last executing test programs: 2.855846362s ago: executing program 2 (id=4308): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) unshare(0xc040480) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2002, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000005400010026bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="010000006d00000100000000dfefb8ce367e0ac71800000020000100", @ANYRES32=r9, @ANYBLOB="01020200fc00000000000000000000000000000186dd0000"], 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) 2.515711937s ago: executing program 2 (id=4311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000000)="aaf3054a3e72ed5b15c93ea247d170b7e09855c4da25168d604c9dcc9bd8c59905db7c711e39783e87386dc1c992beb1f8aa14d3bb988114982b34f8661835dce164465a224db4fe66bea4adbe1997cc1fbeab15d20cfddad42a226141c75d5b2ccafa15f1d884c6a8526c71b81d14490755766384c320e68241520b520dee417c16bc924d7fa3bbb2eb1a306fb8bb7edd35eab1de0cc01b", 0x98, 0x4, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x800, 0x210, 0x4}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x0, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x104, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x8000, 0x6, 0x0, 0x3672, 0x2, 0x9, 0x6, 0x7, 0x10, 0x0, 0x3, 0x3, 0x6, 0xf, 0x6, 0x4], 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f0000000180)=':\x00', 0x400201, &(0x7f00000001c0)={@_ha_fsid={[0x10001, 0x8]}, {0x400, 0x9, 0x1, 0xb}}, 0x8, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xfffffffd}) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r4, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x1000000, 0xdc0, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000380), 0x8) 2.448394972s ago: executing program 3 (id=4313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x10, 0x0, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x20) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="10005a800c000180050009"], 0x2c}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="5979e3ff4013b2db3938487c0df0057856089079f257a6e9f3d4ce3aba62beb71873332e0e3d61cfd0639b51c1164757606daab9e3de3c7c787fff86bf72b9209eefd63a34a3d069bd6f54f06fa173cb6fd2aba651590fbcf6af6d39748c072d0ffae354b9204be00231f4f7a993437e522c5cde0d0c3f1fe5b33b109013b38175dfd39c1b84699a30303e8c35a8c6aee7d49f10d3d1847721b489ed8489c2345e492a6871a369bd538a4bf15df6f4f04fac17e24e0f9b7f2a91bbc25cbedeee9e89db03f761061afe7e25e1a6de4cd5b99c19f9a20cdeb43b1bfca1f65f3214e8a28422adf3db8c3aad8e4d"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x8810) connect$bt_sco(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) socket$xdp(0x2c, 0x3, 0x0) 2.250797301s ago: executing program 3 (id=4315): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup/cgroup.procs/../file0\x00', 0x0, 0x8}, 0x18) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0xfffffffffffffe40, 0xc005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.198792032s ago: executing program 3 (id=4317): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4c, 0x0, &(0x7f0000001000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r1, 0x0, 0x0, 0x20000840, &(0x7f0000001480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x81}, 0x1c) 1.675565699s ago: executing program 1 (id=4328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r2 = socket(0x29, 0x1, 0x40000) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002840)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) 1.522951437s ago: executing program 1 (id=4331): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.522540246s ago: executing program 2 (id=4332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket(0x2b, 0x80801, 0x1) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002d"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) 1.401091656s ago: executing program 1 (id=4335): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1, 0x30}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x1, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xe1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0xffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20044800) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r9}, &(0x7f0000000140)=0x20) sendmsg$AUDIT_USER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 1.252481636s ago: executing program 3 (id=4338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x8) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000088fb000003"], 0x104c) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000003c0), 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x2fb, 0xfe71}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000600000000009e76218e14353772e5e8076de1cbdd59b51eea3fdb8aa84684ea064445b3f181737b88b07c602f1fa96449ac034ce5d56e41856c175a8076b87ca32d596bc456d24a7ea0678648dc18b5eef9053d99def6102ebbff93787710456b759e4a292f0e15006fa8e2ecf676e6831b9ad0cf642e1703479ef059bf424d736f0a5525258fc0ade059c4434388ab32fa47b0c5249f59de"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.187231552s ago: executing program 2 (id=4339): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r7, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000680)=r1, 0x4) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 834.803503ms ago: executing program 3 (id=4345): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000034000107007f8affffffffff02000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x10, 0xb}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000140)={r10}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000140)={r10}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={r10, @in6={{0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}}}, 0x84) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r8], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000016c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 735.44333ms ago: executing program 4 (id=4347): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) socket(0x18, 0x2, 0xa3b) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0xffff7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x4, 0x7, 0x2, 0x7, 0x70}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x94) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') 668.466124ms ago: executing program 4 (id=4349): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'netpci0\x00', {0x9}, 0x7fff}) (async) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 567.259198ms ago: executing program 0 (id=4350): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000eaff73930880c6a7214da2fffb0a6f6b6d41b55af54c6ed529642b1bd9b34f373998f1b4108aa7f265447db379c04174ecd96f2954338cd22f790d64565eac2193f01fb8edf17e33ac3ee8c5f099496886085112d1d959d1a0c3a2078239817b9c199040e5bbeb4f40aef8a670bc8ab3acdb6304b0f0370e61dae659aae02dd71462be64d3b49445035c4eb94756e137067d6d1625f395204f91a47c2d5c1428bb59bdf0fabd7c8d442ff9b2850c03ba5529606663c30463a14a443bec648c316daa4e25fb2f8c5e3c623dac887fbe9de58af8f22dee5a9cfa17c9b2f3a986c99ab8f52a201cd9224a8d700be0db7df1409973562abc5ad3ff659349584142f4417cc67b7c9f71574325ecbd87bb69960f2c58dfefb18464055ecc04779c80b420c772225620bfc780a54106db8ce6e1102e3bc76ba7b413f6a09e0663a39d20cf767212d7dedcc475efef7e65651e48908be073306e13527c14981626e61b914f70f07f0cca93559e3737a226bd80d7887090ac23272b1f8dae6e39c0cdd236f42a429b3f12bcc64b79ab7f75c016f7e315cdc9927ed598596130cc5a2d110bd311e66d05d235b863cd05fcc2f82f5fa95a403eeac3a184fbde9f834c7a42b6e20d7e6186", @ANYRES32=r3, @ANYBLOB="83140500000000002800128009000100697069700000000018000280060012004e2200000400130008000200ac1e0101"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e27, 0x2, 0x6, 0x12d5b, 0x4}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f0000000080), 0x0, 0x100, &(0x7f0000000100), 0x10) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 567.005948ms ago: executing program 4 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0xd, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704022080fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400007c0000040042800c000180060006006558000002800c000680080000"], 0x34}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) 544.170333ms ago: executing program 4 (id=4352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1, {[@fastopen={0x22, 0x11, "79c4fd826e79ceae3697e1c46f1327"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00038006"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 537.627267ms ago: executing program 3 (id=4353): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "3ac3014a9fe5b5be", "1f0111f25415d92e72c8263e63f2bdd8", "9f78339f", "72ea5413bc718716"}, 0x28) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000280), &(0x7f0000000340)=0x4) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3bdf040010007f69a6890727de7293ea5ae83143", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c0002800800030003000000"], 0x3c}}, 0x54) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x88a01, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f00000003c0)) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x24a40, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="20000500aaaaaaaaaa22bbbbbbbbbbbbaaaaaaaaffffff5111e39ccea30000000000"]) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000000000000000000000000000000000089af4f64d80f16b6b4f270e0a96078986ba553a2db2fb4b3c5c6c6ec7096b088ae63b788b5d9269d1cc19717dffa459775a95922210a52964c5525f21809", @ANYRES32=0x0, @ANYBLOB="00000000003f00002400128009000100626f6e64000000001400028005001500000000000500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 443.944027ms ago: executing program 0 (id=4354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x4231, 0x4) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="97", 0x1}], 0x1}}], 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000080)) 432.266852ms ago: executing program 0 (id=4355): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r2, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x1008}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14250a000000"], 0x14}}, 0x8000) 382.337684ms ago: executing program 4 (id=4356): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1, 0x0, 0x14}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) bind$can_j1939(r0, &(0x7f00000007c0)={0x1d, r4, 0x100000002, {0x2, 0xf0, 0x1}, 0xff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) (async) read$rfkill(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd) (async) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1, 0x0, 0x14}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) (async) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) (async) bind$can_j1939(r0, &(0x7f00000007c0)={0x1d, r4, 0x100000002, {0x2, 0xf0, 0x1}, 0xff}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) 278.745783ms ago: executing program 0 (id=4357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 278.301005ms ago: executing program 1 (id=4358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01, 0x0, 0x40000}, 0x0) 259.40558ms ago: executing program 2 (id=4359): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x21, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x5592db0484858e7c) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 200.777074ms ago: executing program 0 (id=4360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 83.975327ms ago: executing program 1 (id=4361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf2501000000040003008000018008000380040000001400020076647468305f746f5f7465616d00006d616376f4617030000000000000000008000300020000001400020076657468315f766972745f8256ec9000140002006261746164763000000000000000000008000300000020001400020067656e657665310000000000000000008641aaf53d7e524eb045380b44f47ca0596344f77236ae5bdd33ed89edc06984b9a1ed59e2d9e6cac95e2847de95e41172e442ac5166919badba7d17a99cf02708b69501f1a55b9d43f1e78644f53a06de552c60655a8da452e8d4256aac3bcb826980f9e8be14a26b6a3e49d4620b150bc0b83c412d0656d2070ef7b4161c66027486103dd2d6ac22486a8448fae4151fb2d55f23e0f5061e89cd2996a3b0e4ecf6038224a2541d2a917d580094af"], 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x24008009) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 83.484761ms ago: executing program 2 (id=4362): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r5}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071101b0000000000950000217c3c6b47"], &(0x7f0000000480)='GPL\x00'}, 0x80) 82.823974ms ago: executing program 4 (id=4363): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x23c, 0x24, 0x100, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x20c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x7c}}, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) close(r0) 33.494449ms ago: executing program 0 (id=4364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x3, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000d00)={{r3}, "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"}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={0x20, r2, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x2f, 0x0, &(0x7f0000000040)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r7, &(0x7f0000000000)="ac149f64c29a021a05ff208b4247a4d6c97c69e6a095cfb4", 0x5dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650007000c00028006000140010100000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 0s ago: executing program 1 (id=4365): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x20040000) kernel console output (not intermixed with test programs): s in process `syz.0.3020'. [ 357.071762][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 357.083830][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 357.109255][T16865] tipc: Resetting bearer [ 357.116654][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 357.197997][ T5897] IPVS: starting estimator thread 0... [ 357.292464][T16883] IPVS: using max 25 ests per chain, 60000 per kthread [ 357.330110][T16875] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 357.368620][T16875] syzkaller1: Refused to change device type [ 357.388671][T16852] tipc: Resetting bearer [ 357.429100][T16852] tipc: Disabling bearer [ 357.478114][ T67] IPVS: stop unused estimator thread 0... [ 357.481215][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 357.632316][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 357.802859][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 357.908374][T16908] netlink: 'syz.0.3026': attribute type 2 has an invalid length. [ 357.922676][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 357.951402][T16908] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3026'. [ 358.055259][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 358.100587][T16516] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.146726][T16516] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.186881][T16516] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.220137][T16926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3032'. [ 358.234204][T16516] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.244862][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3032'. [ 358.332867][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 358.497904][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.503842][T16947] x_tables: duplicate underflow at hook 2 [ 358.517596][T16948] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3036'. [ 358.541126][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 358.543895][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 358.587037][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3036'. [ 358.590626][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.632501][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.639629][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.686999][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.694371][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.796570][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 358.933898][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 359.319187][T16992] netlink: 'syz.2.3045': attribute type 29 has an invalid length. [ 359.358619][T16990] IPv6: sit2: Disabled Multicast RS [ 359.392825][T16990] sit2: entered allmulticast mode [ 359.470632][T16992] netlink: 'syz.2.3045': attribute type 29 has an invalid length. [ 359.570300][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.696546][T17009] netlink: 'syz.1.3049': attribute type 5 has an invalid length. [ 359.724739][T16516] veth0_vlan: entered promiscuous mode [ 359.770425][T16516] veth1_vlan: entered promiscuous mode [ 359.876441][T16516] veth0_macvtap: entered promiscuous mode [ 359.933203][T16516] veth1_macvtap: entered promiscuous mode [ 359.989009][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.040774][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.116317][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.172451][T17041] netlink: 'syz.2.3057': attribute type 13 has an invalid length. [ 360.182524][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.207168][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.237121][T17041] macvtap0: refused to change device tx_queue_len [ 360.279033][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.434838][T10224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.449860][T10224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.574742][T10224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.583094][T17048] 0: renamed from hsr_slave_1 (while UP) [ 360.601941][T10224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.617994][T17048] 0: entered allmulticast mode [ 361.653107][T10224] net_ratelimit: 21 callbacks suppressed [ 361.653131][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 361.795422][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 361.911229][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 362.021310][T10915] bond9: (slave bridge4): failed to get link speed/duplex [ 362.132547][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 362.241472][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 362.351411][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 362.461260][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 362.571347][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 362.681189][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 364.065441][T17087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.277697][ T5897] IPVS: starting estimator thread 0... [ 364.314991][T17150] __nla_validate_parse: 11 callbacks suppressed [ 364.315017][T17150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'. [ 364.353951][T17154] syzkaller0: entered promiscuous mode [ 364.360790][T17154] syzkaller0: entered allmulticast mode [ 364.403641][T17149] IPVS: using max 24 ests per chain, 57600 per kthread [ 364.492396][T17161] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 364.535334][T17160] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 364.543894][T17160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3081'. [ 364.764885][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 364.794461][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 364.884169][T17174] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 365.008158][T17179] wg1 speed is unknown, defaulting to 1000 [ 365.546697][T17204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3094'. [ 365.816768][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 366.137482][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 366.169230][T17241] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 366.366527][T17253] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3108'. [ 366.404340][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 366.433751][T17253] delete_channel: no stack [ 366.595121][T17263] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.602985][T17263] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.715651][T17280] xt_bpf: check failed: parse error [ 366.734348][T17263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.746753][T17263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.871063][ T1157] net_ratelimit: 30 callbacks suppressed [ 366.871088][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 366.904498][T10230] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.931798][T10230] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.074002][T10230] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.099171][T10230] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.158314][T17293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3119'. [ 367.251847][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 367.371575][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 367.492405][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 367.586798][T17325] netlink: 'syz.1.3128': attribute type 83 has an invalid length. [ 367.612917][T17325] netlink: 'syz.1.3128': attribute type 10 has an invalid length. [ 367.614420][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 367.740284][T17330] IPVS: Error connecting to the multicast addr [ 367.751411][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 367.871353][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 368.025522][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 368.153118][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 368.230078][T17361] netlink: 'syz.3.3137': attribute type 4 has an invalid length. [ 368.297716][T17361] netlink: 'syz.3.3137': attribute type 4 has an invalid length. [ 368.306000][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 368.485205][T17383] erspan0: entered promiscuous mode [ 368.490801][T17383] erspan0: entered allmulticast mode [ 368.915950][T17412] netlink: 'syz.0.3150': attribute type 3 has an invalid length. [ 368.968396][T17414] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 369.050656][T17419] lo: entered promiscuous mode [ 369.260314][T17427] wg1 speed is unknown, defaulting to 1000 [ 369.335689][T17431] sctp: [Deprecated]: syz.3.3162 (pid 17431) Use of int in max_burst socket option deprecated. [ 369.335689][T17431] Use struct sctp_assoc_value instead [ 369.355171][T17429] netlink: 'syz.1.3159': attribute type 3 has an invalid length. [ 369.363250][T17429] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 369.379632][T17429] __nla_validate_parse: 8 callbacks suppressed [ 369.379654][T17429] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3159'. [ 369.835568][T17457] netlink: 'syz.3.3167': attribute type 8 has an invalid length. [ 370.036861][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3171'. [ 370.188833][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 370.213160][T17477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 370.223514][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 370.225138][T17483] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.232918][T17477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 370.499616][T17494] batman_adv: batadv0: Adding interface: dummy0 [ 370.533989][T17496] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3176'. [ 370.542711][T17494] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.548542][T17498] Bluetooth: MGMT ver 1.23 [ 370.582906][T17494] batman_adv: batadv0: Interface activated: dummy0 [ 370.589645][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3177'. [ 370.733200][T17496] C: renamed from lo (while UP) [ 370.764825][T17509] nbd: couldn't find a device at index -1795162112 [ 370.794900][T17502] vlan2: entered allmulticast mode [ 370.810360][T17502] bridge10: entered allmulticast mode [ 370.839560][T17498] bridge10: port 1(erspan0) entered blocking state [ 370.847472][T17498] bridge10: port 1(erspan0) entered disabled state [ 370.876081][T17498] erspan0: entered allmulticast mode [ 370.904668][T17498] erspan0: entered promiscuous mode [ 370.936297][T17513] pim6reg: entered allmulticast mode [ 371.203261][T17526] bond15: option arp_missed_max: invalid value (0) [ 371.231761][T17526] bond15: option arp_missed_max: allowed values 1 - 255 [ 371.255196][T17526] bond15 (unregistering): Released all slaves [ 371.311607][T17537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3187'. [ 371.367135][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.377983][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.386766][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.396705][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.407740][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.514412][T17538] wg1 speed is unknown, defaulting to 1000 [ 371.912232][ T1157] net_ratelimit: 48 callbacks suppressed [ 371.912254][ T1157] bond9: (slave bridge4): failed to get link speed/duplex [ 372.071211][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 372.126541][T17538] chnl_net:caif_netlink_parms(): no params data found [ 372.271232][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 372.278937][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.287520][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.295293][T17538] bridge_slave_0: entered allmulticast mode [ 372.304546][T17538] bridge_slave_0: entered promiscuous mode [ 372.314563][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.322253][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.329830][T17538] bridge_slave_1: entered allmulticast mode [ 372.338745][T17538] bridge_slave_1: entered promiscuous mode [ 372.392602][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.407060][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.443030][T17538] team0: Port device team_slave_0 added [ 372.452955][T17538] team0: Port device team_slave_1 added [ 372.479090][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'. [ 372.480481][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.496224][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.522972][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.535366][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.542675][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.569755][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.613848][T17538] hsr_slave_0: entered promiscuous mode [ 372.620260][T17538] hsr_slave_1: entered promiscuous mode [ 372.627041][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 372.632994][T17538] Cannot create hsr debugfs directory [ 372.742063][T17538] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.752279][T17538] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.764295][T17538] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.812389][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 372.822480][T17538] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.832688][T17538] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.843372][T17538] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.905807][T17538] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.915786][T17538] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.926080][T17538] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 372.955983][T17538] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.966671][T17538] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 372.977158][T17538] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 373.001418][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 373.121380][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 373.231128][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 373.351337][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 373.461203][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 373.491191][ T5823] Bluetooth: hci4: command tx timeout [ 373.571515][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 374.035904][T17532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.062416][T17538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.156970][T17538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.212100][T17538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.236887][T17538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.452441][T17597] __nla_validate_parse: 1 callbacks suppressed [ 374.452463][T17597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3203'. [ 374.463151][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.507153][ T29] audit: type=1107 audit(1773812197.685:2): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 374.517726][T17597] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3203'. [ 374.532452][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.645655][T17605] x_tables: duplicate underflow at hook 2 [ 374.662245][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3206'. [ 374.675879][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.683196][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.694606][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.701847][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.762249][T17605] bond15: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 374.837026][T17605] bond15 (unregistering): Released all slaves [ 374.982936][T17619] xt_limit: Overflow, try lower: 271964/0 [ 375.441934][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.453202][T17645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3218'. [ 375.499619][T17645] bond0: entered promiscuous mode [ 375.522707][T17645] bond_slave_0: entered promiscuous mode [ 375.551747][T17645] bond_slave_1: entered promiscuous mode [ 375.571274][ T5823] Bluetooth: hci4: command tx timeout [ 375.585249][T17645] gretap0: entered promiscuous mode [ 375.624016][T17645] hsr1: entered promiscuous mode [ 375.913898][T17661] bond3: entered promiscuous mode [ 375.985561][T17673] validate_nla: 2 callbacks suppressed [ 375.985584][T17673] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 376.034948][T17673] bond2: entered promiscuous mode [ 376.049429][T17673] bond2: entered allmulticast mode [ 376.062898][T17673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.128034][T17673] macvlan2: entered promiscuous mode [ 376.167988][T17673] macvlan2: entered allmulticast mode [ 376.228496][T17673] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.405353][T17692] netlink: 'syz.0.3228': attribute type 25 has an invalid length. [ 376.585123][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 376.587440][T17538] veth0_vlan: entered promiscuous mode [ 376.615130][T17538] veth1_vlan: entered promiscuous mode [ 376.656787][T17700] vlan2: entered allmulticast mode [ 376.685187][T17700] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 376.712312][T17708] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3233'. [ 376.718156][T17712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3235'. [ 376.744953][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'. [ 376.805441][T17538] veth0_macvtap: entered promiscuous mode [ 376.830120][T17538] veth1_macvtap: entered promiscuous mode [ 376.898919][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.930461][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.937575][T17725] IPVS: length: 200 != 8 [ 376.951579][T17726] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 376.973748][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.983770][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.994442][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.010641][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.154329][T10239] net_ratelimit: 17 callbacks suppressed [ 377.154361][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 377.206909][T17736] vlan3: entered allmulticast mode [ 377.223380][T17736] bond0: entered allmulticast mode [ 377.262518][T17736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3241'. [ 377.353865][T17736] bond0 (unregistering): Released all slaves [ 377.401144][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 377.426353][T17748] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3243'. [ 377.524381][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.543336][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 377.551501][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.651396][ T5823] Bluetooth: hci4: command tx timeout [ 377.670933][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.679186][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 