918.671576][T31058] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.697355][T31058] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.723660][T31058] bridge_slave_1: entered allmulticast mode [ 918.748890][T31058] bridge_slave_1: entered promiscuous mode [ 918.759436][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6169'. [ 918.802029][T31058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.816105][T31058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.883963][ T5629] Bluetooth: hci2: command tx timeout [ 919.006125][T31058] team0: Port device team_slave_0 added [ 919.076724][T31266] netlink: 'syz.2.6173': attribute type 1 has an invalid length. [ 919.099382][T31266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6173'. [ 919.103196][T31058] team0: Port device team_slave_1 added [ 919.145281][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 919.238248][ T29] audit: type=1800 audit(1777920442.512:25): pid=31266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6173" name="r" dev="tmpfs" ino=3296 res=0 errno=0 [ 919.285719][T31058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.297313][T31058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.329789][T31058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.342911][T31058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.349945][T31058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.400528][T31283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 919.442346][T31058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.458257][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6177'. [ 919.527940][T31291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6177'. [ 919.646649][T31058] hsr_slave_0: entered promiscuous mode [ 919.655525][T31058] hsr_slave_1: entered promiscuous mode [ 919.662335][T31058] debugfs: 'hsr0' already exists in 'hsr' [ 919.671614][T31058] Cannot create hsr debugfs directory [ 919.700824][T31296] syzkaller0: entered promiscuous mode [ 919.717451][T31296] syzkaller0: entered allmulticast mode [ 919.732516][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 919.922566][T31302] netlink: 'syz.4.6184': attribute type 7 has an invalid length. [ 920.015872][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 920.200652][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 920.328881][T31321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.460530][T31058] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.615188][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 920.713337][T31058] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.761391][T31331] netlink: 'syz.2.6192': attribute type 8 has an invalid length. [ 920.771124][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 920.919542][T31058] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.965046][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 921.080199][T31336] gtp0: entered promiscuous mode [ 921.100664][T31336] gtp0: entered allmulticast mode [ 921.170473][T31058] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.240406][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 921.263805][T31346] xt_l2tp: wrong L2TP version: 0 [ 921.376450][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 921.444568][T31355] netlink: 'syz.4.6199': attribute type 1 has an invalid length. [ 921.635921][T31355] 8021q: adding VLAN 0 to HW filter on device bond11 [ 921.698948][T31358] veth9: entered promiscuous mode [ 921.711387][T31358] bond11: (slave veth9): Enslaving as an active interface with an up link [ 921.725228][T31369] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6203'. [ 921.897367][T31378] netlink: 'syz.4.6204': attribute type 1 has an invalid length. [ 921.929748][T31058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 921.980770][T31058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.112303][T31388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6204'. [ 922.230191][T31378] bond12: entered promiscuous mode [ 922.273875][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6204'. [ 922.317012][T31378] 8021q: adding VLAN 0 to HW filter on device bond12 [ 922.341479][T31388] netlink: 'syz.4.6204': attribute type 15 has an invalid length. [ 922.369937][T31058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 922.409881][T31394] netlink: 'syz.1.6207': attribute type 10 has an invalid length. [ 922.417768][T31394] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6207'. [ 922.436390][T31058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.444468][T31058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 922.475019][T31058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.487504][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6204'. [ 922.578912][T31396] bond12: (slave bridge6): making interface the new active one [ 922.586608][T31396] bridge6: entered promiscuous mode [ 922.606327][T31396] bridge6: left promiscuous mode [ 922.718907][T31058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 922.734327][T31058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 923.322201][T31058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.372642][T31058] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.558757][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.566029][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.635703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.644222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.760473][ T12] net_ratelimit: 6 callbacks suppressed [ 923.760494][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 923.870970][T31461] ip6tnl0: Caught tx_queue_len zero misconfig [ 923.895599][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.015134][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.140573][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.325656][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.462753][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.496878][T31488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6230'. [ 924.542503][T31488] vlan2: entered allmulticast mode [ 924.548707][T31488] macvtap0: entered allmulticast mode [ 924.593593][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.700418][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6232'. [ 924.759155][ T8183] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 924.843739][T31058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.943304][ T165] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 925.092873][T31499] lo speed is unknown, defaulting to 1000 [ 925.103565][ T165] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 925.134583][T31499] lo speed is unknown, defaulting to 1000 [ 925.193256][T31058] veth0_vlan: entered promiscuous mode [ 925.233047][T31516] netlink: 'syz.4.6236': attribute type 2 has an invalid length. [ 925.283533][T31058] veth1_vlan: entered promiscuous mode [ 925.412442][T31521] netlink: 'syz.4.6237': attribute type 32 has an invalid length. [ 925.420332][T31521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6237'. [ 925.426376][T31058] veth0_macvtap: entered promiscuous mode [ 925.475898][T31058] veth1_macvtap: entered promiscuous mode [ 925.539029][T31058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.581580][T31058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.612039][T15154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.635503][T15154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.738067][T15154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.768871][T15154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.261581][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.295257][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.313308][T31532] bridge0: port 2(syz_tun) entered blocking state [ 926.330814][T31532] bridge0: port 2(syz_tun) entered disabled state [ 926.340408][T31532] syz_tun: entered promiscuous mode [ 926.399682][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.419975][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.673888][T31545] dvmrp0: left allmulticast mode [ 926.790825][T31542] sctp: [Deprecated]: syz.4.6244 (pid 31542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.790825][T31542] Use struct sctp_sack_info instead [ 926.844393][T31542] sctp: [Deprecated]: syz.4.6244 (pid 31542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.844393][T31542] Use struct sctp_sack_info instead [ 927.285506][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 927.391646][T20910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 927.416725][T20910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 927.434698][T20910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 927.438245][T31567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'. [ 927.467465][T20910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 927.480721][T20910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.194312][T18489] syz_tun (unregistering): left allmulticast mode [ 928.209711][T18489] syz_tun (unregistering): left promiscuous mode [ 928.224486][T18489] bridge0: port 2(syz_tun) entered disabled state [ 928.672270][T31614] netlink: 'syz.4.6255': attribute type 21 has an invalid length. [ 928.708305][T31614] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6255'. [ 928.868041][T31615] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6255'. [ 929.045684][T31614] netlink: 'syz.4.6255': attribute type 4 has an invalid length. [ 929.089221][T31614] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6255'. [ 929.611734][ T5629] Bluetooth: hci5: command tx timeout [ 929.612079][T31634] bond1: option arp_validate: invalid value (18446744073709551613) [ 929.636844][T31634] bond1 (unregistering): Released all slaves [ 929.656678][T31643] xt_NFQUEUE: number of total queues is 0 [ 930.342464][T31653] netlink: 'syz.1.6263': attribute type 14 has an invalid length. [ 930.513668][T31660] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.6265'. [ 930.553456][T31565] lo speed is unknown, defaulting to 1000 [ 930.563833][ T35] net_ratelimit: 19 callbacks suppressed [ 930.563855][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 930.578574][T31565] lo speed is unknown, defaulting to 1000 [ 931.265251][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 931.440075][ T12] veth0_virt_wifi: left allmulticast mode [ 931.463907][ T12] veth0_virt_wifi: left promiscuous mode [ 931.490925][ T12] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 931.692511][ T5629] Bluetooth: hci5: command tx timeout [ 931.755361][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.772173][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.237612][T31720] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6279'. [ 932.454534][ T12] gretap0 (unregistering): left promiscuous mode [ 932.933370][ T12] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 933.022099][ T12] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 933.030561][ T12] bridge8 (unregistering): left promiscuous mode [ 933.037718][ T12] bridge8 (unregistering): left allmulticast mode [ 933.144221][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.154013][ T12] bond0 (unregistering): Released all slaves [ 933.168716][ T12] bond1 (unregistering): Released all slaves [ 933.190521][ T12] bond2 (unregistering): Released all slaves [ 933.213145][ T12] team0: Port device bond3 removed [ 933.222274][ T12] bond3 (unregistering): Released all slaves [ 933.253249][ T12] bond4 (unregistering): Released all slaves [ 933.274368][ T12] bond5 (unregistering): Released all slaves [ 933.309542][ T12] bond6 (unregistering): Released all slaves [ 933.330412][ T12] bond7 (unregistering): Released all slaves [ 933.368741][ T12] bond8 (unregistering): Released all slaves [ 933.402727][ T12] bond9 (unregistering): Released all slaves [ 933.424353][ T12] bond10 (unregistering): Released all slaves [ 933.468069][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 933.566172][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 933.756499][ T5629] Bluetooth: hci5: command tx timeout [ 933.919252][ T12] : left promiscuous mode [ 934.096507][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 934.133540][ T12] hmó3)ó: left promiscuous mode [ 934.386181][ T12] tipc: Left network mode [ 934.395822][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 934.424685][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6287'. [ 934.665123][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6288'. [ 934.665778][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 934.731791][ T12] IPVS: stopping backup sync thread 20548 ... [ 934.911529][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 935.127871][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 935.351225][ T5629] block nbd3: Receive control failed (result -32) [ 935.459367][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 935.468748][T31565] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.503731][T31565] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.540508][T31565] bridge_slave_0: entered allmulticast mode [ 935.588450][T31565] bridge_slave_0: entered promiscuous mode [ 935.774708][T31772] syzkaller0: entered promiscuous mode [ 935.780490][T31772] syzkaller0: entered allmulticast mode [ 935.795076][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 935.805649][T31565] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.828107][T31565] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.844168][ T5629] Bluetooth: hci5: command tx timeout [ 935.848923][T31565] bridge_slave_1: entered allmulticast mode [ 935.863655][T31565] bridge_slave_1: entered promiscuous mode [ 935.902364][T31790] netlink: 'syz.4.6291': attribute type 29 has an invalid length. [ 935.931900][T31793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6292'. [ 935.957095][T31793] netlink: 'syz.1.6292': attribute type 1 has an invalid length. [ 936.772224][T31797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6291'. [ 939.518034][T31796] bond6: (slave geneve5): making interface the new active one [ 939.530705][T31796] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 939.542476][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 939.688732][T31805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.702985][T31805] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.737334][T31805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.776306][T31818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6296'. [ 939.782316][T31805] wireguard: wg0: Could not create IPv4 socket [ 939.793441][T31805] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 939.854018][T31565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.905101][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 939.927252][ T8179] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 939.935747][ T8179] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 939.960526][T31565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.000482][ T8179] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 940.018442][ T8179] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 940.067377][T31795] lo speed is unknown, defaulting to 1000 [ 940.082769][T31828] sctp: [Deprecated]: syz.1.6298 (pid 31828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.082769][T31828] Use struct sctp_sack_info instead [ 940.142073][T31565] team0: Port device team_slave_0 added [ 940.169139][T31565] team0: Port device team_slave_1 added [ 940.195519][T31795] lo speed is unknown, defaulting to 1000 [ 940.458131][T31565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.473169][T31565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.553739][T31565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.727899][T31565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.742952][T31565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.788592][T31565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.959619][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 941.147342][T31565] hsr_slave_0: entered promiscuous mode [ 941.178314][T31565] hsr_slave_1: entered promiscuous mode [ 941.199050][T31565] debugfs: 'hsr0' already exists in 'hsr' [ 941.230182][T31565] Cannot create hsr debugfs directory [ 941.399773][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 941.608494][ T12] veth1_to_team: left promiscuous mode [ 941.631318][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.647597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.867683][T31857] netlink: 'syz.3.6303': attribute type 1 has an invalid length. [ 941.904626][T31857] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6303'. [ 947.212753][ T12] team0 (unregistering): Port device team_slave_1 removed [ 947.259736][ T12] team0 (unregistering): Port device team_slave_0 removed [ 947.580228][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 947.592172][T31870] netlink: 'syz.0.6307': attribute type 15 has an invalid length. [ 947.864345][T31877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'. [ 947.945930][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 948.446705][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 948.473152][ T12] IPVS: stop unused estimator thread 0... [ 948.568345][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 948.745268][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 948.888008][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 949.018294][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 949.196913][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 949.325267][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 949.435282][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 949.545138][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 950.808093][T31877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.889663][T31565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.991892][T31565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.013657][T31565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 951.081787][T31565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.148563][T31565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 951.257578][T31565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.281525][T31565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 951.299413][T31922] netlink: 'syz.4.6320': attribute type 1 has an invalid length. [ 951.338406][T31565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.488393][T31922] 8021q: adding VLAN 0 to HW filter on device bond14 [ 951.546039][T31925] bond14: (slave veth11): Enslaving as an active interface with an up link [ 951.849257][T31932] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 951.879441][T31932] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 951.949991][T31920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 951.955967][T31920] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 951.991126][T31565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.099814][T31565] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.137200][T31920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 952.163239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.170480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.183079][T31920] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 952.296863][T31956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.343326][T31956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.350830][T31920] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 952.368122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.375364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.392986][T31920] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 952.467086][T31957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6324'. [ 952.772485][T31967] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6325'. [ 952.957053][T31970] bond1: entered promiscuous mode [ 952.975448][ T47] net_ratelimit: 18 callbacks suppressed [ 952.975506][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 953.138685][T31977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6328'. [ 953.147710][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 953.509118][T31988] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 953.535094][T31988] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 953.542783][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 953.563350][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6329'. [ 953.574170][T31980] lo speed is unknown, defaulting to 1000 [ 953.598598][T31980] lo speed is unknown, defaulting to 1000 [ 953.698413][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 953.827765][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 954.036874][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 954.173721][T32014] netlink: 'syz.4.6333': attribute type 1 has an invalid length. [ 954.188823][T32014] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6333'. [ 954.276527][T31565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.374571][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 954.519970][T31565] veth0_vlan: entered promiscuous mode [ 954.578716][T31565] veth1_vlan: entered promiscuous mode [ 954.656390][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 954.828724][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 955.010113][T31565] veth0_macvtap: entered promiscuous mode [ 955.085515][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 955.110813][T31565] veth1_macvtap: entered promiscuous mode [ 955.226143][T31565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.258783][T31565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.319289][ T8184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.345856][ T8184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.367869][ T8184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.417869][ T8184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.817151][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.854114][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.031457][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.041271][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.451082][T32080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6345'. [ 957.354824][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6355'. [ 957.407573][T20910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 957.419808][T20910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 957.431703][T20910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 957.444756][T20910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 957.448177][T32110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6355'. [ 957.463434][T20910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.551152][ T359] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.551343][T32110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6355'. [ 957.583766][T32110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6355'. [ 957.603408][ T8179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.656030][ T8179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.738210][T32122] netlink: 'syz.2.6355': attribute type 1 has an invalid length. [ 957.761953][ T8179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.134999][T19120] syz_tun (unregistering): left allmulticast mode [ 958.473896][ T8179] net_ratelimit: 19 callbacks suppressed [ 958.473919][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 958.679410][ T8184] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.749158][ T8184] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 959.028302][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 959.168194][ T8184] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.209169][ T8184] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 959.402891][ T8184] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.418353][ T8184] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 959.465251][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 959.493822][T32107] lo speed is unknown, defaulting to 1000 [ 959.530481][ T5629] Bluetooth: hci3: command tx timeout [ 959.570723][T32107] lo speed is unknown, defaulting to 1000 [ 959.595735][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 959.635240][ T8184] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.645040][ T8184] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 959.765230][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 959.901875][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 960.081267][T32183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6365'. [ 960.133930][T32186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6366'. [ 960.165195][T32186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6366'. [ 960.370484][T32183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.658726][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 961.012163][ T8184] bridge_slave_0: left allmulticast mode [ 961.026878][ T8184] bridge_slave_0: left promiscuous mode [ 961.032825][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.611255][ T5629] Bluetooth: hci3: command tx timeout [ 961.729857][T32231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6373'. [ 961.816584][ T29] audit: type=1804 audit(1777920485.102:26): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6373" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=193 res=1 errno=0 [ 961.882377][ T29] audit: type=1800 audit(1777920485.102:27): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6373" name="cgroup.controllers" dev="tmpfs" ino=193 