377.715198][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.172316][T17770] lo: left promiscuous mode [ 378.217172][T17770] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 378.303392][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 378.411238][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 378.512897][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.526466][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.534167][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 378.544844][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.557014][T17787] netlink: 'syz.3.3251': attribute type 21 has an invalid length. [ 378.576200][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.585178][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.642505][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 378.676326][T17788] wg1 speed is unknown, defaulting to 1000 [ 378.778356][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.801700][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 378.858491][T17801] sctp: [Deprecated]: syz.2.3254 (pid 17801) Use of int in max_burst socket option deprecated. [ 378.858491][T17801] Use struct sctp_assoc_value instead [ 378.935587][T17801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.943316][T17801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.964071][T17801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.973164][T17801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.032810][T17788] chnl_net:caif_netlink_parms(): no params data found [ 379.328674][T17823] syzkaller0: entered promiscuous mode [ 379.335231][T17823] syzkaller0: entered allmulticast mode [ 379.343427][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.350906][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.359402][T17788] bridge_slave_0: entered allmulticast mode [ 379.368475][T17788] bridge_slave_0: entered promiscuous mode [ 379.380432][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.390082][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.397895][T17788] bridge_slave_1: entered allmulticast mode [ 379.406735][T17788] bridge_slave_1: entered promiscuous mode [ 379.412950][T10239] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.499400][T17832] bond4: Unable to set down delay as MII monitoring is disabled [ 379.538784][T17832] bond4 (unregistering): Released all slaves [ 379.580550][T17841] __nla_validate_parse: 1 callbacks suppressed [ 379.580571][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 379.697542][T17843] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 379.706761][T17843] netlink: 'syz.3.3262': attribute type 2 has an invalid length. [ 379.722969][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.732910][ T5844] Bluetooth: hci4: command tx timeout [ 379.738482][T17843] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 379.747117][T17843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3262'. [ 379.761482][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.895128][T17788] team0: Port device team_slave_0 added [ 379.909095][T17788] team0: Port device team_slave_1 added [ 379.916027][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3264'. [ 379.967319][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 380.007248][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.023561][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.056571][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.189284][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.201909][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.250801][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.307932][T17862] block nbd0: reconnected socket [ 380.307951][ T5823] block nbd0: Receive control failed (result -107) [ 380.330371][T17862] nbd: nbd1 already in use [ 380.359663][T17862] block nbd1: NBD_DISCONNECT [ 380.409667][T17862] block nbd1: Send disconnect failed -32 [ 380.422028][T17862] block nbd1: shutting down sockets [ 380.467377][T17788] hsr_slave_0: entered promiscuous mode [ 380.492539][T17788] hsr_slave_1: entered promiscuous mode [ 380.509391][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 380.521035][T17788] Cannot create hsr debugfs directory [ 380.523696][T17884] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.3276'. [ 380.611832][ T5823] Bluetooth: hci1: command tx timeout [ 380.714974][T17891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3278'. [ 380.724368][ T5844] block nbd2: Receive control failed (result -32) [ 381.055417][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 381.064976][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3281'. [ 381.108108][T17788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.126435][T17788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.148287][T17788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.178033][T17788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 381.217272][T17903] bridge0: port 3(ipvlan2) entered blocking state [ 381.224248][T17903] bridge0: port 3(ipvlan2) entered disabled state [ 381.233742][T17903] ipvlan2: entered allmulticast mode [ 381.239190][T17903] bridge0: entered allmulticast mode [ 381.246517][T17903] ipvlan2: left allmulticast mode [ 381.252425][T17903] bridge0: left allmulticast mode [ 381.274332][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'. [ 381.286074][T17788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.300412][T17788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.331271][T17788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.361119][T17788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 381.503002][T17788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.518935][T17788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.537757][T17788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.548937][T17788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 381.581989][T17924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3288'. [ 381.664927][T17788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.691506][T17788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.713182][T17788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.749711][T17788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 382.029083][T17788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.061442][T17788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.078976][T17788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.104986][T17788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.402617][T10239] net_ratelimit: 11 callbacks suppressed [ 382.402639][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 382.478699][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.489112][T17973] netlink: 'syz.1.3301': attribute type 21 has an invalid length. [ 382.549958][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.589221][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.596461][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.637356][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.644635][T10239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.677405][T17983] netlink: 'syz.4.3305': attribute type 4 has an invalid length. [ 382.692064][ T5844] Bluetooth: hci1: command tx timeout [ 382.722893][T17983] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 382.753323][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 382.846440][T17990] Cannot find add_set index 0 as target [ 382.861489][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 382.870225][T17990] Cannot find add_set index 0 as target [ 382.886596][T17990] Cannot find add_set index 0 as target [ 382.990529][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.018156][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 383.074324][T17788] veth0_vlan: entered promiscuous mode [ 383.089808][T17788] veth1_vlan: entered promiscuous mode [ 383.134358][T17788] veth0_macvtap: entered promiscuous mode [ 383.146081][T17788] veth1_macvtap: entered promiscuous mode [ 383.177202][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.192165][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 383.205831][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.220900][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.230312][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.243152][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.256862][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.311928][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 383.421208][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 383.541269][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 383.652699][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 383.761579][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 384.771336][ T5844] Bluetooth: hci1: command tx timeout [ 385.412472][T17967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.563796][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.602014][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.699670][T18017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.706999][T18017] IPv6: NLM_F_CREATE should be set when creating new route [ 385.738975][T10918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.747531][T10918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.029585][T18034] __nla_validate_parse: 7 callbacks suppressed [ 386.029607][T18034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3318'. [ 386.047339][T18032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3246'. [ 386.068669][T18032] Cannot find add_set index 0 as target [ 386.096912][T18034] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3318'. [ 386.128029][T18034] netlink: 'syz.4.3318': attribute type 6 has an invalid length. [ 386.147382][T18031] syzkaller0: entered promiscuous mode [ 386.154300][T18031] syzkaller0: entered allmulticast mode [ 386.171072][T18034] netlink: 'syz.4.3318': attribute type 5 has an invalid length. [ 386.180411][T18034] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3318'. [ 386.599755][T18057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3325'. [ 386.851299][ T5844] Bluetooth: hci1: command tx timeout [ 388.163247][ T1165] net_ratelimit: 21 callbacks suppressed [ 388.163273][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 388.301340][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 388.352532][T18078] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3328'. [ 388.422465][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 388.551117][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 388.617698][T18092] syz_tun: entered allmulticast mode [ 388.641628][T18092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3334'. [ 388.661303][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 388.682584][T18089] syz_tun: left allmulticast mode [ 388.793274][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 388.823333][T18104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.911098][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 388.932354][ T5844] Bluetooth: hci1: command tx timeout [ 389.024866][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 389.117374][T18114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 389.151345][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 390.030274][T18147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3348'. [ 390.236183][T18156] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 390.331226][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3354'. [ 390.382678][T18156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.487672][T18174] tc_dump_action: action bad kind [ 391.417376][T18223] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.432479][T18223] __nla_validate_parse: 1 callbacks suppressed [ 391.432498][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 391.475788][T18223] pim6reg1: entered promiscuous mode [ 391.490676][T18223] pim6reg1: entered allmulticast mode [ 391.743821][T18237] xt_hashlimit: size too large, truncated to 1048576 [ 391.761720][T18241] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3381'. [ 391.920487][T18234] syzkaller1: entered promiscuous mode [ 391.930747][T18234] syzkaller1: entered allmulticast mode [ 392.031988][T18253] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3384'. [ 392.062744][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 392.197678][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3387'. [ 392.271384][T18270] netlink: 'syz.1.3389': attribute type 23 has an invalid length. [ 392.349558][T18272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3390'. [ 392.369177][T18272] tipc: Invalid UDP bearer configuration [ 392.369242][T18272] tipc: Enabling of bearer rejected, failed to enable media [ 392.581984][T18287] netlink: 'syz.0.3395': attribute type 3 has an invalid length. [ 392.631948][T18289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3396'. [ 392.792199][T18296] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 392.819790][T18296] nbd: error processing sock list [ 393.017135][T18307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3402'. [ 393.033490][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3402'. [ 393.253352][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3406'. [ 394.902799][T10918] net_ratelimit: 27 callbacks suppressed [ 394.902823][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 394.937468][T18331] sctp: [Deprecated]: syz.2.3408 (pid 18331) Use of int in maxseg socket option. [ 394.937468][T18331] Use struct sctp_assoc_value instead [ 394.997768][T18333] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 395.061560][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 395.182642][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 395.327194][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 395.441322][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 395.551126][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 395.608624][T18372] bridge_slave_1: left allmulticast mode [ 395.616178][T18372] bridge_slave_1: left promiscuous mode [ 395.622294][T18372] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.632557][T18372] bridge_slave_0: left allmulticast mode [ 395.638303][T18372] bridge_slave_0: left promiscuous mode [ 395.645416][T18372] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.701171][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 395.811176][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 395.921250][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 396.031456][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 398.049189][T18342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.297106][T18381] __nla_validate_parse: 3 callbacks suppressed [ 398.297126][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3420'. [ 398.317625][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3420'. [ 398.365581][T18381] erspan0: entered promiscuous mode [ 398.374349][T18381] gretap0: entered promiscuous mode [ 398.380696][T18381] debugfs: 'hsr1' already exists in 'hsr' [ 398.398961][T18381] Cannot create hsr debugfs directory [ 398.446619][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3421'. [ 398.479345][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3421'. [ 398.543918][T18394] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 398.795076][T18402] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 399.236918][T18408] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 399.991102][ T1165] net_ratelimit: 34 callbacks suppressed [ 399.991126][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 400.111133][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 400.221383][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 400.341283][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 400.451376][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 400.561125][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 400.671309][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 400.781161][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 