res=0 errno=0 [ 961.911583][ T29] audit: type=1804 audit(1777920485.102:28): pid=32232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6373" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=193 res=1 errno=0 [ 962.158122][T32240] netlink: 'syz.3.6374': attribute type 21 has an invalid length. [ 962.360292][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6374'. [ 962.369812][T32243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6374'. [ 962.439385][ T8184] bond6 (unregistering): (slave geneve5): Releasing active interface [ 963.005895][ T8184] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 963.018168][ T8184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.027965][ T8184] bond0 (unregistering): Released all slaves [ 963.046254][ T8184] bond1 (unregistering): Released all slaves [ 963.073230][ T8184] bond2 (unregistering): (slave veth3): Releasing active interface [ 963.082254][ T8184] bond2 (unregistering): Released all slaves [ 963.110557][ T8184] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 963.119709][ T8184] bond3 (unregistering): Released all slaves [ 963.162355][ T8184] bond4 (unregistering): Released all slaves [ 963.189617][ T8184] bond5 (unregistering): Released all slaves [ 963.217293][ T8184] bond6 (unregistering): Released all slaves [ 963.384653][T32240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6374'. [ 963.420906][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 963.430370][T32242] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 963.553521][ T8184] tipc: Disabling bearer [ 963.612658][ T8184] tipc: Disabling bearer [ 963.680963][ T5629] Bluetooth: hci3: command tx timeout [ 963.703589][ T8184] tipc: Left network mode [ 963.705160][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 964.338931][T32259] bond2: invalid ARP target 0.0.0.0 specified for addition [ 964.371103][T32259] bond2: option arp_ip_target: invalid value (0) [ 964.408576][T32259] bond2 (unregistering): Released all slaves [ 964.797952][T32296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6383'. [ 965.239603][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 965.539160][T32306] netlink: 'syz.0.6384': attribute type 13 has an invalid length. [ 965.567388][T32306] netlink: 'syz.0.6384': attribute type 17 has an invalid length. [ 965.604762][T32298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6384'. [ 965.759342][ T5629] Bluetooth: hci3: command tx timeout [ 965.881178][T32313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6388'. [ 965.898781][T32313] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6388'. [ 966.090741][T32306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.122587][T32306] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.170105][T32306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.233625][T32306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.246973][T32306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.262914][T32306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 966.275161][T32306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.309989][T32306] veth1_vlan: left promiscuous mode [ 966.321276][T32306] veth0_vlan: left promiscuous mode [ 966.331420][T32306] veth0_vlan: entered promiscuous mode [ 966.342928][T32306] veth1_vlan: entered promiscuous mode [ 966.355990][T32306] veth1_macvtap: left promiscuous mode [ 966.363416][T32306] veth0_macvtap: left promiscuous mode [ 966.370733][T32306] veth0_macvtap: entered promiscuous mode [ 966.384410][T32306] veth1_macvtap: entered promiscuous mode [ 966.401111][T32306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 966.414057][T32306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 966.427725][T32306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 966.441744][T32306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 966.593444][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.600704][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.619240][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.626516][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.707543][T15153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.716362][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 966.790622][T15153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.791238][T32327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6390'. [ 966.895658][T15153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.074385][T32330] bond15: entered allmulticast mode [ 967.099571][T15153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.112810][T32323] lo speed is unknown, defaulting to 1000 [ 967.121458][T32323] lo speed is unknown, defaulting to 1000 [ 967.125181][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 967.344599][T32347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6394'. [ 967.392383][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6393'. [ 967.449596][T32351] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6395'. [ 967.536736][T32356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6395'. [ 967.619891][T32352] hsr0: entered promiscuous mode [ 967.690739][T32351] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.698258][T32351] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.938177][T32346] hsr0: left promiscuous mode [ 968.089070][T32373] netlink: 'syz.3.6396': attribute type 1 has an invalid length. [ 968.119591][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6396'. [ 968.147480][T32373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6396'. [ 968.258240][T32382] netlink: 'syz.4.6397': attribute type 4 has an invalid length. [ 968.292056][T32107] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.330358][T32107] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.357499][T32383] xt_TCPMSS: Only works on TCP SYN packets [ 968.371098][T32107] bridge_slave_0: entered allmulticast mode [ 968.391586][T32381] xt_TCPMSS: Only works on TCP SYN packets [ 968.408536][T32107] bridge_slave_0: entered promiscuous mode [ 968.463672][T32382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 968.494555][T32107] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.504778][T32107] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.517379][T32107] bridge_slave_1: entered allmulticast mode [ 968.540502][T32107] bridge_slave_1: entered promiscuous mode [ 968.743035][T32392] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 968.936760][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 969.140235][T32395] mac80211_hwsim hwsim53 wlan1: Caught tx_queue_len zero misconfig [ 969.188977][T32401] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 969.202917][T32395] netem: change failed [ 969.227124][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 969.238873][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 969.299022][T32107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.355705][T32404] tc_dump_action: action bad kind [ 969.361024][T32405] netlink: 'syz.3.6403': attribute type 13 has an invalid length. [ 969.382398][T32405] netlink: 'syz.3.6403': attribute type 17 has an invalid length. [ 969.870555][T32403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.890947][T32403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.114688][T32107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.231723][T32405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.243687][T32405] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.262045][T32405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.327739][T32405] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.335040][T32405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.350636][T32405] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.357951][T32405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.392333][T32405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.410806][T32405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.447111][T32405] veth1_vlan: left promiscuous mode [ 970.454205][T32405] veth0_vlan: left promiscuous mode [ 970.462187][T32405] veth0_vlan: entered promiscuous mode [ 970.478493][T32405] veth1_vlan: entered promiscuous mode [ 970.494677][T32405] veth1_macvtap: left promiscuous mode [ 970.502399][T32405] veth0_macvtap: left promiscuous mode [ 970.512812][T32405] veth0_macvtap: entered promiscuous mode [ 970.529129][T32405] veth1_macvtap: entered promiscuous mode [ 970.545789][T32405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.559706][T32405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.573979][T32405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.592657][T32405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.609174][T32405] bond1: left promiscuous mode [ 970.614462][T32405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.863321][ T47] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.887326][T32417] __nla_validate_parse: 2 callbacks suppressed [ 970.887349][T32417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6407'. [ 970.905417][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 970.950639][ T8184] hsr_slave_0: left promiscuous mode [ 971.003535][ T8184] hsr_slave_1: left promiscuous mode [ 971.012125][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.463046][T32434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6410'. [ 971.482090][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6410'. [ 971.494016][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6410'. [ 971.503097][T32434] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6410'. [ 971.881227][ T47] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.891172][ T47] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.978375][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 972.002055][ T47] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.031424][T32107] team0: Port device team_slave_0 added [ 972.069752][T32107] team0: Port device team_slave_1 added [ 972.227027][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 972.243567][T32107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.285303][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.347753][T32107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.387485][T32107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.404201][T32455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6415'. [ 972.414044][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.468387][T32107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.734593][T32468] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 972.785710][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 972.837527][T32107] hsr_slave_0: entered promiscuous mode [ 972.857046][T32107] hsr_slave_1: entered promiscuous mode [ 972.878403][T32474] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6420'. [ 972.883072][T32107] debugfs: 'hsr0' already exists in 'hsr' [ 972.913480][T32474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6420'. [ 972.913910][T32107] Cannot create hsr debugfs directory [ 972.946007][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 972.956421][T32474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6420'. [ 973.013164][ T8184] IPVS: stop unused estimator thread 0... [ 973.129175][T32480] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 973.208795][T32493] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6423'. [ 973.225443][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 973.229214][T32493] netlink: 'syz.4.6423': attribute type 2 has an invalid length. [ 973.525243][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 973.725157][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 973.791559][T32520] No such timeout policy "syz1" [ 973.819367][T32520] netlink: 'syz.2.6430': attribute type 7 has an invalid length. [ 974.035643][T15153] net_ratelimit: 1 callbacks suppressed [ 974.035664][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 974.286505][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 975.796989][T15154] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.825122][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 976.054094][T32596] __nla_validate_parse: 2 callbacks suppressed [ 976.054116][T32596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6445'. [ 976.057316][ T359] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.082391][T32597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6443'. [ 976.092960][ T359] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.110816][T32596] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 976.137179][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 976.188359][ T359] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.214444][T32601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6446'. [ 