400.891128][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 401.001253][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 401.306233][T18385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.512119][T18419] netlink: 'syz.0.3428': attribute type 4 has an invalid length. [ 401.525354][T18423] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3430'. [ 401.564659][T18425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3430'. [ 401.780821][T18435] nbd: must specify a device to reconfigure [ 401.780887][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 401.932411][T18444] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 402.004207][T18446] bond1: option all_slaves_active: invalid value (222) [ 402.015858][T18453] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 402.030054][T18456] netlink: 'syz.0.3439': attribute type 15 has an invalid length. [ 402.038632][T18446] bond1 (unregistering): Released all slaves [ 402.124134][T18444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.204182][T18449] bond1: ARP target 1.0.0.0 is already present [ 402.210605][T18449] bond1: option arp_ip_target: invalid value (1) [ 402.225032][T18449] bond1 (unregistering): Released all slaves [ 402.281605][T18451] bond1: (slave geneve2): making interface the new active one [ 402.290633][T18451] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 402.329764][T18469] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 402.403373][T18467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 402.672211][T18487] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 402.692349][T18487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3449'. [ 402.711280][T18487] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3449'. [ 403.226591][T18523] netlink: 'syz.0.3466': attribute type 12 has an invalid length. [ 403.451217][T18540] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 403.459619][T18540] netlink: 'syz.3.3467': attribute type 2 has an invalid length. [ 403.529457][T18540] __nla_validate_parse: 6 callbacks suppressed [ 403.529480][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 403.638440][T18549] lo: entered promiscuous mode [ 403.644891][T18549] tunl0: entered promiscuous mode [ 403.658603][T18549] gre0: entered promiscuous mode [ 403.664746][T18549] gretap0: entered promiscuous mode [ 403.670617][T18549] erspan0: entered promiscuous mode [ 403.708868][T18552] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3469'. [ 403.730729][T18549] ip_vti0: entered promiscuous mode [ 403.820700][T18559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3472'. [ 403.849585][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3473'. [ 404.121611][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 404.347441][T18587] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3482'. [ 404.490891][T18597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3483'. [ 404.565964][ T5844] block nbd1: Receive control failed (result -32) [ 404.571084][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 404.697137][T18607] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3492'. [ 404.727079][T18607] nbd: illegal input index -8454144 [ 404.744307][T18607] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3492'. [ 404.769740][T18607] nbd: illegal input index -8454144 [ 404.900178][T18622] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 405.015497][T10230] net_ratelimit: 29 callbacks suppressed [ 405.015522][T10230] bond9: (slave bridge4): failed to get link speed/duplex [ 405.111476][ T1165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.132654][ T1165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.133527][T18643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.150174][ T1165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.173235][ T1165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.231322][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 405.295542][T18654] xt_TCPMSS: Only works on TCP SYN packets [ 405.341107][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 405.403266][T18663] ip6t_srh: unknown srh match flags 5F28 [ 405.403862][T18664] ip6t_srh: unknown srh match flags 5F28 [ 405.461686][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 405.479612][T18665] batman_adv: batadv0: Adding interface: dummy0 [ 405.491357][T18665] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.546302][T18665] batman_adv: batadv0: Interface activated: dummy0 [ 405.595533][T18673] batadv0: mtu less than device minimum [ 405.606209][T18673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.618782][T18673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.630570][T18673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.641959][T18673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.653831][T18673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.697040][T18676] vlan2: entered allmulticast mode [ 405.702930][T18676] bridge2: entered allmulticast mode [ 405.869984][T18685] nbd: must specify a size in bytes for the device [ 405.879923][T18685] block nbd0: NBD_DISCONNECT [ 405.886063][T18685] block nbd0: Send disconnect failed -32 [ 405.892407][T18685] block nbd0: shutting down sockets [ 406.059642][T18691] validate_nla: 2 callbacks suppressed [ 406.059664][T18691] netlink: 'syz.1.3517': attribute type 25 has an invalid length. [ 406.176948][T18692] netlink: 'syz.1.3517': attribute type 25 has an invalid length. [ 406.204271][T18691] netlink: 'syz.1.3517': attribute type 25 has an invalid length. [ 406.274523][T18692] netlink: 'syz.1.3517': attribute type 25 has an invalid length. [ 406.383815][T18703] syzkaller0: entered promiscuous mode [ 406.406237][T18703] syzkaller0: entered allmulticast mode [ 406.585122][T18716] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 407.041551][T10918] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.071052][T10918] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.079836][T10918] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.120510][T10918] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.773532][T18797] 8021q: VLANs not supported on ip6tnl0 [ 408.180543][T18828] syzkaller0: entered promiscuous mode [ 408.190748][T18828] syzkaller0: entered allmulticast mode [ 409.022950][T18873] __nla_validate_parse: 28 callbacks suppressed [ 409.022972][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 409.109341][T18873] bond2: entered promiscuous mode [ 409.118351][T18873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.135448][T18881] netlink: 'syz.3.3574': attribute type 1 has an invalid length. [ 409.175848][T18881] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3574'. [ 409.235661][T18873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.281958][T18873] bond2: (slave sit3): The slave device specified does not support setting the MAC address [ 409.317561][T18873] bond2: (slave sit3): Error -95 calling set_mac_address [ 409.629050][T18890] lo: entered promiscuous mode [ 409.787111][T18909] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3577'. [ 409.893461][T18912] siw: device registration error -23 [ 409.903645][T18916] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 410.101737][ T67] net_ratelimit: 46 callbacks suppressed [ 410.101760][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 410.143638][T18932] xt_l2tp: v2 doesn't support IP mode [ 410.251259][T18934] netlink: 'syz.4.3586': attribute type 1 has an invalid length. [ 410.259076][T18934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3586'. [ 410.271782][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 410.401118][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 410.518557][T18953] netlink: 'syz.1.3591': attribute type 1 has an invalid length. [ 410.535159][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 410.551804][T18956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3593'. [ 410.656545][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 410.664948][T18956] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3593'. [ 410.675152][T18956] netlink: 'syz.3.3593': attribute type 5 has an invalid length. [ 410.680709][T18965] tipc: Started in network mode [ 410.687337][T18956] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3593'. [ 410.690786][T18965] tipc: Node identity 16e0ee515c98, cluster identity 4711 [ 410.743177][T18965] tipc: Enabled bearer , priority 11 [ 410.822333][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 410.845259][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 410.889641][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 410.908803][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'. [ 411.029275][T18983] macvtap1: entered allmulticast mode [ 411.051251][T18983] veth0_macvtap: entered allmulticast mode [ 411.071406][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 411.116810][T18993] : entered promiscuous mode [ 411.181430][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 411.299792][T19003] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 411.326259][T19004] netlink: 'syz.2.3610': attribute type 13 has an invalid length. [ 411.341818][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 411.413789][ T1165] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.486585][T19004] netlink: 'syz.2.3610': attribute type 10 has an invalid length. [ 411.506635][T19004] team0: Device vxcan1 is of different type [ 411.696270][T19023] netlink: 'syz.3.3614': attribute type 11 has an invalid length. [ 411.715391][T19013] "syz.1.3612" (19013) uses obsolete ecb(arc4) skcipher [ 411.877153][ T7354] tipc: Node number set to 1249439313 [ 412.465416][T19064] bond1: option resend_igmp: invalid value (32767) [ 412.474134][T19064] bond1: option resend_igmp: allowed values 0 - 255 [ 412.487785][T19064] bond1 (unregistering): Released all slaves [ 412.989604][T19093] wg1 speed is unknown, defaulting to 1000 [ 413.818993][T19114] can: request_module (can-proto-0) failed. [ 414.345744][T19138] __nla_validate_parse: 5 callbacks suppressed [ 414.345768][T19138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3643'. [ 414.422599][T19143] netlink: 'syz.4.3645': attribute type 11 has an invalid length. [ 414.495823][T19149] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 414.545924][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3644'. [ 414.579997][T19149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.674689][T19155] bond1: (slave geneve2): making interface the new active one [ 414.686174][T19155] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 414.753821][T19163] syzkaller0: entered promiscuous mode [ 414.759363][T19163] syzkaller0: entered allmulticast mode [ 414.806302][T19166] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 414.818856][T19166] bond2 (unregistering): Released all slaves [ 414.885343][T19172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3650'. [ 415.057191][T19179] xt_hashlimit: size too large, truncated to 1048576 [ 415.068558][T19183] netlink: 'syz.2.3654': attribute type 7 has an invalid length. [ 415.111200][ T67] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.132112][T19183] netlink: 'syz.2.3654': attribute type 7 has an invalid length. [ 415.142207][ T67] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.243655][ T67] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.287189][ T67] net_ratelimit: 28 callbacks suppressed [ 415.287212][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 415.315450][ T1165] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.421443][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 415.551265][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 415.661125][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 415.774845][T19227] syzkaller0: entered promiscuous mode [ 415.787195][T19227] syzkaller0: entered allmulticast mode [ 415.891981][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 415.939787][T19233] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3668'. [ 415.984045][T19233] 8021q: VLANs not supported on ip6tnl0 [ 416.001193][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 416.018767][T19242] bridge0: port 3(gretap0) entered blocking state [ 416.026657][T19242] bridge0: port 3(gretap0) entered disabled state [ 416.035102][T19242] gretap0: entered allmulticast mode [ 416.043014][T19242] gretap0: entered promiscuous mode [ 416.048876][T19242] bridge0: port 3(gretap0) entered blocking state [ 416.055500][T19242] bridge0: port 3(gretap0) entered forwarding state [ 416.081154][T19239] geneve2: entered promiscuous mode [ 416.104527][T19233] wg1 speed is unknown, defaulting to 1000 [ 416.121080][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 416.216339][T19201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.235125][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 416.264284][T19247] xt_cluster: node mask cannot exceed total number of nodes [ 416.290577][T19247] lo: entered promiscuous mode [ 416.300412][T19247] netlink: 'syz.4.3672': attribute type 2 has an invalid length. [ 416.311249][T19247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.542554][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 416.590885][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3673'. [ 416.654430][T19269] netlink: 'syz.4.3677': attribute type 5 has an invalid length. [ 416.827674][T19253] team0 (unregistering): Port device team_slave_0 removed [ 416.868934][T19253] team0 (unregistering): Port device team_slave_1 removed [ 416.915289][T19252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.045658][T19282] netlink: 'syz.3.3681': attribute type 3 has an invalid length. [ 417.139468][T19289] netlink: 81 bytes leftover after parsing attributes in process `syz.4.3682'. [ 417.230662][T19293] netlink: 'syz.4.3685': attribute type 10 has an invalid length. [ 417.244314][T19293] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.257313][T19293] bridge_slave_1: left allmulticast mode [ 417.263912][T19293] bridge_slave_1: left promiscuous mode [ 417.269659][T19293] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.281447][T19296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3684'. [ 417.339007][T19293] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 417.578910][T19304] wg1 speed is unknown, defaulting to 1000 [ 417.586815][T19302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3688'. [ 417.730039][T19318] x_tables: duplicate underflow at hook 2 [ 417.859282][T19323] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3693'. [ 418.044156][T19338] x_tables: duplicate underflow at hook 2 [ 418.171301][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3698'. [ 418.457425][T19356] FAULT_INJECTION: forcing a failure. [ 418.457425][T19356] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 418.503294][T19356] CPU: 1 UID: 0 PID: 19356 Comm: syz.1.3705 Not tainted syzkaller #0 PREEMPT(full) [ 418.503326][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.503339][T19356] Call Trace: [ 418.503347][T19356] [ 418.503356][T19356] dump_stack_lvl+0xe8/0x150 [ 418.503392][T19356] should_fail_ex+0x412/0x560 [ 418.503425][T19356] _copy_from_user+0x2d/0xb0 [ 418.503457][T19356] ___sys_recvmsg+0x175/0x590 [ 418.503486][T19356] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.503537][T19356] ? __fget_files+0x3a0/0x420 [ 418.503580][T19356] do_recvmmsg+0x334/0x800 [ 418.503612][T19356] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.503647][T19356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.503689][T19356] __x64_sys_recvmmsg+0x198/0x250 [ 418.503715][T19356] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.503750][T19356] do_syscall_64+0x14d/0xf80 [ 418.503770][T19356] ? trace_irq_disable+0x3b/0x150 [ 418.503799][T19356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.503820][T19356] ? clear_bhb_loop+0x40/0x90 [ 418.503846][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.503866][T19356] RIP: 0033:0x7f6c6539c799 [ 418.503885][T19356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.503903][T19356] RSP: 002b:00007f6c66325028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.503926][T19356] RAX: ffffffffffffffda RBX: 00007f6c65615fa0 RCX: 00007f6c6539c799 [ 418.503940][T19356] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 418.503953][T19356] RBP: 00007f6c66325090 R08: 0000000000000000 R09: 0000000000000000 [ 418.503965][T19356] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 418.503977][T19356] R13: 00007f6c65616038 R14: 00007f6c65615fa0 R15: 00007fff47e4ff78 [ 418.504011][T19356] [ 419.029306][T19376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.508030][T19407] FAULT_INJECTION: forcing a failure. [ 419.508030][T19407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.528382][T19407] CPU: 1 UID: 0 PID: 19407 Comm: syz.1.3718 Not tainted syzkaller #0 PREEMPT(full) [ 419.528420][T19407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.528432][T19407] Call Trace: [ 419.528440][T19407] [ 419.528449][T19407] dump_stack_lvl+0xe8/0x150 [ 419.528483][T19407] should_fail_ex+0x412/0x560 [ 419.528514][T19407] _copy_to_iter+0x589/0x17d0 [ 419.528558][T19407] ? __pfx__copy_to_iter+0x10/0x10 [ 419.528584][T19407] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 419.528614][T19407] ? lockdep_hardirqs_on+0x7a/0x110 [ 419.528644][T19407] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 419.528672][T19407] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 419.528703][T19407] __skb_datagram_iter+0xf8/0x980 [ 419.528727][T19407] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 419.528761][T19407] skb_copy_datagram_iter+0xb5/0x270 [ 419.528789][T19407] netlink_recvmsg+0x2c3/0xa50 [ 419.528817][T19407] ? __lock_acquire+0x6b5/0x2cf0 [ 419.528853][T19407] ? __pfx_netlink_recvmsg+0x10/0x10 [ 419.528885][T19407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.528914][T19407] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 419.528935][T19407] ? security_socket_recvmsg+0x7e/0x2c0 [ 419.528964][T19407] ? __pfx_netlink_recvmsg+0x10/0x10 [ 419.528990][T19407] sock_recvmsg+0x172/0x1b0 [ 419.529020][T19407] ____sys_recvmsg+0x1e6/0x4a0 [ 419.529052][T19407] ? __pfx_____sys_recvmsg+0x10/0x10 [ 419.529091][T19407] ? import_iovec+0x73/0xa0 [ 419.529124][T19407] ___sys_recvmsg+0x215/0x590 [ 419.529150][T19407] ? __pfx____sys_recvmsg+0x10/0x10 [ 419.529200][T19407] ? __fget_files+0x3a0/0x420 [ 419.529243][T19407] do_recvmmsg+0x334/0x800 [ 419.529276][T19407] ? __pfx_do_recvmmsg+0x10/0x10 [ 419.529313][T19407] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.529354][T19407] __x64_sys_recvmmsg+0x198/0x250 [ 419.529381][T19407] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 419.529426][T19407] do_syscall_64+0x14d/0xf80 [ 419.529445][T19407] ? trace_irq_disable+0x3b/0x150 [ 419.529473][T19407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.529494][T19407] ? clear_bhb_loop+0x40/0x90 [ 419.529520][T19407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.529540][T19407] RIP: 0033:0x7f6c6539c799 [ 419.529561][T19407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.529578][T19407] RSP: 002b:00007f6c66325028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.529601][T19407] RAX: ffffffffffffffda RBX: 00007f6c65615fa0 RCX: 00007f6c6539c799 [ 419.529615][T19407] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 419.529627][T19407] RBP: 00007f6c66325090 R08: 0000000000000000 R09: 0000000000000000 [ 419.529638][T19407] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 419.529650][T19407] R13: 00007f6c65616038 R14: 00007f6c65615fa0 R15: 00007fff47e4ff78 [ 419.529682][T19407] [ 419.598819][T19411] __nla_validate_parse: 2 callbacks suppressed [ 419.598838][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 419.718354][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 420.212662][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 420.301170][T10239] net_ratelimit: 23 callbacks suppressed [ 420.301190][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 420.424038][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 420.542128][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 420.564848][T19464] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3739'. [ 420.608089][T19464] Unsupported ieee802154 address type: 0 [ 420.642456][T19471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.651244][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 420.761113][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 420.769633][T19475] syzkaller0: entered promiscuous mode [ 420.793550][T19475] syzkaller0: entered allmulticast mode [ 420.807224][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3744'. [ 420.891594][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 421.002372][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 421.034819][T19493] IPv6: NLM_F_CREATE should be specified when creating new route [ 421.046582][T19493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.054179][T19493] IPv6: NLM_F_CREATE should be set when creating new route [ 421.253389][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 421.307021][T19502] bond0: Caught tx_queue_len zero misconfig [ 421.351450][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 421.391179][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 421.399832][T19490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3746'. [ 421.601070][T19522] tipc: Trying to set illegal importance in message [ 421.660139][T19523] syzkaller0: entered promiscuous mode [ 421.674857][T19523] syzkaller0: entered allmulticast mode [ 422.447738][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 422.503856][T19530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.814335][T19588] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3777'. [ 422.842669][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'. [ 423.780874][T19649] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 423.841277][T19631] bridge0: port 3(gretap0) entered disabled state [ 423.936302][T19660] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 423.964131][T19660] netlink: 'syz.2.3792': attribute type 11 has an invalid length. [ 424.188671][T19631] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.349369][T19631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.373286][T19631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.841536][T10918] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.878940][T10918] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.929645][T10918] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.946570][T10918] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.973505][T19674] __nla_validate_parse: 3 callbacks suppressed [ 424.973527][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 425.351067][ T67] net_ratelimit: 23 callbacks suppressed [ 425.351091][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 425.366604][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 425.440745][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 425.501219][ T67] bond9: (slave bridge4): failed to get link speed/duplex [ 425.611114][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 425.709063][T19714] netlink: 'syz.1.3811': attribute type 17 has an invalid length. [ 425.722106][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 425.725255][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 425.746973][T19714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'. [ 425.844334][T19719] wg1 speed is unknown, defaulting to 1000 [ 425.851237][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 425.980421][T19735] syz.4.3816: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.030641][T19735] CPU: 1 UID: 0 PID: 19735 Comm: syz.4.3816 Not tainted syzkaller #0 PREEMPT(full) [ 426.030673][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.030687][T19735] Call Trace: [ 426.030696][T19735] [ 426.030706][T19735] dump_stack_lvl+0xe8/0x150 [ 426.030745][T19735] warn_alloc+0x249/0x340 [ 426.030773][T19735] ? stack_trace_save+0xa9/0x100 [ 426.030799][T19735] ? __pfx_warn_alloc+0x10/0x10 [ 426.030831][T19735] ? kasan_save_track+0x4f/0x80 [ 426.030853][T19735] ? kasan_save_track+0x3e/0x80 [ 426.030874][T19735] ? __kasan_kmalloc+0x93/0xb0 [ 426.030894][T19735] ? __kmalloc_cache_noprof+0x31c/0x660 [ 426.030916][T19735] ? xskq_create+0x56/0x170 [ 426.030947][T19735] ? xsk_setsockopt+0x54c/0x990 [ 426.030970][T19735] ? do_sock_setsockopt+0x17c/0x1b0 [ 426.030999][T19735] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 426.031027][T19735] ? do_syscall_64+0x14d/0xf80 [ 426.031051][T19735] __vmalloc_node_range_noprof+0x132/0x1730 [ 426.031112][T19735] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.031144][T19735] ? __kasan_kmalloc+0x93/0xb0 [ 426.031174][T19735] vmalloc_user_noprof+0xad/0xe0 [ 426.031197][T19735] ? xskq_create+0xbf/0x170 [ 426.031225][T19735] xskq_create+0xbf/0x170 [ 426.031258][T19735] xsk_init_queue+0x8a/0xe0 [ 426.031290][T19735] xsk_setsockopt+0x54c/0x990 [ 426.031322][T19735] ? __pfx_xsk_setsockopt+0x10/0x10 [ 426.031350][T19735] ? __pfx_aa_sk_perm+0x10/0x10 [ 426.031381][T19735] ? aa_sock_opt_perm+0xff/0x1a0 [ 426.031413][T19735] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 426.031447][T19735] ? __pfx_xsk_setsockopt+0x10/0x10 [ 426.031476][T19735] do_sock_setsockopt+0x17c/0x1b0 [ 426.031515][T19735] __x64_sys_setsockopt+0x13d/0x1b0 [ 426.031555][T19735] do_syscall_64+0x14d/0xf80 [ 426.031574][T19735] ? trace_irq_disable+0x3b/0x150 [ 426.031604][T19735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.031627][T19735] ? clear_bhb_loop+0x40/0x90 [ 426.031654][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.031676][T19735] RIP: 0033:0x7f73da19c799 [ 426.031697][T19735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.031716][T19735] RSP: 002b:00007f73daf80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 426.031739][T19735] RAX: ffffffffffffffda RBX: 00007f73da415fa0 RCX: 00007f73da19c799 [ 426.031755][T19735] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 426.031768][T19735] RBP: 00007f73da232c99 R08: 0000000000000004 R09: 0000000000000000 [ 426.031781][T19735] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.031793][T19735] R13: 00007f73da416038 R14: 00007f73da415fa0 R15: 00007ffcc19d38e8 [ 426.031830][T19735] [ 426.352405][T19735] Mem-Info: [ 426.355601][T19735] active_anon:5991 inactive_anon:0 isolated_anon:0 [ 426.355601][T19735] active_file:3464 inactive_file:40079 isolated_file:0 [ 426.355601][T19735] unevictable:768 dirty:119 writeback:0 [ 426.355601][T19735] slab_reclaimable:12747 slab_unreclaimable:118676 [ 426.355601][T19735] mapped:31470 shmem:1367 pagetables:3641 [ 426.355601][T19735] sec_pagetables:0 bounce:0 [ 426.355601][T19735] kernel_misc_reclaimable:0 [ 426.355601][T19735] free:1297992 free_pcp:8151 free_cma:0 [ 426.432756][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 426.492126][T19735] Node 0 active_anon:23684kB inactive_anon:0kB active_file:13856kB inactive_file:160120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129784kB dirty:476kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16932kB pagetables:14288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.532833][T19735] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.563497][T19735] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.593860][T19735] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 426.600022][T19735] Node 0 DMA32 free:1236316kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23584kB inactive_anon:0kB active_file:13856kB inactive_file:160120kB unevictable:1536kB writepending:476kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:32904kB local_pcp:12448kB free_cma:0kB [ 426.635858][T19735] lowmem_reserve[]: 0 0 0 0 0 [ 426.640665][T19735] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 426.675597][T19735] lowmem_reserve[]: 0 0 0 0 0 [ 426.680924][T19735] Node 1 Normal free:3940344kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 426.699535][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 426.727640][T19735] lowmem_reserve[]: 0 0 0 0 0 [ 426.750002][T19735] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.767419][T19760] netlink: 'syz.3.3819': attribute type 4 has an invalid length. [ 426.781879][T19760] netlink: 'syz.3.3819': attribute type 4 has an invalid length. [ 426.793137][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 426.833861][T19735] Node 0 DMA32: 7223*4kB (UME) 4984*8kB (UME) 1826*16kB (UME) 321*32kB (UME) 421*64kB (UM) 688*128kB (UM) 584*256kB (UME) 323*512kB (UME) 184*1024kB (UM) 55*2048kB (UM) 97*4096kB (M) = 1236508kB [ 426.861625][T19735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 426.874706][T19735] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 1*32kB (M) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3940344kB [ 426.891542][T19735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.905551][T19735] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 426.915875][T19735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.933431][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 426.944466][T19735] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.964591][T19735] 44905 total pagecache pages [ 426.969427][T19735] 0 pages in swap cache [ 427.009382][T19735] Free swap = 124996kB [ 427.018148][T19735] Total swap = 124996kB [ 427.026460][T19735] 2097051 pages RAM [ 427.037558][T19735] 0 pages HighMem/MovableOnly [ 427.045274][T19735] 427026 pages reserved [ 427.049557][T19735] 0 pages cma reserved [ 427.051718][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 427.111205][T19768] netlink: 'syz.3.3823': attribute type 2 has an invalid length. [ 427.137431][T19772] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 427.181146][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 427.291315][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 427.479953][T19794] netlink: 'syz.4.3828': attribute type 1 has an invalid length. [ 427.565278][T19794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.661475][T19798] bond1: (slave veth3): Enslaving as an active interface with a down link [ 427.673608][T19804] FAULT_INJECTION: forcing a failure. [ 427.673608][T19804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.731238][T19804] CPU: 1 UID: 0 PID: 19804 Comm: syz.1.3834 Not tainted syzkaller #0 PREEMPT(full) [ 427.731270][T19804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.731281][T19804] Call Trace: [ 427.731289][T19804] [ 427.731299][T19804] dump_stack_lvl+0xe8/0x150 [ 427.731333][T19804] should_fail_ex+0x412/0x560 [ 427.731365][T19804] _copy_from_user+0x2d/0xb0 [ 427.731395][T19804] ___sys_recvmsg+0x175/0x590 [ 427.731416][T19804] ? __lock_acquire+0x6b5/0x2cf0 [ 427.731459][T19804] ? __pfx____sys_recvmsg+0x10/0x10 [ 427.731524][T19804] do_recvmmsg+0x334/0x800 [ 427.731555][T19804] ? __pfx_do_recvmmsg+0x10/0x10 [ 427.731589][T19804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 427.731630][T19804] __x64_sys_recvmmsg+0x198/0x250 [ 427.731656][T19804] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 427.731692][T19804] do_syscall_64+0x14d/0xf80 [ 427.731711][T19804] ? trace_irq_disable+0x3b/0x150 [ 427.731740][T19804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.731760][T19804] ? clear_bhb_loop+0x40/0x90 [ 427.731786][T19804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.731806][T19804] RIP: 0033:0x7f6c6539c799 [ 427.731825][T19804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.731843][T19804] RSP: 002b:00007f6c66325028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 427.731867][T19804] RAX: ffffffffffffffda RBX: 00007f6c65615fa0 RCX: 00007f6c6539c799 [ 427.731881][T19804] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 427.731895][T19804] RBP: 00007f6c66325090 R08: 0000000000000000 R09: 0000000000000000 [ 427.731907][T19804] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 427.731920][T19804] R13: 00007f6c65616038 R14: 00007f6c65615fa0 R15: 00007fff47e4ff78 [ 427.731955][T19804] [ 428.105765][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3837'. [ 428.115186][T19821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3837'. [ 