976.436236][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 976.565877][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 977.037100][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 977.235443][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 977.261461][T32107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 977.296356][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.342021][T32643] geneve2: entered promiscuous mode [ 977.384062][T32107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 977.423798][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.439402][T32646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 977.495329][T32646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 977.524428][T32648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 977.563264][T32648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 977.580776][T32107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 977.594390][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.615906][T32107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.657938][T32107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.715131][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 978.075448][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 978.188398][T32107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.188932][T32675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 978.208786][T32107] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.242521][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.249753][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.362672][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.369924][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.550373][T32702] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6463'. [ 978.829805][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.864059][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.897076][T32707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.066977][ T8184] net_ratelimit: 5 callbacks suppressed [ 979.067000][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.225623][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.378820][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.524475][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.665082][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.795589][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.856357][T32751] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 979.935430][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 979.953779][T32757] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6470'. [ 980.006362][T32757] netlink: 'syz.4.6470': attribute type 9 has an invalid length. [ 980.015612][T32761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6470'. [ 980.114222][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 980.162441][T32757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 980.299458][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 980.376302][T32107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.569523][T32107] veth0_vlan: entered promiscuous mode [ 980.624042][T32107] veth1_vlan: entered promiscuous mode [ 980.928184][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.935709][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.081500][ T333] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 981.092307][ T336] netlink: 'syz.3.6481': attribute type 1 has an invalid length. [ 981.181922][ T315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.217676][ T315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.400832][ T336] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 981.502683][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.560809][ T343] syzkaller0: entered promiscuous mode [ 981.570079][ T343] syzkaller0: entered allmulticast mode [ 981.616724][ T364] __nla_validate_parse: 2 callbacks suppressed [ 981.616746][ T364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6483'. [ 981.633407][ T364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6483'. [ 981.656799][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.707361][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.726607][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.864182][T32107] veth0_macvtap: entered promiscuous mode [ 981.908500][T32107] veth1_macvtap: entered promiscuous mode [ 981.993461][T32107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.030273][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6488'. [ 982.063160][T32107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.129480][ T359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.149432][ T359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.181228][ T359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.206642][ T359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.272978][ T385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6491'. [ 982.318812][ T390] netlink: 'syz.2.6490': attribute type 10 has an invalid length. [ 982.391591][ T390] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.413371][ T390] bond0: (slave team0): Enslaving as an active interface with an up link [ 982.483405][ T384] netlink: 'syz.2.6490': attribute type 29 has an invalid length. [ 982.534366][ T385] ip6gre1: entered promiscuous mode [ 982.546789][ T385] ip6gre1: entered allmulticast mode [ 982.614188][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.617233][ T390] netlink: 'syz.2.6490': attribute type 29 has an invalid length. [ 982.639925][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.794642][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.816187][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.923703][ T404] lo speed is unknown, defaulting to 1000 [ 982.949136][ T409] syzkaller0: entered promiscuous mode [ 982.968011][ T409] syzkaller0: entered allmulticast mode [ 982.976541][ T404] lo speed is unknown, defaulting to 1000 [ 983.168449][ T425] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6497'. [ 983.723659][ T452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6501'. [ 983.746205][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6501'. [ 983.911078][ T452] erspan0: entered promiscuous mode [ 984.146961][ T8179] net_ratelimit: 17 callbacks suppressed [ 984.146984][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 984.262551][ T460] openvswitch: netlink: Missing valid actions attribute. [ 984.284744][ T460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.303145][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 984.317854][ T460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6504'. [ 984.455117][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 984.463436][ T463] netlink: 'syz.2.6505': attribute type 3 has an invalid length. [ 984.496314][ T463] openvswitch: netlink: Flow actions attr not present in new flow. [ 984.514151][ T463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6505'. [ 984.762853][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.770675][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.061395][ T465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.097400][ T465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.126524][T20910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 985.142378][T20910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 985.158184][T20910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 985.167459][T20910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 985.178088][T20910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 985.549812][ T476] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 985.570116][ T8184] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.668766][ T8184] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.694874][ T8184] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.724815][ T8184] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.745442][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 985.865933][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 985.927342][ T411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.015346][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 986.203303][ T524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6521'. [ 986.280932][ T524] bridge_slave_0 (unregistering): left allmulticast mode [ 986.305147][ T524] bridge_slave_0 (unregistering): left promiscuous mode [ 986.313929][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.365982][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 986.387861][ T485] lo speed is unknown, defaulting to 1000 [ 986.404407][ T485] lo speed is unknown, defaulting to 1000 [ 986.759911][ T547] syzkaller0: entered promiscuous mode [ 986.773348][ T547] syzkaller0: entered allmulticast mode [ 987.199653][ T561] __nla_validate_parse: 1 callbacks suppressed [ 987.199677][ T561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6530'. [ 987.278319][T20910] Bluetooth: hci0: command tx timeout [ 987.608330][ T582] netlink: 'syz.3.6534': attribute type 11 has an invalid length. [ 987.610782][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.635641][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.653229][ T485] bridge_slave_0: entered allmulticast mode [ 987.668566][ T485] bridge_slave_0: entered promiscuous mode [ 987.794783][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.817228][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.836926][ T485] bridge_slave_1: entered allmulticast mode [ 987.856443][ T485] bridge_slave_1: entered promiscuous mode [ 987.947072][ T485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.969196][ T485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.098621][ T485] team0: Port device team_slave_0 added [ 988.113551][ T485] team0: Port device team_slave_1 added [ 988.181673][ T485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.189282][ T485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.221516][ T485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.237721][ T485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.244881][ T485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.275493][ T485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.281836][ T591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 988.403031][ T29] audit: type=1804 audit(1777920511.682:29): pid=593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6537" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=245 res=1 errno=0 [ 988.411100][ T593] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6537'. [ 988.453166][ T29] audit: type=1800 audit(1777920511.682:30): pid=593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6537" name="cgroup.controllers" dev="tmpfs" ino=245 res=0 errno=0 [ 988.477980][ T29] audit: type=1800 audit(1777920511.682:31): pid=593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6537" name="cgroup.controllers" dev="tmpfs" ino=245 res=0 errno=0 [ 989.250776][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6539'. [ 989.314090][ T602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6539'. [ 989.357500][T20910] Bluetooth: hci0: command tx timeout [ 989.866135][ T608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6541'. [ 989.875495][ T608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6541'. [ 991.388490][ T485] hsr_slave_0: entered promiscuous mode [ 991.397043][ T485] hsr_slave_1: entered promiscuous mode [ 991.403498][ T485] debugfs: 'hsr0' already exists in 'hsr' [ 991.409721][ T485] Cannot create hsr debugfs directory [ 991.439654][T20910] Bluetooth: hci0: command tx timeout [ 991.540017][ T621] FAULT_INJECTION: forcing a failure. [ 991.540017][ T621] name failslab, interval 1, probability 0, space 0, times 0 [ 991.554014][ T621] CPU: 1 UID: 0 PID: 621 Comm: syz.2.6545 Not tainted syzkaller #0 PREEMPT(full) [ 991.554041][ T621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.554054][ T621] Call Trace: [ 991.554062][ T621] [ 991.554070][ T621] dump_stack_lvl+0xe8/0x150 [ 991.554100][ T621] should_fail_ex+0x412/0x560 [ 991.554134][ T621] should_failslab+0xa8/0x100 [ 991.554166][ T621] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 991.554195][ T621] ? __alloc_skb+0x186/0x7d0 [ 991.554218][ T621] ? __alloc_skb+0x1d0/0x7d0 [ 991.554244][ T621] ? __local_bh_enable_ip+0xd0/0x130 [ 991.554272][ T621] __alloc_skb+0x1d0/0x7d0 [ 991.554300][ T621] alloc_skb_with_frags+0xc8/0x760 [ 991.554324][ T621] ? __might_fault+0xaf/0x130 [ 991.554360][ T621] sock_alloc_send_pskb+0x878/0x990 [ 991.554407][ T621] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 991.554438][ T621] ? do_raw_spin_lock+0x12b/0x2f0 [ 991.554478][ T621] nfc_alloc_send_skb+0x94/0x1c0 [ 991.554508][ T621] nfc_llcp_send_ui_frame+0x2dd/0x740 [ 991.554552][ T621] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 