428.131567][T19821] gretap0: entered promiscuous mode [ 428.145534][T19821] gretap0: left promiscuous mode [ 430.451790][T10917] net_ratelimit: 24 callbacks suppressed [ 430.451816][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 430.571329][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 430.681234][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 430.791215][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 430.901486][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 431.011932][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 431.121239][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 431.231420][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 431.341301][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 431.451326][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 435.561490][ T12] net_ratelimit: 36 callbacks suppressed [ 435.561516][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 435.681292][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 435.791554][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 435.901225][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 436.011304][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 436.121819][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 436.231255][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 436.341208][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 436.452137][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 436.561251][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 440.216071][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.631135][T10239] net_ratelimit: 36 callbacks suppressed [ 440.631160][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 440.751144][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 440.861240][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 440.971341][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 441.081264][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 441.191360][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 441.301247][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 441.411805][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 441.521409][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 441.631227][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 442.291274][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 443.412915][ T1155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 445.731545][ T12] net_ratelimit: 36 callbacks suppressed [ 445.731570][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 445.851869][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 445.961819][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 446.071849][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.181539][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.292224][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.401447][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.511815][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.621341][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 446.731230][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 450.821800][T10918] net_ratelimit: 36 callbacks suppressed [ 450.821825][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 450.941236][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 451.052246][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 451.156537][T19836] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 451.181284][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 451.269766][T19836] bond2: entered promiscuous mode [ 451.278724][T19836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.373903][T19843] bond2: (slave bridge1): making interface the new active one [ 451.407728][T19843] bridge1: entered promiscuous mode [ 451.420889][T19843] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 451.449759][T19850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.471149][T19850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.485146][T19850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.516175][T19850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.606713][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 451.671243][T19859] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 451.691393][T19859] netlink: 'syz.4.3845': attribute type 2 has an invalid length. [ 451.744352][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 451.789670][T19864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3847'. [ 451.852188][T19867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.862452][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 451.929527][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.953097][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.987776][T19871] netlink: 'syz.2.3849': attribute type 16 has an invalid length. [ 452.006899][T19871] netlink: 'syz.2.3849': attribute type 17 has an invalid length. [ 452.052792][T19871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.077399][T19873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3850'. [ 452.092718][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 452.201330][T10917] bond9: (slave bridge4): failed to get link speed/duplex [ 452.610131][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3855'. [ 452.662125][T19903] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3855'. [ 452.706141][T19903] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 452.732822][T19905] syzkaller1: entered promiscuous mode [ 452.738554][T19905] syzkaller1: entered allmulticast mode [ 452.854719][T19913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3861'. [ 453.074944][T19930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.285142][T19943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3870'. [ 453.320100][T19945] x_tables: duplicate underflow at hook 4 [ 453.470180][T19953] netlink: 'syz.2.3873': attribute type 2 has an invalid length. [ 453.798555][T19967] tunl0: Caught tx_queue_len zero misconfig [ 453.885983][T19978] syzkaller0: entered promiscuous mode [ 453.891747][T19978] syzkaller0: entered allmulticast mode [ 453.992572][T19986] bridge0: port 3(bond0) entered blocking state [ 453.999752][T19986] bridge0: port 3(bond0) entered disabled state [ 454.008588][T19986] bond0: entered allmulticast mode [ 454.015680][T19986] bond_slave_0: entered allmulticast mode [ 454.035593][T19986] bond_slave_1: entered allmulticast mode [ 454.047024][T19986] bond0: entered promiscuous mode [ 454.055138][T19986] bond_slave_0: entered promiscuous mode [ 454.063299][T19986] bond_slave_1: entered promiscuous mode [ 454.315881][T20005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3888'. [ 454.985872][T20027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3895'. [ 455.081340][T20027] netlink: 'syz.3.3895': attribute type 4 has an invalid length. [ 455.147246][T20028] netlink: 'syz.3.3895': attribute type 4 has an invalid length. [ 455.320731][T20033] Cannot find del_set index 49151 as target [ 455.389629][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 455.406582][T20035] team0 (unregistering): Port device team_slave_0 removed [ 455.461658][T20044] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 455.462760][T20035] team0 (unregistering): Port device team_slave_1 removed [ 455.796214][T20066] netlink: 'syz.4.3907': attribute type 7 has an invalid length. [ 455.826980][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3907'. [ 455.893682][T20067] tunl0: entered promiscuous mode [ 455.907078][T20067] netlink: 'syz.4.3907': attribute type 3 has an invalid length. [ 455.923905][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.946508][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.975893][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.005622][ T1155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.063129][ T12] net_ratelimit: 28 callbacks suppressed [ 456.063152][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 456.261172][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 456.411085][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 456.495602][T20102] netlink: zone id is out of range [ 456.505147][T20102] netlink: zone id is out of range [ 456.510333][T20102] netlink: zone id is out of range [ 456.522612][T20105] validate_nla: 1 callbacks suppressed [ 456.522631][T20105] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 456.537793][T20102] netlink: zone id is out of range [ 456.544301][T20105] netlink: 'syz.1.3918': attribute type 3 has an invalid length. [ 456.552495][T20102] netlink: zone id is out of range [ 456.559095][T20102] netlink: zone id is out of range [ 456.564690][T20102] netlink: zone id is out of range [ 456.658408][T20119] xt_hashlimit: size too large, truncated to 1048576 [ 456.919965][T20138] __nla_validate_parse: 7 callbacks suppressed [ 456.919988][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3927'. [ 456.932516][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 456.956695][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3929'. [ 456.969743][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3929'. [ 456.980880][T20140] netlink: 'syz.2.3927': attribute type 3 has an invalid length. [ 457.041421][T20135] wg1 speed is unknown, defaulting to 1000 [ 457.889756][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 457.916980][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3932'. [ 457.934419][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 457.949842][T20158] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 457.955077][T20155] lo: left promiscuous mode [ 457.963430][T20155] tunl0: left promiscuous mode [ 457.974913][T20155] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 457.998860][T20155] bond2: left promiscuous mode [ 458.004149][T20155] bridge1: left promiscuous mode [ 458.104956][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.161041][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.181113][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.221162][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.262164][T20174] netlink: 1048 bytes leftover after parsing attributes in process `syz.2.3942'. [ 458.371988][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 458.466040][T20190] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.3945'. [ 458.944667][T20229] FAULT_INJECTION: forcing a failure. [ 458.944667][T20229] name failslab, interval 1, probability 0, space 0, times 0 [ 458.998617][T20229] CPU: 0 UID: 0 PID: 20229 Comm: syz.3.3959 Not tainted syzkaller #0 PREEMPT(full) [ 458.998647][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.998659][T20229] Call Trace: [ 458.998668][T20229] [ 458.998677][T20229] dump_stack_lvl+0xe8/0x150 [ 458.998713][T20229] should_fail_ex+0x412/0x560 [ 458.998746][T20229] should_failslab+0xa8/0x100 [ 458.998771][T20229] ? skb_clone+0x212/0x3a0 [ 458.998791][T20229] kmem_cache_alloc_noprof+0x87/0x650 [ 458.998813][T20229] ? sk_filter_trim_cap+0x1e1/0xd90 [ 458.998842][T20229] skb_clone+0x212/0x3a0 [ 458.998867][T20229] __netlink_deliver_tap+0x404/0x850 [ 458.998911][T20229] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.998959][T20229] netlink_deliver_tap+0x19c/0x1b0 [ 458.999012][T20229] netlink_dump+0x926/0xe80 [ 458.999051][T20229] ? __pfx_netlink_dump+0x10/0x10 [ 458.999104][T20229] netlink_recvmsg+0x690/0xa50 [ 458.999131][T20229] ? __lock_acquire+0x6b5/0x2cf0 [ 458.999179][T20229] ? __pfx_netlink_recvmsg+0x10/0x10 [ 458.999231][T20229] ? __pfx_netlink_recvmsg+0x10/0x10 [ 458.999268][T20229] sock_recvmsg_nosec+0x10c/0x140 [ 458.999298][T20229] ____sys_recvmsg+0x3e3/0x4a0 [ 458.999329][T20229] ? __pfx_____sys_recvmsg+0x10/0x10 [ 458.999385][T20229] ? import_iovec+0x73/0xa0 [ 458.999419][T20229] ___sys_recvmsg+0x215/0x590 [ 458.999438][T20229] ? __lock_acquire+0x6b5/0x2cf0 [ 458.999468][T20229] ? __pfx____sys_recvmsg+0x10/0x10 [ 458.999543][T20229] do_recvmmsg+0x334/0x800 [ 458.999575][T20229] ? __pfx_do_recvmmsg+0x10/0x10 [ 458.999617][T20229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.999657][T20229] __x64_sys_recvmmsg+0x198/0x250 [ 458.999693][T20229] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 458.999736][T20229] do_syscall_64+0x14d/0xf80 [ 458.999755][T20229] ? trace_irq_disable+0x3b/0x150 [ 458.999783][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.999803][T20229] ? clear_bhb_loop+0x40/0x90 [ 458.999828][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.999849][T20229] RIP: 0033:0x7f9d74b9c799 [ 458.999869][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.999887][T20229] RSP: 002b:00007f9d759da028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 458.999910][T20229] RAX: ffffffffffffffda RBX: 00007f9d74e15fa0 RCX: 00007f9d74b9c799 [ 458.999925][T20229] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 458.999938][T20229] RBP: 00007f9d759da090 R08: 0000000000000000 R09: 0000000000000000 [ 458.999949][T20229] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 458.999961][T20229] R13: 00007f9d74e16038 R14: 00007f9d74e15fa0 R15: 00007ffd06d0fa08 [ 458.999994][T20229] [ 459.745640][T20263] syzkaller0: entered promiscuous mode [ 459.758106][T20263] syzkaller0: entered allmulticast mode [ 459.791408][T20268] x_tables: duplicate underflow at hook 1 [ 459.975917][T20271] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 460.171728][T20288] FAULT_INJECTION: forcing a failure. [ 460.171728][T20288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.201146][T20288] CPU: 1 UID: 0 PID: 20288 Comm: syz.4.3976 Not tainted syzkaller #0 PREEMPT(full) [ 460.201177][T20288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.201189][T20288] Call Trace: [ 460.201199][T20288] [ 460.201208][T20288] dump_stack_lvl+0xe8/0x150 [ 460.201243][T20288] should_fail_ex+0x412/0x560 [ 460.201285][T20288] _copy_from_user+0x2d/0xb0 [ 460.201318][T20288] ___sys_recvmsg+0x175/0x590 [ 460.201339][T20288] ? __lock_acquire+0x6b5/0x2cf0 [ 460.201371][T20288] ? __pfx____sys_recvmsg+0x10/0x10 [ 460.201437][T20288] do_recvmmsg+0x334/0x800 [ 460.201471][T20288] ? __pfx_do_recvmmsg+0x10/0x10 [ 460.201506][T20288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.201548][T20288] __x64_sys_recvmmsg+0x198/0x250 [ 460.201574][T20288] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 460.201611][T20288] do_syscall_64+0x14d/0xf80 [ 460.201631][T20288] ? trace_irq_disable+0x3b/0x150 [ 460.201660][T20288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.201681][T20288] ? clear_bhb_loop+0x40/0x90 [ 460.201706][T20288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.201726][T20288] RIP: 0033:0x7f73da19c799 [ 460.201747][T20288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.201765][T20288] RSP: 002b:00007f73daf80028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.201788][T20288] RAX: ffffffffffffffda RBX: 00007f73da415fa0 RCX: 00007f73da19c799 [ 460.201802][T20288] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 460.201815][T20288] RBP: 00007f73daf80090 R08: 0000000000000000 R09: 0000000000000000 [ 460.201827][T20288] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 460.201840][T20288] R13: 00007f73da416038 R14: 00007f73da415fa0 R15: 00007ffcc19d38e8 [ 460.201875][T20288] [ 460.421525][T20291] x_tables: duplicate underflow at hook 3 [ 460.505506][T20298] wg1 speed is unknown, defaulting to 1000 [ 460.536827][T20293] bridge_slave_0: invalid flags given to default FDB implementation [ 460.752762][T20304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 461.161204][ T12] net_ratelimit: 38 callbacks suppressed [ 461.161226][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 461.281126][ T12] bond9: (slave bridge4): failed to get link speed/duplex [ 461.282578][T20336] openvswitch: netlink: Message has 4 unknown bytes. [ 461.323880][T20336] x9: renamed from bridge_slave_0 [ 461.391186][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 461.501266][T10239] bond9: (slave bridge4): failed to get link speed/duplex [ 461.611148][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 