991.554575][ T621] ? __local_bh_enable_ip+0xd0/0x130 [ 991.554597][ T621] ? lockdep_hardirqs_on+0x7a/0x110 [ 991.554621][ T621] ? __local_bh_enable_ip+0xd0/0x130 [ 991.554642][ T621] ? llcp_sock_sendmsg+0x240/0x3f0 [ 991.554671][ T621] ____sys_sendmsg+0x972/0x9f0 [ 991.554706][ T621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 991.554742][ T621] ? import_iovec+0x73/0xa0 [ 991.554772][ T621] ___sys_sendmsg+0x2a5/0x360 [ 991.554798][ T621] ? __lock_acquire+0x6b5/0x2cf0 [ 991.554823][ T621] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.554855][ T621] ? kstrtouint+0x6e/0xe0 [ 991.554904][ T621] ? __fget_files+0x2a/0x420 [ 991.554928][ T621] ? __fget_files+0x3a0/0x420 [ 991.554971][ T621] __sys_sendmmsg+0x27c/0x4e0 [ 991.555003][ T621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 991.555026][ T621] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 991.555078][ T621] ? ksys_write+0x242/0x270 [ 991.555108][ T621] ? __pfx_ksys_write+0x10/0x10 [ 991.555143][ T621] __x64_sys_sendmmsg+0xa0/0xc0 [ 991.555168][ T621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.555190][ T621] do_syscall_64+0x15f/0xf80 [ 991.555212][ T621] ? trace_irq_disable+0x3b/0x140 [ 991.555241][ T621] ? clear_bhb_loop+0x40/0x90 [ 991.555267][ T621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.555287][ T621] RIP: 0033:0x7fe82dd9cdd9 [ 991.555307][ T621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.555325][ T621] RSP: 002b:00007fe82eb74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 991.555347][ T621] RAX: ffffffffffffffda RBX: 00007fe82e015fa0 RCX: 00007fe82dd9cdd9 [ 991.555362][ T621] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 991.555375][ T621] RBP: 00007fe82eb74090 R08: 0000000000000000 R09: 0000000000000000 [ 991.555389][ T621] R10: 0000000004044000 R11: 0000000000000246 R12: 0000000000000002 [ 991.555403][ T621] R13: 00007fe82e016038 R14: 00007fe82e015fa0 R15: 00007ffdc2634978 [ 991.555436][ T621] [ 991.900419][ T621] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 991.919640][ T35] net_ratelimit: 9 callbacks suppressed [ 991.919679][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 992.019775][ T630] netlink: 'syz.0.6549': attribute type 15 has an invalid length. [ 992.045157][ T630] netlink: 'syz.0.6549': attribute type 17 has an invalid length. [ 992.109461][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6549'. [ 992.200485][ T630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.217655][ T630] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.232102][ T630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.267670][ T646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6548'. [ 992.543523][ T630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.554475][ T630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.570294][ T630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 992.581099][ T630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.598693][ T630] veth1_vlan: left promiscuous mode [ 992.606767][ T630] veth0_vlan: left promiscuous mode [ 992.613382][ T630] veth0_vlan: entered promiscuous mode [ 992.624008][ T630] veth1_vlan: entered promiscuous mode [ 992.638720][ T630] veth1_macvtap: left promiscuous mode [ 992.647361][ T630] veth0_macvtap: left promiscuous mode [ 992.654594][ T630] veth0_macvtap: entered promiscuous mode [ 992.662168][ T630] veth1_macvtap: entered promiscuous mode [ 992.676822][ T630] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 992.685467][ T630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.694458][ T630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.703360][ T630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.712551][ T630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 992.820279][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.827577][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.838338][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.845571][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.049602][ T641] syzkaller0: entered promiscuous mode [ 993.066341][ T641] syzkaller0: entered allmulticast mode [ 993.080597][ T8184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.119633][ T8184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.140411][ T8184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.200872][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.465382][ T677] nbd: must specify a device to reconfigure [ 993.474278][ T677] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6556'. [ 993.516146][T20910] Bluetooth: hci0: command tx timeout [ 996.063583][ T8184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.188771][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 996.284771][ T685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6559'. [ 996.379891][ T686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6559'. [ 996.625818][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 996.745178][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 996.895634][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 997.045084][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 997.205794][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 997.462929][ T8179] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 997.494089][ T485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 997.535768][ T485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.557674][ T728] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 997.564625][ T485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 997.623839][ T485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.653353][ T485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 997.682096][ T734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6572'. [ 997.686624][ T485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.714538][ T485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 997.745744][ T485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.833602][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 997.906694][ T756] netlink: 'syz.3.6577': attribute type 13 has an invalid length. [ 998.218848][ T764] bond1 (unregistering): Released all slaves [ 998.315210][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 998.344758][ T485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.365873][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 998.391948][ T485] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.420363][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.427835][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.456990][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.464261][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.682753][ T781] lo speed is unknown, defaulting to 1000 [ 998.700383][ T784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6583'. [ 998.721332][ T781] lo speed is unknown, defaulting to 1000 [ 998.815328][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 998.956927][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 999.085966][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 999.126263][ T790] lo speed is unknown, defaulting to 1000 [ 999.235660][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 999.365136][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 999.381866][ T813] nbd: socks must be embedded in a SOCK_ITEM attr [ 999.490236][ T790] lo speed is unknown, defaulting to 1000 [ 1000.043455][ T836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1000.073036][ T836] netlink: 'syz.3.6594': attribute type 39 has an invalid length. [ 1000.101933][ T836] hsr_slave_0 (unregistering): left promiscuous mode [ 1000.122649][ T485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.507424][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1000.528980][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1000.753845][ T485] veth0_vlan: entered promiscuous mode [ 1000.798275][ T485] veth1_vlan: entered promiscuous mode [ 1000.932183][ T485] veth0_macvtap: entered promiscuous mode [ 1000.953349][ T850] syzkaller0: entered promiscuous mode [ 1000.963762][ T850] syzkaller0: entered allmulticast mode [ 1001.011083][ T485] veth1_macvtap: entered promiscuous mode [ 1001.181358][ T859] xt_limit: Overflow, try lower: 268435456/134217728 [ 1001.250076][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1001.272358][ T485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.301531][ T485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.360183][ T359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.361088][ T866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1001.389257][ T359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.415113][ T359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.424591][ T873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1001.448632][ T359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.715136][ T879] xt_hashlimit: max too large, truncated to 1048576 [ 1001.737468][ T359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.768947][ T359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.797165][ T883] FAULT_INJECTION: forcing a failure. [ 1001.797165][ T883] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.843660][ T883] CPU: 1 UID: 0 PID: 883 Comm: syz.3.6609 Not tainted syzkaller #0 PREEMPT(full) [ 1001.843690][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.843702][ T883] Call Trace: [ 1001.843711][ T883] [ 1001.843720][ T883] dump_stack_lvl+0xe8/0x150 [ 1001.843751][ T883] should_fail_ex+0x412/0x560 [ 1001.843784][ T883] should_failslab+0xa8/0x100 [ 1001.843818][ T883] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1001.843848][ T883] ? __alloc_skb+0x186/0x7d0 [ 1001.843871][ T883] ? __alloc_skb+0x1d0/0x7d0 [ 1001.843892][ T883] ? __local_bh_enable_ip+0xd0/0x130 [ 1001.843928][ T883] __alloc_skb+0x1d0/0x7d0 [ 1001.843957][ T883] alloc_skb_with_frags+0xc8/0x760 [ 1001.843981][ T883] ? __might_fault+0xaf/0x130 [ 1001.844019][ T883] sock_alloc_send_pskb+0x878/0x990 [ 1001.844074][ T883] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1001.844107][ T883] ? do_raw_spin_lock+0x12b/0x2f0 [ 1001.844146][ T883] nfc_alloc_send_skb+0x94/0x1c0 [ 1001.844177][ T883] nfc_llcp_send_ui_frame+0x2dd/0x740 [ 1001.844221][ T883] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 1001.844243][ T883] ? __local_bh_enable_ip+0xd0/0x130 [ 1001.844265][ T883] ? lockdep_hardirqs_on+0x7a/0x110 [ 1001.844289][ T883] ? __local_bh_enable_ip+0xd0/0x130 [ 1001.844311][ T883] ? llcp_sock_sendmsg+0x240/0x3f0 [ 1001.844339][ T883] ____sys_sendmsg+0x972/0x9f0 [ 1001.844376][ T883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.844412][ T883] ? import_iovec+0x73/0xa0 [ 1001.844445][ T883] ___sys_sendmsg+0x2a5/0x360 [ 1001.844471][ T883] ? __lock_acquire+0x6b5/0x2cf0 [ 1001.844498][ T883] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.844531][ T883] ? kstrtouint+0x6e/0xe0 [ 1001.844583][ T883] ? __fget_files+0x2a/0x420 [ 1001.844607][ T883] ? __fget_files+0x3a0/0x420 [ 1001.844642][ T883] __sys_sendmmsg+0x27c/0x4e0 [ 1001.844674][ T883] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1001.844699][ T883] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1001.844752][ T883] ? ksys_write+0x242/0x270 [ 1001.844784][ T883] ? __pfx_ksys_write+0x10/0x10 [ 1001.844820][ T883] __x64_sys_sendmmsg+0xa0/0xc0 [ 1001.844847][ T883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.844869][ T883] do_syscall_64+0x15f/0xf80 [ 1001.844892][ T883] ? trace_irq_disable+0x3b/0x140 [ 1001.844929][ T883] ? clear_bhb_loop+0x40/0x90 [ 1001.844954][ T883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.844974][ T883] RIP: 0033:0x7fdf4959cdd9 [ 1001.844994][ T883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.845011][ T883] RSP: 002b:00007fdf4a45c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1001.845034][ T883] RAX: ffffffffffffffda RBX: 00007fdf49815fa0 RCX: 00007fdf4959cdd9 [ 1001.845050][ T883] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 1001.845064][ T883] RBP: 00007fdf4a45c090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.845077][ T883] R10: 0000000004044000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.845092][ T883] R13: 00007fdf49816038 R14: 00007fdf49815fa0 R15: 00007fff7d206718 [ 1001.845140][ T883] [ 1001.958950][ T887] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1002.035770][ T892] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6611'. [ 1002.044964][ T883] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 1002.045693][ T892] netlink: 'syz.2.6611': attribute type 9 has an invalid length. [ 1002.132688][ T893] net_ratelimit: 12 callbacks suppressed [ 1002.132708][ T893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1002.137754][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.221478][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.225213][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.253767][ T885] lo speed is unknown, defaulting to 1000 [ 1002.273689][ T885] lo speed is unknown, defaulting to 1000 [ 1002.348045][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.487789][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.605434][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.655879][ T911] tipc: Started in network mode [ 1002.667775][ T911] tipc: Node identity 72005ec331e8, cluster identity 4711 [ 1002.686711][ T911] tipc: Enabled bearer , priority 0 [ 1002.704654][ T911] batadv_slave_1: entered promiscuous mode [ 1002.717536][ T911] batadv_slave_1: entered allmulticast mode [ 1002.746343][ T911] tipc: Resetting bearer [ 1002.761620][ T911] __nla_validate_parse: 4 callbacks suppressed [ 1002.761650][ T911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6617'. [ 1002.775520][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.790209][ T911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6617'. [ 1002.827292][ T911] bridge0: entered promiscuous mode [ 1002.843143][ T911] ip6gretap0: entered promiscuous mode [ 1002.869396][ T911] debugfs: 'hsr1' already exists in 'hsr' [ 1002.885087][ T911] Cannot create hsr debugfs directory [ 1002.917448][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1002.939198][ T910] tipc: Disabling bearer [ 1003.036960][ T933] FAULT_INJECTION: forcing a failure. [ 1003.036960][ T933] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.058996][ T933] CPU: 0 UID: 0 PID: 933 Comm: syz.0.6622 Not tainted syzkaller #0 PREEMPT(full) [ 1003.059028][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.059047][ T933] Call Trace: [ 1003.059056][ T933] [ 1003.059066][ T933] dump_stack_lvl+0xe8/0x150 [ 1003.059097][ T933] should_fail_ex+0x412/0x560 [ 1003.059132][ T933] should_failslab+0xa8/0x100 [ 1003.059165][ T933] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1003.059194][ T933] ? __alloc_skb+0x186/0x7d0 [ 1003.059217][ T933] ? __alloc_skb+0x1d0/0x7d0 [ 1003.059237][ T933] ? __local_bh_enable_ip+0xd0/0x130 [ 1003.059264][ T933] __alloc_skb+0x1d0/0x7d0 [ 1003.059292][ T933] alloc_skb_with_frags+0xc8/0x760 [ 1003.059317][ T933] ? __might_fault+0xaf/0x130 [ 1003.059352][ T933] sock_alloc_send_pskb+0x878/0x990 [ 1003.059399][ T933] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1003.059428][ T933] ? do_raw_spin_lock+0x12b/0x2f0 [ 1003.059467][ T933] nfc_alloc_send_skb+0x94/0x1c0 [ 1003.059497][ T933] nfc_llcp_send_ui_frame+0x2dd/0x740 [ 1003.059542][ T933] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 1003.059567][ T933] ? __local_bh_enable_ip+0xd0/0x130 [ 1003.059588][ T933] ? lockdep_hardirqs_on+0x7a/0x110 [ 1003.059611][ T933] ? __local_bh_enable_ip+0xd0/0x130 [ 1003.059632][ T933] ? llcp_sock_sendmsg+0x240/0x3f0 [ 1003.059660][ T933] ____sys_sendmsg+0x972/0x9f0 [ 1003.059696][ T933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.059728][ T933] ? import_iovec+0x73/0xa0 [ 1003.059759][ T933] ___sys_sendmsg+0x2a5/0x360 [ 1003.059783][ T933] ? __lock_acquire+0x6b5/0x2cf0 [ 1003.059810][ T933] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.059838][ T933] ? kstrtouint+0x6e/0xe0 [ 1003.059888][ T933] ? __fget_files+0x2a/0x420 [ 1003.059924][ T933] ? __fget_files+0x3a0/0x420 [ 1003.059957][ T933] __sys_sendmmsg+0x27c/0x4e0 [ 1003.059989][ T933] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1003.060010][ T933] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1003.060060][ T933] ? ksys_write+0x242/0x270 [ 1003.060087][ T933] ? __pfx_ksys_write+0x10/0x10 [ 1003.060119][ T933] __x64_sys_sendmmsg+0xa0/0xc0 [ 1003.060146][ T933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.060167][ T933] do_syscall_64+0x15f/0xf80 [ 1003.060189][ T933] ? trace_irq_disable+0x3b/0x140 [ 1003.060217][ T933] ? clear_bhb_loop+0x40/0x90 [ 1003.060242][ T933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.060263][ T933] RIP: 0033:0x7f000439cdd9 [ 1003.060284][ T933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.060301][ T933] RSP: 002b:00007f00052a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1003.060324][ T933] RAX: ffffffffffffffda RBX: 00007f0004615fa0 RCX: 00007f000439cdd9 [ 1003.060339][ T933] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 1003.060352][ T933] RBP: 00007f00052a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.060364][ T933] R10: 0000000004044000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.060378][ T933] R13: 00007f0004616038 R14: 00007f0004615fa0 R15: 00007ffc93372678 [ 1003.060412][ T933] [ 1003.060831][ T933] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 1003.532663][ T957] netlink: 'syz.1.6625': attribute type 1 has an invalid length. [ 1003.544540][ T957] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1003.554293][ T957] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1003.574209][ T957] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1003.593474][ T957] netlink: 'syz.1.6625': attribute type 1 has an invalid length. [ 1003.658079][ T963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6627'. [ 1003.694779][ T957] bond1: entered promiscuous mode [ 1003.700182][ T957] bond1: entered allmulticast mode [ 1003.706271][ T957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.722534][ T965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6627'. [ 1003.739088][ T952] erspan1: entered allmulticast mode [ 1003.750187][ T969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1003.759354][ T952] bond1: (slave erspan1): making interface the new active one [ 1003.769236][ T952] erspan1: entered promiscuous mode [ 1003.777355][ T952] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1003.829630][ T961] gretap0: entered promiscuous mode [ 1003.835708][ T961] macsec1: entered promiscuous mode [ 1003.841207][ T961] macsec1: entered allmulticast mode [ 1003.849338][ T961] gretap0: entered allmulticast mode [ 1003.857504][ T961] batman_adv: batadv0: Adding interface: macsec1 [ 1003.863967][ T961] batman_adv: batadv0: The MTU of interface macsec1 is too small (1430) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.892848][ T961] batman_adv: batadv0: Interface activated: macsec1 [ 1003.984658][ T955] lo speed is unknown, defaulting to 1000 [ 1004.000279][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1004.027689][ T955] lo speed is unknown, defaulting to 1000 [ 1004.135418][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1004.180545][ T978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6629'. [ 1004.257308][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1004.421227][ T987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6633'. [ 1004.786000][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1004.821240][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1004.870839][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1004.910492][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1004.944181][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1004.986736][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1005.003119][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1005.014304][ T1001] netlink: 'syz.4.6638': attribute type 29 has an invalid length. [ 1005.679524][ T1027] xt_hashlimit: size too large, truncated to 1048576 [ 1006.139898][ T1039] lo speed is unknown, defaulting to 1000 [ 1006.238327][ T1039] lo speed is unknown, defaulting to 1000 [ 1007.110190][ T6449] IPVS: starting estimator thread 0... [ 1007.167355][T28926] net_ratelimit: 17 callbacks suppressed [ 1007.167380][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1007.218050][ T1098] IPVS: using max 23 ests per chain, 55200 per kthread [ 1007.325318][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1007.355695][ T5629] Bluetooth: hci0: command 0x0405 tx timeout [ 1007.455843][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1007.778001][ T1116] : entered promiscuous mode [ 1007.865657][ T1125] __nla_validate_parse: 29 callbacks suppressed [ 1007.865679][ T1125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6662'. [ 1008.141546][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1008.365504][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1008.566638][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1008.609278][ T1142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 1008.693826][ T1148] tipc: Started in network mode [ 1008.724013][ T1148] tipc: Node identity d241244641b9, cluster identity 4711 [ 1008.801178][ T1148] tipc: Enabled bearer , priority 0 [ 1008.865156][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1009.377561][ T1148] syzkaller0: entered promiscuous mode [ 1009.404790][ T1148] syzkaller0: entered allmulticast mode [ 1009.430821][ T1148] tipc: Resetting bearer [ 1009.473932][ T1141] tipc: Resetting bearer [ 1009.691913][ T1182] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6673'. [ 1011.743858][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1011.753595][ T1191] validate_nla: 14 callbacks suppressed [ 1011.753615][ T1191] netlink: 'syz.4.6675': attribute type 5 has an invalid length. [ 1011.770342][ T1191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1012.728810][ T1141] tipc: Disabling bearer [ 1012.803982][ T6450] tipc: Node number set to 2482512966 [ 1012.841150][ T1191] geneve2: entered promiscuous mode [ 1012.851158][ T1191] geneve2: entered allmulticast mode [ 1012.863468][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1012.894753][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1012.919185][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1012.948304][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1013.008180][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1013.156681][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1013.170488][ T1209] netlink: 'syz.2.6680': attribute type 1 has an invalid length. [ 1013.199573][ T1209] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6680'. [ 1013.250848][ T1208] lo speed is unknown, defaulting to 1000 [ 1013.298798][ T1208] lo speed is unknown, defaulting to 1000 [ 1013.305368][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1013.325395][ T1219] netlink: 'syz.0.6683': attribute type 1 has an invalid length. [ 1013.447726][T15156] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1013.623960][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1013.757893][ T1231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6686'. [ 1013.793302][ T1231] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6686'. [ 1014.255168][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1014.392359][ T1211] lo speed is unknown, defaulting to 1000 [ 1014.405038][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1014.547178][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1014.578955][ T1211] lo speed is unknown, defaulting to 1000 [ 1014.772440][ T1241] netlink: 'syz.0.6689': attribute type 1 has an invalid length. [ 1015.225797][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1015.360715][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1015.512250][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1015.669768][ T1263] Can't find ip_set type hash:ip,port  [ 1015.692130][ T1257] Can't find ip_set type hash:ip,port  [ 1016.226023][ T1280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1017.193511][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1017.388955][ T1319] netlink: 'syz.3.6712': attribute type 4 has an invalid length. [ 1017.414982][ T1319] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1020.065863][ T1331] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1020.106744][ T1329] netlink: 'syz.4.6714': attribute type 33 has an invalid length. [ 1020.228031][ T359] net_ratelimit: 8 callbacks suppressed [ 1020.228052][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1020.368343][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1020.381228][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1020.396055][ T1349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1020.545134][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1020.706821][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1020.836496][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1020.873433][ T1367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6723'. [ 1020.939385][ T1370] netlink: 'syz.2.6723': attribute type 3 has an invalid length. [ 1020.995194][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1021.005993][ T1370] sctp: [Deprecated]: syz.2.6723 (pid 1370) Use of int in maxseg socket option. [ 1021.005993][ T1370] Use struct sctp_assoc_value instead [ 1021.123287][ T1375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1021.135874][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1021.274419][ T1381] veth3: entered promiscuous mode [ 1021.306527][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1021.350005][ T1381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'. [ 1021.445405][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1021.595625][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1021.715306][ T1401] netlink: 'syz.1.6732': attribute type 1 has an invalid length. [ 1021.735803][ T1396] netlink: 'syz.3.6733': attribute type 1 has an invalid length. [ 1021.803406][ T1407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6734'. [ 1021.822080][ T1396] bond2: entered promiscuous mode [ 1021.827689][ T1396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1021.863156][ T1400] vlan2: entered allmulticast mode [ 1021.868540][ T1400] bond2: entered allmulticast mode [ 1021.940713][ T1396] bond2: (slave bridge1): making interface the new active one [ 1021.948843][ T1396] bridge1: entered promiscuous mode [ 1021.957017][ T1396] bridge1: entered allmulticast mode [ 1021.966775][ T1396] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1022.574303][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6743'. [ 1022.585540][ T1441] netlink: 'syz.1.6743': attribute type 30 has an invalid length. [ 1022.608271][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6743'. [ 1022.609331][ T359] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.618053][ T1441] netlink: 'syz.1.6743': attribute type 30 has an invalid length. [ 1022.638781][ T359] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.648964][ T359] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.748716][ T359] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.873998][ T1450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6747'. [ 1023.089570][ T1460] netlink: 'syz.3.6752': attribute type 1 has an invalid length. [ 1023.252272][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6749'. [ 1023.292845][ T1460] bond3: entered promiscuous mode [ 1023.318632][ T1460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.369146][ T1478] xt_connbytes: Forcing CT accounting to be enabled [ 1023.377382][ T1461] vlan3: entered allmulticast mode [ 1023.402330][ T1478] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1023.421501][ T1461] bond3: entered allmulticast mode [ 1023.501755][ T1478] netlink: 'syz.4.6754': attribute type 3 has an invalid length. [ 1023.539026][ T1478] netlink: 'syz.4.6754': attribute type 3 has an invalid length. [ 1023.549942][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6754'. [ 1023.903671][ T1510] Cannot find set identified by id 0 to match [ 1024.810643][ T1552] syzkaller1: entered promiscuous mode [ 1024.822718][ T1552] syzkaller1: entered allmulticast mode [ 1024.881901][ T1555] batadv_slave_0: entered promiscuous mode [ 1024.951937][ T1560] netlink: 'syz.4.6780': attribute type 4 has an invalid length. [ 1024.970466][ T1560] netlink: 'syz.4.6780': attribute type 4 has an invalid length. [ 1024.997195][ T1554] batadv_slave_0: left promiscuous mode [ 1025.132719][ T1564] x_tables: duplicate underflow at hook 3 [ 1025.238255][ T47] net_ratelimit: 22 callbacks suppressed [ 1025.238275][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1025.435401][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1025.615240][ T359] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1025.755629][ T8184] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1025.966187][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1026.097830][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1026.257894][ T1612] __nla_validate_parse: 2 callbacks suppressed [ 1026.257917][ T1612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6794'. [ 1026.343547][ T1612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6794'. [ 1026.355389][T15153] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1026.374352][ T1613] netlink: 'syz.3.6795': attribute type 1 has an invalid length. [ 1026.936762][ T1622] 8021q: VLANs not supported on vxcan0 [ 1026.965497][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1027.095926][ T47] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1027.285707][T28926] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1027.499713][ T1641] lo speed is unknown, defaulting to 1000 [ 1027.551128][ T1641] lo speed is unknown, defaulting to 1000 [ 1027.651391][ T1650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6805'. [ 1028.002631][ T1664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1028.536801][ T1685] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1028.592814][ T1688] dvmrp0: entered allmulticast mode [ 1028.915243][ T1697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1029.953920][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1030.013113][ T1723] xt_CT: No such helper "pptp" [ 1030.016248][ T1725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1030.047118][ T1725] netlink: 'syz.1.6824': attribute type 20 has an invalid length. [ 1030.189556][ T1725] nbd: socks must be embedded in a SOCK_ITEM attr [ 1030.255614][ T35] net_ratelimit: 21 callbacks suppressed [ 1030.255636][ T35] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1030.334874][ T1741] ip6erspan0: entered allmulticast mode [ 1030.396290][T15154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1030.578483][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1030.706453][ T1805] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1030.772564][ T1813] lo speed is unknown, defaulting to 1000 [ 1030.782400][ T1813] lo speed is unknown, defaulting to 1000 [ 1030.804753][ T1810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6830'. [ 1030.845526][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1030.887683][ T1815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6830'. [ 1030.996056][ T1815] veth1_macvtap: left promiscuous mode [ 1031.225062][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1031.232262][ T1818] netlink: 'syz.2.6831': attribute type 30 has an invalid length. [ 1031.291881][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1031.396105][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1031.536323][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1031.676263][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1031.779939][ T1851] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1031.804493][ T1851] netlink: 'syz.3.6839': attribute type 1 has an invalid length. [ 1031.815205][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1031.846126][ T1851] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1031.872145][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1031.949450][ T1856] xt_l2tp: v2 doesn't support IP mode [ 1032.410476][ T1879] sctp: [Deprecated]: syz.4.6848 (pid 1879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.410476][ T1879] Use struct sctp_sack_info instead [ 1032.460401][ T1879] sctp: [Deprecated]: syz.4.6848 (pid 1879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.460401][ T1879] Use struct sctp_sack_info instead [ 1032.489500][ T1879] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6848'. [ 1032.506404][ T1884] netlink: 'syz.1.6849': attribute type 21 has an invalid length. [ 1032.542122][ T1884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6849'. [ 1032.584797][ T1884] netlink: 'syz.1.6849': attribute type 1 has an invalid length. [ 1032.817440][ T1890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6851'. [ 1032.877089][ T1887] lo speed is unknown, defaulting to 1000 [ 1032.906124][ T1887] lo speed is unknown, defaulting to 1000 [ 1033.101594][ T1895] netlink: 'syz.4.6852': attribute type 1 has an invalid length. [ 1033.141740][ T1895] netlink: 'syz.4.6852': attribute type 2 has an invalid length. [ 1033.188767][ T1895] netlink: 'syz.4.6852': attribute type 1 has an invalid length. [ 1033.205679][ T1895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1033.308710][ T1897] netlink: 'syz.2.6853': attribute type 10 has an invalid length. [ 1033.428480][ T1900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6854'. [ 1033.477497][ T1900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1033.841747][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6858'. [ 1033.878313][ T1910] netlink: 'syz.4.6858': attribute type 1 has an invalid length. [ 1034.271207][ T1916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1034.396106][ T5629] Bluetooth: hci3: command 0x0405 tx timeout [ 1034.530490][ T1923] hsr0: entered promiscuous mode [ 1034.864104][ T1929] lo speed is unknown, defaulting to 1000 [ 1034.897947][ T1929] lo speed is unknown, defaulting to 1000 [ 1035.318002][ T1806] net_ratelimit: 23 callbacks suppressed [ 1035.318029][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1035.475154][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1035.499832][ T1955] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 1035.607347][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1035.742403][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1035.905941][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1035.946543][ T1965] pim6reg1: entered promiscuous mode [ 1035.973253][ T1965] pim6reg1: entered allmulticast mode [ 1036.055154][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1036.355282][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1036.620118][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1036.776204][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1036.888216][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1037.919067][ T2018] lo speed is unknown, defaulting to 1000 [ 1037.939552][ T2018] lo speed is unknown, defaulting to 1000 [ 1038.097042][ T2014] [ 1038.099446][ T2014] ====================================================== [ 1038.106486][ T2014] WARNING: possible circular locking dependency detected [ 1038.113787][ T2014] syzkaller #0 Not tainted [ 1038.118316][ T2014] ------------------------------------------------------ [ 1038.125361][ T2014] syz.2.6887/2014 is trying to acquire lock: [ 1038.131359][ T2014] ffff88802653a178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1038.140821][ T2014] [ 1038.140821][ T2014] but task is already holding lock: [ 1038.148206][ T2014] ffff888026539c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1038.158442][ T2014] [ 1038.158442][ T2014] which lock already depends on the new lock. [ 1038.158442][ T2014] [ 1038.168865][ T2014] [ 1038.168865][ T2014] the existing dependency chain (in reverse order) is: [ 1038.177874][ T2020] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1038.177903][ T2014] [ 1038.177903][ T2014] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1038.185332][ T2020] bond1: option arp_ip_target: invalid value (0) [ 1038.193827][ T2014] blk_alloc_queue+0x546/0x680 [ 1038.193862][ T2014] __blk_mq_alloc_disk+0x197/0x390 [ 1038.211098][ T2014] nbd_dev_add+0x499/0xb50 [ 1038.216045][ T2014] nbd_init+0x168/0x1f0 [ 1038.220735][ T2014] do_one_initcall+0x250/0x870 [ 1038.226027][ T2014] do_initcall_level+0x104/0x190 [ 1038.231507][ T2014] do_initcalls+0x59/0xa0 [ 1038.236363][ T2014] kernel_init_freeable+0x2a6/0x3e0 [ 1038.242089][ T2014] kernel_init+0x1d/0x1d0 [ 1038.246947][ T2014] ret_from_fork+0x514/0xb70 [ 1038.252071][ T2014] ret_from_fork_asm+0x1a/0x30 [ 1038.257385][ T2014] [ 1038.257385][ T2014] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1038.264630][ T2014] fs_reclaim_acquire+0x71/0x100 [ 1038.270120][ T2014] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1038.276467][ T2014] __alloc_skb+0x1d0/0x7d0 [ 1038.281427][ T2014] __ip6_append_data+0x2c7c/0x3e90 [ 1038.287083][ T2014] ip6_append_data+0x10f/0x280 [ 1038.292384][ T2014] rawv6_sendmsg+0x12d3/0x18e0 [ 1038.297680][ T2014] ____sys_sendmsg+0x80a/0x9f0 [ 1038.302978][ T2014] ___sys_sendmsg+0x2a5/0x360 [ 1038.308190][ T2014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.313668][ T2014] do_syscall_64+0x15f/0xf80 [ 1038.318792][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.325218][ T2014] [ 1038.325218][ T2014] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1038.332964][ T2014] lock_sock_nested+0x41/0x100 [ 1038.338277][ T2014] inet_shutdown+0x6a/0x390 [ 1038.343316][ T2014] nbd_mark_nsock_dead+0x2e9/0x560 [ 1038.348949][ T2014] recv_work+0x1c2e/0x1d40 [ 1038.353900][ T2014] process_scheduled_works+0xb5d/0x1860 [ 1038.359993][ T2014] worker_thread+0xa53/0xfc0 [ 1038.365121][ T2014] kthread+0x388/0x470 [ 1038.369734][ T2014] ret_from_fork+0x514/0xb70 [ 1038.374875][ T2014] ret_from_fork_asm+0x1a/0x30 [ 1038.380187][ T2014] [ 1038.380187][ T2014] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1038.387854][ T2014] __mutex_lock+0x1a3/0x1550 [ 1038.392994][ T2014] nbd_queue_rq+0x37b/0x1100 [ 1038.398117][ T2014] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1038.404199][ T2014] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1038.411073][ T2014] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1038.417590][ T2014] blk_mq_run_hw_queue+0x348/0x4f0 [ 1038.423235][ T2014] blk_mq_dispatch_list+0xd16/0xe10 [ 1038.428965][ T2014] blk_mq_flush_plug_list+0x48d/0x570 [ 1038.434869][ T2014] __blk_flush_plug+0x3ed/0x4d0 [ 1038.440257][ T2014] __submit_bio+0x28d/0x580 [ 1038.445289][ T2014] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1038.451451][ T2014] block_read_full_folio+0x599/0x830 [ 1038.457261][ T2014] filemap_read_folio+0x137/0x3b0 [ 1038.462819][ T2014] do_read_cache_folio+0x358/0x590 [ 1038.468461][ T2014] read_part_sector+0xb6/0x2b0 [ 1038.473757][ T2014] adfspart_check_ICS+0xb1/0x960 [ 1038.479227][ T2014] bdev_disk_changed+0x817/0x1770 [ 1038.484784][ T2014] blkdev_get_whole+0x380/0x510 [ 1038.490171][ T2014] bdev_open+0x31e/0xd30 [ 1038.494946][ T2014] blkdev_open+0x470/0x610 [ 1038.499882][ T2014] do_dentry_open+0x785/0x14e0 [ 1038.505174][ T2014] vfs_open+0x3b/0x340 [ 1038.509768][ T2014] path_openat+0x2e08/0x3860 [ 1038.514893][ T2014] do_file_open+0x23e/0x4a0 [ 1038.519931][ T2014] do_sys_openat2+0x113/0x200 [ 1038.525136][ T2014] __x64_sys_openat+0x138/0x170 [ 1038.530511][ T2014] do_syscall_64+0x15f/0xf80 [ 1038.535624][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.542044][ T2014] [ 1038.542044][ T2014] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1038.549259][ T2014] __mutex_lock+0x1a3/0x1550 [ 1038.554384][ T2014] nbd_queue_rq+0xc6/0x1100 [ 1038.559409][ T2014] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1038.565486][ T2014] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1038.572344][ T2014] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1038.578852][ T2014] blk_mq_run_hw_queue+0x348/0x4f0 [ 1038.584497][ T2014] blk_mq_dispatch_list+0xd16/0xe10 [ 1038.590227][ T2014] blk_mq_flush_plug_list+0x48d/0x570 [ 1038.596128][ T2014] __blk_flush_plug+0x3ed/0x4d0 [ 1038.601508][ T2014] __submit_bio+0x28d/0x580 [ 1038.606543][ T2014] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1038.612702][ T2014] block_read_full_folio+0x599/0x830 [ 1038.618511][ T2014] filemap_read_folio+0x137/0x3b0 [ 1038.624069][ T2014] do_read_cache_folio+0x358/0x590 [ 1038.629710][ T2014] read_part_sector+0xb6/0x2b0 [ 1038.635004][ T2014] adfspart_check_ICS+0xb1/0x960 [ 1038.640475][ T2014] bdev_disk_changed+0x817/0x1770 [ 1038.646037][ T2014] blkdev_get_whole+0x380/0x510 [ 1038.651503][ T2014] bdev_open+0x31e/0xd30 [ 1038.656272][ T2014] blkdev_open+0x470/0x610 [ 1038.661216][ T2014] do_dentry_open+0x785/0x14e0 [ 1038.666511][ T2014] vfs_open+0x3b/0x340 [ 1038.671104][ T2014] path_openat+0x2e08/0x3860 [ 1038.676220][ T2014] do_file_open+0x23e/0x4a0 [ 1038.681251][ T2014] do_sys_openat2+0x113/0x200 [ 1038.686539][ T2014] __x64_sys_openat+0x138/0x170 [ 1038.691917][ T2014] do_syscall_64+0x15f/0xf80 [ 1038.697033][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.703448][ T2014] [ 1038.703448][ T2014] -> #1 (set->srcu){.+.+}-{0:0}: [ 1038.710578][ T2014] __synchronize_srcu+0xca/0x300 [ 1038.716129][ T2014] elevator_switch+0x1e8/0x7a0 [ 1038.721424][ T2014] elevator_change+0x2cc/0x450 [ 1038.726718][ T2014] elevator_set_default+0x36c/0x430 [ 1038.732442][ T2014] blk_register_queue+0x3e9/0x4e0 [ 1038.737997][ T2014] __add_disk+0x677/0xd50 [ 1038.742851][ T2014] add_disk_fwnode+0xfb/0x480 [ 1038.748048][ T2014] nbd_dev_add+0x72c/0xb50 [ 1038.753076][ T2014] nbd_init+0x168/0x1f0 [ 1038.757766][ T2014] do_one_initcall+0x250/0x870 [ 1038.763060][ T2014] do_initcall_level+0x104/0x190 [ 1038.768527][ T2014] do_initcalls+0x59/0xa0 [ 1038.773383][ T2014] kernel_init_freeable+0x2a6/0x3e0 [ 1038.779111][ T2014] kernel_init+0x1d/0x1d0 [ 1038.783974][ T2014] ret_from_fork+0x514/0xb70 [ 1038.789087][ T2014] ret_from_fork_asm+0x1a/0x30 [ 1038.794382][ T2014] [ 1038.794382][ T2014] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1038.802210][ T2014] __lock_acquire+0x15a5/0x2cf0 [ 1038.807584][ T2014] lock_acquire+0x106/0x350 [ 1038.812614][ T2014] __mutex_lock+0x1a3/0x1550 [ 1038.817752][ T2014] elevator_change+0x1b3/0x450 [ 1038.823047][ T2014] elevator_set_none+0xb5/0x140 [ 1038.828429][ T2014] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1038.834759][ T2014] nbd_start_device+0x17f/0xb10 [ 1038.840132][ T2014] nbd_genl_connect+0x165b/0x1cf0 [ 1038.845678][ T2014] genl_family_rcv_msg_doit+0x22a/0x330 [ 1038.851759][ T2014] genl_rcv_msg+0x61c/0x7a0 [ 1038.856794][ T2014] netlink_rcv_skb+0x232/0x4b0 [ 1038.862089][ T2014] genl_rcv+0x28/0x40 [ 1038.866609][ T2014] netlink_unicast+0x75c/0x8e0 [ 1038.871919][ T2014] netlink_sendmsg+0x813/0xb40 [ 1038.877340][ T2014] ____sys_sendmsg+0x972/0x9f0 [ 1038.882654][ T2014] ___sys_sendmsg+0x2a5/0x360 [ 1038.887865][ T2014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.893336][ T2014] do_syscall_64+0x15f/0xf80 [ 1038.898465][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.904974][ T2014] [ 1038.904974][ T2014] other info that might help us debug this: [ 1038.904974][ T2014] [ 1038.915212][ T2014] Chain exists of: [ 1038.915212][ T2014] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 1038.915212][ T2014] [ 1038.928964][ T2014] Possible unsafe locking scenario: [ 1038.928964][ T2014] [ 1038.936414][ T2014] CPU0 CPU1 [ 1038.941777][ T2014] ---- ---- [ 1038.947144][ T2014] lock(&q->q_usage_counter(io)#53); [ 1038.952529][ T2014] lock(fs_reclaim); [ 1038.959032][ T2014] lock(&q->q_usage_counter(io)#53); [ 1038.966935][ T2014] lock(&q->elevator_lock); [ 1038.971539][ T2014] [ 1038.971539][ T2014] *** DEADLOCK *** [ 1038.971539][ T2014] [ 1038.979681][ T2014] 6 locks held by syz.2.6887/2014: [ 1038.984791][ T2014] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1038.992989][ T2014] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1039.001966][ T2014] #2: ffff888027a701c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1039.013371][ T2014] #3: ffff888027a700d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1039.024342][ T2014] #4: ffff888026539c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1039.034975][ T2014] #5: ffff888026539c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1039.045866][ T2014] [ 1039.045866][ T2014] stack backtrace: [ 1039.051755][ T2014] CPU: 1 UID: 0 PID: 2014 Comm: syz.2.6887 Not tainted syzkaller #0 PREEMPT(full) [ 1039.051776][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.051787][ T2014] Call Trace: [ 1039.051794][ T2014] [ 1039.051801][ T2014] dump_stack_lvl+0xe8/0x150 [ 1039.051821][ T2014] print_circular_bug+0x2e1/0x300 [ 1039.051846][ T2014] check_noncircular+0x12e/0x150 [ 1039.051869][ T2014] __lock_acquire+0x15a5/0x2cf0 [ 1039.051895][ T2014] ? elevator_change+0x1b3/0x450 [ 1039.051916][ T2014] lock_acquire+0x106/0x350 [ 1039.051932][ T2014] ? elevator_change+0x1b3/0x450 [ 1039.051965][ T2014] __mutex_lock+0x1a3/0x1550 [ 1039.051986][ T2014] ? elevator_change+0x1b3/0x450 [ 1039.052009][ T2014] ? rcu_is_watching+0x15/0xb0 [ 1039.052030][ T2014] ? work_grab_pending+0x3d1/0x990 [ 1039.052048][ T2014] ? elevator_change+0x1b3/0x450 [ 1039.052071][ T2014] ? __pfx___mutex_lock+0x10/0x10 [ 1039.052089][ T2014] ? enable_work+0x17f/0x230 [ 1039.052109][ T2014] ? lockdep_hardirqs_on+0x7a/0x110 [ 1039.052129][ T2014] ? __cancel_work_sync+0xf7/0x110 [ 1039.052149][ T2014] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1039.052175][ T2014] elevator_change+0x1b3/0x450 [ 1039.052199][ T2014] elevator_set_none+0xb5/0x140 [ 1039.052221][ T2014] ? __pfx_elevator_set_none+0x10/0x10 [ 1039.052245][ T2014] ? xa_load+0x1db/0x210 [ 1039.052267][ T2014] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1039.052289][ T2014] ? kernfs_add_one+0x477/0x5c0 [ 1039.052311][ T2014] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1039.052331][ T2014] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1039.052352][ T2014] nbd_start_device+0x17f/0xb10 [ 1039.052371][ T2014] ? device_create_file+0xf4/0x1b0 [ 1039.052388][ T2014] nbd_genl_connect+0x165b/0x1cf0 [ 1039.052404][ T2014] ? __pfx___nla_validate_parse+0x10/0x10 [ 1039.052431][ T2014] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1039.052447][ T2014] ? rcu_is_watching+0x15/0xb0 [ 1039.052466][ T2014] ? trace_kmalloc+0x2a/0xf0 [ 1039.052490][ T2014] ? __nla_parse+0x40/0x60 [ 1039.052512][ T2014] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1039.052539][ T2014] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1039.052567][ T2014] genl_family_rcv_msg_doit+0x22a/0x330 [ 1039.052594][ T2014] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.052623][ T2014] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.052643][ T2014] genl_rcv_msg+0x61c/0x7a0 [ 1039.052669][ T2014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.052692][ T2014] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1039.052713][ T2014] netlink_rcv_skb+0x232/0x4b0 [ 1039.052733][ T2014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.052757][ T2014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.052781][ T2014] ? down_read+0x270/0x2e0 [ 1039.052801][ T2014] ? genl_rcv+0xd/0x40 [ 1039.052823][ T2014] genl_rcv+0x28/0x40 [ 1039.052846][ T2014] netlink_unicast+0x75c/0x8e0 [ 1039.052867][ T2014] netlink_sendmsg+0x813/0xb40 [ 1039.052890][ T2014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.052911][ T2014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.052932][ T2014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.052961][ T2014] ____sys_sendmsg+0x972/0x9f0 [ 1039.052982][ T2014] ? __might_fault+0xaf/0x130 [ 1039.053004][ T2014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.053027][ T2014] ? import_iovec+0x73/0xa0 [ 1039.053050][ T2014] ___sys_sendmsg+0x2a5/0x360 [ 1039.053070][ T2014] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.053088][ T2014] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.053110][ T2014] ? futex_wait+0x2a2/0x390 [ 1039.053141][ T2014] ? __fget_files+0x2a/0x420 [ 1039.053160][ T2014] ? __fget_files+0x3a0/0x420 [ 1039.053182][ T2014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.053204][ T2014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.053228][ T2014] ? rcu_is_watching+0x15/0xb0 [ 1039.053250][ T2014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.053266][ T2014] do_syscall_64+0x15f/0xf80 [ 1039.053285][ T2014] ? trace_irq_disable+0x3b/0x140 [ 1039.053309][ T2014] ? clear_bhb_loop+0x40/0x90 [ 1039.053327][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.053343][ T2014] RIP: 0033:0x7fe82dd9cdd9 [ 1039.053358][ T2014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.053374][ T2014] RSP: 002b:00007fe82eb74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.053391][ T2014] RAX: ffffffffffffffda RBX: 00007fe82e015fa0 RCX: 00007fe82dd9cdd9 [ 1039.053404][ T2014] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000e [ 1039.053415][ T2014] RBP: 00007fe82de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1039.053425][ T2014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.053435][ T2014] R13: 00007fe82e016038 R14: 00007fe82e015fa0 R15: 00007ffdc2634978 [ 1039.053454][ T2014] [ 1039.525388][ T2020] bond1 (unregistering): Released all slaves [ 1039.670648][T20910] block nbd4: Receive control failed (result -32) [ 1039.670669][ T5629] block nbd4: Receive control failed (result -32) [ 1040.345109][ T1775] net_ratelimit: 15 callbacks suppressed [ 1040.345134][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1040.464983][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1040.575085][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1040.685095][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1040.795025][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1040.905308][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1041.015196][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1041.125199][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1041.235058][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1041.345936][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.365130][ T1775] net_ratelimit: 35 callbacks suppressed [ 1045.365155][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.485147][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.595448][ T1806] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.705090][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.815358][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1045.925135][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1046.035329][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1046.155070][ T1790] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1046.265039][ T1777] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1046.375091][ T1775] bond8: (slave ip6gretap1): failed to get link speed/duplex