461.744539][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 461.862880][T10224] bond9: (slave bridge4): failed to get link speed/duplex [ 461.971618][T20371] __nla_validate_parse: 11 callbacks suppressed [ 461.971641][T20371] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3999'. [ 461.992604][ T1165] bond9: (slave bridge4): failed to get link speed/duplex [ 462.055607][T20377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4000'. [ 462.111284][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 462.394964][T20396] macvlan0: entered promiscuous mode [ 462.685575][T20416] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4015'. [ 462.724069][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 462.754616][T20417] syzkaller1: entered promiscuous mode [ 462.760108][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 462.760142][T20417] syzkaller1: entered allmulticast mode [ 462.806290][T20422] netlink: 'syz.4.4016': attribute type 83 has an invalid length. [ 462.835861][T20422] syzkaller1: entered promiscuous mode [ 462.858198][T20422] syzkaller1: entered allmulticast mode [ 463.248005][T20441] syzkaller1: entered promiscuous mode [ 463.268759][T20441] syzkaller1: entered allmulticast mode [ 463.369837][T20453] netlink: 'syz.4.4026': attribute type 3 has an invalid length. [ 463.382595][T20453] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4026'. [ 463.544670][T20461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4028'. [ 463.570880][T20463] delete_channel: no stack [ 463.579644][T20463] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 463.612861][T20463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4029'. [ 463.693677][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 463.695759][T20474] ipt_REJECT: TCP_RESET invalid for non-tcp [ 463.844902][T20486] netlink: 'syz.3.4036': attribute type 5 has an invalid length. [ 463.858942][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4036'. [ 464.057351][T20499] netlink: 'syz.4.4041': attribute type 1 has an invalid length. [ 464.212311][T20507] xt_connbytes: Forcing CT accounting to be enabled [ 464.291911][T10239] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.311261][T10239] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.321441][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.416944][T20517] ip6gre2: entered allmulticast mode [ 464.454862][ T6828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.731756][T20540] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 464.751220][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.240741][T20568] netlink: 'syz.0.4060': attribute type 12 has an invalid length. [ 465.677789][T20588] wg1 speed is unknown, defaulting to 1000 [ 465.899237][T20612] tipc: Started in network mode [ 465.915342][T20612] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 465.942468][T20612] tipc: Enabled bearer , priority 2 [ 467.569868][ T7369] tipc: Node number set to 10463914 [ 467.573909][T20650] __nla_validate_parse: 9 callbacks suppressed [ 467.573928][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4070'. [ 467.858101][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4073'. [ 467.891285][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 468.023339][T10918] net_ratelimit: 30 callbacks suppressed [ 468.023363][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 468.081526][T20665] netlink: 'syz.1.4072': attribute type 4 has an invalid length. [ 468.202122][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 468.286863][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4079'. [ 468.291244][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.304719][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'. [ 468.318697][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'. [ 468.401515][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 468.444838][T20694] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4083'. [ 468.462020][T20694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.532075][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 468.621987][T20706] tipc: Started in network mode [ 468.626944][T20706] tipc: Node identity 423ac6c22036, cluster identity 4711 [ 468.638220][T20706] tipc: Enabled bearer , priority 0 [ 468.661286][T20712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4090'. [ 468.747626][T20724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.754933][T20724] IPv6: NLM_F_CREATE should be set when creating new route [ 468.762353][T20724] IPv6: NLM_F_CREATE should be set when creating new route [ 468.767651][T20706] syzkaller0: entered promiscuous mode [ 468.769779][T20724] IPv6: NLM_F_CREATE should be set when creating new route [ 468.786400][T20706] syzkaller0: entered allmulticast mode [ 468.793597][T20706] tipc: Resetting bearer [ 468.835210][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 468.860229][T20705] tipc: Resetting bearer [ 468.928023][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4092'. [ 470.291643][T20606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.558800][T20705] tipc: Disabling bearer [ 470.571523][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 470.584732][T20745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.620699][ T7369] tipc: Node number set to 1645004482 [ 470.712268][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 470.787113][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 470.815363][T20757] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4103'. [ 471.153003][T20789] netlink: 'syz.4.4111': attribute type 4 has an invalid length. [ 471.288579][T20799] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 471.297100][T20799] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 471.375983][T20809] netlink: 'syz.4.4115': attribute type 21 has an invalid length. [ 471.384670][T20809] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.530723][T20817] block nbd0: not configured, cannot reconfigure [ 472.139450][ T7367] IPVS: starting estimator thread 0... [ 472.231120][T20849] IPVS: using max 27 ests per chain, 64800 per kthread [ 472.368396][T20863] lo: entered allmulticast mode [ 472.378402][T20863] lo: left allmulticast mode [ 472.602228][T20881] pimreg3: entered allmulticast mode [ 472.683502][ T29] audit: type=1107 audit(1773812295.865:3): pid=20883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';J#L\Qy׶z6N!9o|˶YUЉBߠ2-y,™ˠIw[%cNqoZ74i>7Y0' [ 472.846842][T20894] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 472.887974][T20898] __nla_validate_parse: 14 callbacks suppressed [ 472.887998][T20898] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4144'. [ 472.939982][T20903] delete_channel: no stack [ 473.050562][T20911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4148'. [ 473.063822][T20914] sctp: [Deprecated]: syz.3.4147 (pid 20914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.063822][T20914] Use struct sctp_sack_info instead [ 473.088237][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4148'. [ 473.122936][ T1155] net_ratelimit: 26 callbacks suppressed [ 473.122961][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 473.306745][T20923] : entered promiscuous mode [ 473.345142][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 473.461181][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 473.572098][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 473.654012][T20948] ip6tnl0: Caught tx_queue_len zero misconfig [ 473.735246][T20951] x_tables: duplicate underflow at hook 2 [ 473.751400][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 473.867029][T20968] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 473.892021][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 474.022817][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 474.062450][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 474.112792][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 474.129453][T20991] s5: renamed from vlan1 (while UP) [ 474.168711][T20994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.188314][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 474.209235][T20994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.245796][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 474.258602][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 474.344049][T20604] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.344166][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 474.364001][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 474.432831][T20610] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.452420][T20610] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.468865][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4178'. [ 474.550125][T20610] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.208834][T21055] syzkaller0: entered promiscuous mode [ 475.215134][T21055] syzkaller0: entered allmulticast mode [ 475.412026][T20606] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 476.696541][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.734797][T21028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.084682][T21074] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.171804][T21080] net_ratelimit: 22 callbacks suppressed [ 478.171827][T21080] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 478.294115][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 478.356632][T21084] __nla_validate_parse: 2 callbacks suppressed [ 478.356655][T21084] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4200'. [ 478.364151][T21087] syzkaller0: entered promiscuous mode [ 478.374703][T21084] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4200'. [ 478.407608][T21091] netlink: 'syz.2.4202': attribute type 13 has an invalid length. [ 478.422415][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 478.453986][T21087] 0: reclassify loop, rule prio 0, protocol 800 [ 478.463887][T21093] netlink: 'syz.3.4203': attribute type 1 has an invalid length. [ 478.472060][T21091] macvtap0: refused to change device tx_queue_len [ 478.509436][T21093] bond3: entered promiscuous mode [ 478.551714][T21093] bond3: entered allmulticast mode [ 478.580505][T21104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.589529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.602061][T21093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.609448][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 478.650510][T21107] Unknown options in mask b7f2 [ 478.680824][T21108] Unknown options in mask b7f2 [ 478.696438][T21107] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4207'. [ 478.715949][T21107] netlink: 'syz.4.4207': attribute type 1 has an invalid length. [ 478.750324][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 478.803106][T21100] IPv6: sit1: Disabled Multicast RS [ 478.922609][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 478.944674][T21119] netlink: 'syz.1.4209': attribute type 1 has an invalid length. [ 479.044114][T21124] macvlan2: entered promiscuous mode [ 479.050376][T21124] macvlan2: entered allmulticast mode [ 479.057394][T21124] bond6: entered promiscuous mode [ 479.063847][T21124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.075708][T21124] bond6: left promiscuous mode [ 479.111700][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 479.167935][T21138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4214'. [ 479.534131][T21161] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4220'. [ 479.705837][T21176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4224'. [ 480.155982][T21187] netlink: 'syz.3.4230': attribute type 11 has an invalid length. [ 480.257753][T21191] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.4231'. [ 480.296148][T21191] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.4231'. [ 480.715607][T21215] netlink: 'syz.1.4238': attribute type 12 has an invalid length. [ 480.936493][T21221] bond7 (unregistering): Released all slaves [ 480.970630][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 481.021256][T21224] netlink: 'syz.3.4240': attribute type 1 has an invalid length. [ 481.027497][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 481.425923][T21253] netlink: 'syz.2.4249': attribute type 13 has an invalid length. [ 481.437890][T20606] bond21 (unregistering): (slave ip6gretap1): Releasing active interface [ 481.450212][T20606] ip6gretap1 (unregistering): left promiscuous mode [ 481.459794][T20606] ip6gretap1 (unregistering): left allmulticast mode [ 481.653628][T20606] bond16 (unregistering): (slave gretap2): Releasing active interface [ 481.761842][T20606] bond1 (unregistering): (slave geneve2): Releasing active interface [ 482.008590][T20606] bond20 (unregistering): (slave bridge4): Removing an active aggregator [ 482.020615][T20606] bond20 (unregistering): (slave bridge4): Releasing backup interface [ 482.030440][T20606] bond20 (unregistering): (slave bridge4): the permanent HWaddr of slave - 16:ee:6c:04:4a:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 482.050531][T20606] bridge4 (unregistering): left promiscuous mode [ 482.063918][T20606] bridge4 (unregistering): left allmulticast mode [ 482.118702][T20606] bond20 (unregistering): (slave bridge5): Releasing backup interface [ 482.127892][T20606] bridge5 (unregistering): left promiscuous mode [ 482.134996][T20606] bridge5 (unregistering): left allmulticast mode [ 482.263991][T20606] bond23 (unregistering): (slave bridge6): Releasing backup interface [ 482.272697][T20606] bridge6 (unregistering): left promiscuous mode [ 482.279123][T20606] bridge6 (unregistering): left allmulticast mode [ 482.627831][T20606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.638593][T20606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.648310][T20606] bond0 (unregistering): Released all slaves [ 482.662893][T20606] bond1 (unregistering): Released all slaves [ 482.677003][T20606] bond2 (unregistering): Released all slaves [ 482.690763][T20606] bond3 (unregistering): (slave veth3): Releasing active interface [ 482.706547][T20606] bond3 (unregistering): Released all slaves [ 482.720337][T20606] bond4 (unregistering): (slave lo): Releasing backup interface [ 482.729205][T20606] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 482.741307][T20606] bond4 (unregistering): Released all slaves [ 482.754777][T20606] bond5 (unregistering): Released all slaves [ 482.775100][T20606] bond6 (unregistering): Released all slaves [ 482.792873][T20606] bond7 (unregistering): Released all slaves [ 482.807278][T20606] bond8 (unregistering): Released all slaves [ 482.820509][T20606] bond9 (unregistering): Released all slaves [ 482.841833][T20606] bond10 (unregistering): Released all slaves [ 482.855735][T20606] bond11 (unregistering): Released all slaves [ 482.874823][T20606] bond12 (unregistering): Released all slaves [ 482.887964][T20606] bond13 (unregistering): Released all slaves [ 482.908135][T20606] bond14 (unregistering): Released all slaves [ 482.923874][T20606] bond15 (unregistering): Released all slaves [ 482.938275][T20606] bond16 (unregistering): Released all slaves [ 482.955591][T20606] bond17 (unregistering): Released all slaves [ 482.979254][T20606] bond18 (unregistering): Released all slaves [ 482.993111][T20606] bond19 (unregistering): Released all slaves [ 483.007531][T20606] bond20 (unregistering): Released all slaves [ 483.023930][T20606] bond21 (unregistering): Released all slaves [ 483.047203][T20606] bond22 (unregistering): Released all slaves [ 483.060393][T20606] bond23 (unregistering): Released all slaves [ 483.074022][T20606] bond24 (unregistering): Released all slaves [ 483.087128][T20606] bond25 (unregistering): Released all slaves [ 483.105989][T20606] bond26 (unregistering): Released all slaves [ 483.128416][T20606] bond27 (unregistering): Released all slaves [ 483.281389][T10918] net_ratelimit: 18 callbacks suppressed [ 483.281413][T10918] bond9: (slave bridge4): failed to get link speed/duplex [ 483.437862][T21280] __nla_validate_parse: 1 callbacks suppressed [ 483.437882][T21280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4256'. [ 483.474346][T20606] : left promiscuous mode [ 483.651205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.739177][T20606] tipc: Left network mode [ 483.742814][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 484.018574][T21291] udevd[21291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 484.088558][T21291] udevd[21291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 484.114084][T21315] netlink: 'syz.1.4262': attribute type 11 has an invalid length. [ 484.122295][T21315] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4262'. [ 484.135058][T21289] syzkaller0: entered promiscuous mode [ 484.149875][T21289] syzkaller0: entered allmulticast mode [ 484.305775][T21318] netlink: 'syz.4.4265': attribute type 1 has an invalid length. [ 484.432832][T21324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 484.696345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.574184][T20609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.731111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.190161][T21318] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 486.191259][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 486.279237][T21325] ip6gre1: entered allmulticast mode [ 486.431544][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 486.561219][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 486.652431][T20609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.676319][T20609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.791230][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 486.817340][T21358] nbd: couldn't find a device at index 4608 [ 486.840265][T21367] FAULT_INJECTION: forcing a failure. [ 486.840265][T21367] name failslab, interval 1, probability 0, space 0, times 0 [ 486.861868][T21367] CPU: 0 UID: 0 PID: 21367 Comm: syz.2.4278 Not tainted syzkaller #0 PREEMPT(full) [ 486.861898][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.861910][T21367] Call Trace: [ 486.861918][T21367] [ 486.861927][T21367] dump_stack_lvl+0xe8/0x150 [ 486.861963][T21367] should_fail_ex+0x412/0x560 [ 486.862007][T21367] should_failslab+0xa8/0x100 [ 486.862033][T21367] ? skb_clone+0x212/0x3a0 [ 486.862055][T21367] kmem_cache_alloc_noprof+0x87/0x650 [ 486.862076][T21367] ? sk_filter_trim_cap+0x1e1/0xd90 [ 486.862108][T21367] skb_clone+0x212/0x3a0 [ 486.862133][T21367] __netlink_deliver_tap+0x404/0x850 [ 486.862175][T21367] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.862203][T21367] netlink_deliver_tap+0x19c/0x1b0 [ 486.862230][T21367] netlink_dump+0x926/0xe80 [ 486.862269][T21367] ? __pfx_netlink_dump+0x10/0x10 [ 486.862326][T21367] netlink_recvmsg+0x690/0xa50 [ 486.862352][T21367] ? __lock_acquire+0x6b5/0x2cf0 [ 486.862387][T21367] ? __pfx_netlink_recvmsg+0x10/0x10 [ 486.862430][T21367] ? __pfx_netlink_recvmsg+0x10/0x10 [ 486.862457][T21367] sock_recvmsg_nosec+0x10c/0x140 [ 486.862486][T21367] ____sys_recvmsg+0x3e3/0x4a0 [ 486.862517][T21367] ? __pfx_____sys_recvmsg+0x10/0x10 [ 486.862553][T21367] ? import_iovec+0x73/0xa0 [ 486.862585][T21367] ___sys_recvmsg+0x215/0x590 [ 486.862601][T21367] ? __lock_acquire+0x6b5/0x2cf0 [ 486.862631][T21367] ? __pfx____sys_recvmsg+0x10/0x10 [ 486.862697][T21367] do_recvmmsg+0x334/0x800 [ 486.862727][T21367] ? __schedule+0x15f3/0x52d0 [ 486.862754][T21367] ? __pfx_do_recvmmsg+0x10/0x10 [ 486.862789][T21367] ? ktime_get+0x1d2/0x200 [ 486.862829][T21367] __x64_sys_recvmmsg+0x198/0x250 [ 486.862855][T21367] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 486.862889][T21367] do_syscall_64+0x14d/0xf80 [ 486.862909][T21367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.862929][T21367] ? clear_bhb_loop+0x40/0x90 [ 486.862954][T21367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.862974][T21367] RIP: 0033:0x7f6bb8f9c799 [ 486.863003][T21367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.863021][T21367] RSP: 002b:00007f6bb9e6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 486.863044][T21367] RAX: ffffffffffffffda RBX: 00007f6bb9215fa0 RCX: 00007f6bb8f9c799 [ 486.863058][T21367] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 486.863070][T21367] RBP: 00007f6bb9e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 486.863082][T21367] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 486.863095][T21367] R13: 00007f6bb9216038 R14: 00007f6bb9215fa0 R15: 00007ffc52345d48 [ 486.863130][T21367] [ 487.204200][T21373] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4279'. [ 487.214617][T20606] hsr_slave_0: left promiscuous mode [ 487.230029][T20606] hsr_slave_1: left promiscuous mode [ 487.239710][T20606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.255031][T20606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.307299][T20606] pimreg (unregistering): left allmulticast mode [ 487.499577][T20606] team0 (unregistering): Port device team_slave_1 removed [ 487.524054][T20606] team0 (unregistering): Port device team_slave_0 removed [ 487.765948][T21385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4283'. [ 487.998643][T21404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4287'. [ 488.138710][T21410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4287'. [ 488.286664][T21420] netlink: 'syz.0.4292': attribute type 1 has an invalid length. [ 488.329161][T21420] netlink: 'syz.0.4292': attribute type 2 has an invalid length. [ 488.362607][T21421] wg1 speed is unknown, defaulting to 1000 [ 488.377511][T20606] IPVS: stop unused estimator thread 0... [ 488.591707][T20609] net_ratelimit: 5 callbacks suppressed [ 488.591768][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 488.723336][ T1155] bond9: (slave bridge4): failed to get link speed/duplex [ 488.842758][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 488.947694][T21435] netlink: 'syz.3.4295': attribute type 11 has an invalid length. [ 489.030374][T21439] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 489.044964][T21441] sctp: [Deprecated]: syz.3.4295 (pid 21441) Use of int in maxseg socket option. [ 489.044964][T21441] Use struct sctp_assoc_value instead [ 489.082021][T21444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.331473][T21446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4299'. [ 489.342670][T21450] tipc: Enabled bearer , priority 2 [ 489.351489][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 489.471087][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 489.575632][T21467] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 489.586965][T21476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4305'. [ 489.596854][ T7369] IPVS: starting estimator thread 0... [ 489.624752][T21471] netlink: 'syz.1.4303': attribute type 16 has an invalid length. [ 489.642499][T21471] netlink: 'syz.1.4303': attribute type 17 has an invalid length. [ 489.647193][T21467] syzkaller0: entered promiscuous mode [ 489.665462][T21467] syzkaller0: entered allmulticast mode [ 489.689897][T21471] lo: left promiscuous mode [ 489.702188][T21471] tunl0: left promiscuous mode [ 489.708959][T21471] gre0: left promiscuous mode [ 489.715856][T21481] IPVS: using max 30 ests per chain, 72000 per kthread [ 489.737849][T21471] gretap0: left promiscuous mode [ 489.747862][T21471] erspan0: left promiscuous mode [ 489.756249][T21471] ip_vti0: left promiscuous mode [ 489.775641][T21491] sctp: [Deprecated]: syz.0.4309 (pid 21491) Use of int in maxseg socket option. [ 489.775641][T21491] Use struct sctp_assoc_value instead [ 489.790566][T21471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.802040][T21471] bridge0: port 3(bond0) entered blocking state [ 489.808495][T21471] bridge0: port 3(bond0) entered forwarding state [ 489.819245][T21471] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.833629][T21471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.851874][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 489.919197][T21496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.136692][T21505] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 490.207990][T21504] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4312'. [ 490.229943][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4312'. [ 490.260626][T21510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'. [ 490.557597][T21527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4321'. [ 491.035904][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4333'. [ 491.055185][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4333'. [ 491.232915][T21561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4336'. [ 491.247539][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 491.433433][T21568] bond4 (unregistering): Released all slaves [ 491.981496][ T7369] IPVS: starting estimator thread 0... [ 492.006037][T21606] netlink: 'syz.4.4352': attribute type 3 has an invalid length. [ 492.021169][T21606] netlink: 'syz.4.4352': attribute type 3 has an invalid length. [ 492.071324][T21607] IPVS: using max 27 ests per chain, 64800 per kthread [ 492.099260][T21613] 8021q: VLANs not supported on lo [ 492.221639][ T5844] Bluetooth: hci1: command 0x0405 tx timeout [ 492.275460][T21620] ip6gre1: entered allmulticast mode [ 492.498463][T21637] netlink: 'syz.2.4362': attribute type 9 has an invalid length. [ 492.583965][T21636] [ 492.586361][T21636] ====================================================== [ 492.593417][T21636] WARNING: possible circular locking dependency detected [ 492.600460][T21636] syzkaller #0 Not tainted [ 492.604884][T21636] ------------------------------------------------------ [ 492.611911][T21636] syz.4.4363/21636 is trying to acquire lock: [ 492.618060][T21636] ffff8880269a4858 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 492.627465][T21636] [ 492.627465][T21636] but task is already holding lock: [ 492.635175][T21636] ffff8880269a4318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 492.645386][T21636] [ 492.645386][T21636] which lock already depends on the new lock. [ 492.645386][T21636] [ 492.655812][T21636] [ 492.655812][T21636] the existing dependency chain (in reverse order) is: [ 492.664847][T21636] [ 492.664847][T21636] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 492.673484][T21636] blk_alloc_queue+0x546/0x680 [ 492.678805][T21636] __blk_mq_alloc_disk+0x197/0x390 [ 492.684548][T21636] nbd_dev_add+0x499/0xb50 [ 492.689559][T21636] nbd_init+0x168/0x1f0 [ 492.694257][T21636] do_one_initcall+0x250/0x8d0 [ 492.699564][T21636] do_initcall_level+0x104/0x190 [ 492.705121][T21636] do_initcalls+0x59/0xa0 [ 492.710178][T21636] kernel_init_freeable+0x2a6/0x3e0 [ 492.715903][T21636] kernel_init+0x1d/0x1d0 [ 492.720793][T21636] ret_from_fork+0x51e/0xb90 [ 492.726030][T21636] ret_from_fork_asm+0x1a/0x30 [ 492.731362][T21636] [ 492.731362][T21636] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 492.738642][T21636] fs_reclaim_acquire+0x71/0x100 [ 492.744206][T21636] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 492.750539][T21636] __alloc_skb+0x1d0/0x7d0 [ 492.755486][T21636] tcp_stream_alloc_skb+0x3f/0x580 [ 492.761125][T21636] tcp_sendmsg_locked+0x1375/0x5490 [ 492.766857][T21636] tcp_sendmsg+0x2f/0x50 [ 492.771633][T21636] sock_write_iter+0x406/0x4f0 [ 492.776955][T21636] vfs_write+0x61d/0xb90 [ 492.781752][T21636] ksys_write+0x150/0x270 [ 492.786634][T21636] do_syscall_64+0x14d/0xf80 [ 492.791835][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.798267][T21636] [ 492.798267][T21636] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 492.806009][T21636] lock_sock_nested+0x48/0x100 [ 492.811319][T21636] inet_shutdown+0x6a/0x390 [ 492.816349][T21636] nbd_mark_nsock_dead+0x2e9/0x560 [ 492.821983][T21636] recv_work+0x1c7f/0x1d90 [ 492.827009][T21636] process_scheduled_works+0xb02/0x1830 [ 492.833126][T21636] worker_thread+0xa50/0xfc0 [ 492.838257][T21636] kthread+0x388/0x470 [ 492.842845][T21636] ret_from_fork+0x51e/0xb90 [ 492.847983][T21636] ret_from_fork_asm+0x1a/0x30 [ 492.853361][T21636] [ 492.853361][T21636] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 492.861128][T21636] __mutex_lock+0x19f/0x1300 [ 492.866244][T21636] nbd_queue_rq+0x37b/0x1100 [ 492.871434][T21636] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 492.877561][T21636] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 492.884512][T21636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 492.891095][T21636] blk_mq_run_hw_queue+0x348/0x4f0 [ 492.896755][T21636] blk_mq_dispatch_list+0xd16/0xe10 [ 492.902509][T21636] blk_mq_flush_plug_list+0x48d/0x570 [ 492.908445][T21636] __blk_flush_plug+0x3ed/0x4d0 [ 492.913845][T21636] __submit_bio+0x28d/0x580 [ 492.918889][T21636] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 492.925076][T21636] block_read_full_folio+0x599/0x830 [ 492.930894][T21636] filemap_read_folio+0x137/0x3b0 [ 492.936449][T21636] do_read_cache_folio+0x358/0x590 [ 492.942099][T21636] read_part_sector+0xb6/0x2b0 [ 492.947387][T21636] adfspart_check_ICS+0xa5/0xa40 [ 492.952846][T21636] bdev_disk_changed+0x7ba/0x1550 [ 492.958393][T21636] blkdev_get_whole+0x380/0x510 [ 492.963774][T21636] bdev_open+0x31e/0xd30 [ 492.968559][T21636] blkdev_open+0x470/0x610 [ 492.973523][T21636] do_dentry_open+0x785/0x14e0 [ 492.978873][T21636] vfs_open+0x3b/0x340 [ 492.983581][T21636] path_openat+0x2e08/0x3860 [ 492.988718][T21636] do_file_open+0x23e/0x4a0 [ 492.993752][T21636] do_sys_openat2+0x113/0x200 [ 492.998969][T21636] __x64_sys_openat+0x138/0x170 [ 493.004522][T21636] do_syscall_64+0x14d/0xf80 [ 493.009721][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.016174][T21636] [ 493.016174][T21636] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 493.023402][T21636] __mutex_lock+0x19f/0x1300 [ 493.028534][T21636] nbd_queue_rq+0xc6/0x1100 [ 493.033566][T21636] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 493.039633][T21636] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 493.046493][T21636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 493.052995][T21636] blk_mq_run_hw_queue+0x348/0x4f0 [ 493.058670][T21636] blk_mq_dispatch_list+0xd16/0xe10 [ 493.064389][T21636] blk_mq_flush_plug_list+0x48d/0x570 [ 493.070287][T21636] __blk_flush_plug+0x3ed/0x4d0 [ 493.075682][T21636] __submit_bio+0x28d/0x580 [ 493.080707][T21636] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 493.086859][T21636] block_read_full_folio+0x599/0x830 [ 493.092673][T21636] filemap_read_folio+0x137/0x3b0 [ 493.098234][T21636] do_read_cache_folio+0x358/0x590 [ 493.103868][T21636] read_part_sector+0xb6/0x2b0 [ 493.109158][T21636] adfspart_check_ICS+0xa5/0xa40 [ 493.114615][T21636] bdev_disk_changed+0x7ba/0x1550 [ 493.120160][T21636] blkdev_get_whole+0x380/0x510 [ 493.125587][T21636] bdev_open+0x31e/0xd30 [ 493.130453][T21636] blkdev_open+0x470/0x610 [ 493.135421][T21636] do_dentry_open+0x785/0x14e0 [ 493.140732][T21636] vfs_open+0x3b/0x340 [ 493.145338][T21636] path_openat+0x2e08/0x3860 [ 493.150456][T21636] do_file_open+0x23e/0x4a0 [ 493.155507][T21636] do_sys_openat2+0x113/0x200 [ 493.160713][T21636] __x64_sys_openat+0x138/0x170 [ 493.166096][T21636] do_syscall_64+0x14d/0xf80 [ 493.171210][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.177744][T21636] [ 493.177744][T21636] -> #1 (set->srcu){.+.+}-{0:0}: [ 493.185058][T21636] __synchronize_srcu+0xca/0x3e0 [ 493.190527][T21636] elevator_switch+0x1e8/0x7a0 [ 493.195838][T21636] elevator_change+0x2cc/0x450 [ 493.201212][T21636] elevator_set_default+0x36c/0x430 [ 493.206947][T21636] blk_register_queue+0x366/0x430 [ 493.212494][T21636] __add_disk+0x677/0xd50 [ 493.217349][T21636] add_disk_fwnode+0xfb/0x480 [ 493.222590][T21636] nbd_dev_add+0x72c/0xb50 [ 493.227570][T21636] nbd_init+0x168/0x1f0 [ 493.232357][T21636] do_one_initcall+0x250/0x8d0 [ 493.237676][T21636] do_initcall_level+0x104/0x190 [ 493.243250][T21636] do_initcalls+0x59/0xa0 [ 493.248109][T21636] kernel_init_freeable+0x2a6/0x3e0 [ 493.253836][T21636] kernel_init+0x1d/0x1d0 [ 493.258703][T21636] ret_from_fork+0x51e/0xb90 [ 493.263821][T21636] ret_from_fork_asm+0x1a/0x30 [ 493.269118][T21636] [ 493.269118][T21636] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 493.277422][T21636] __lock_acquire+0x15a5/0x2cf0 [ 493.283016][T21636] lock_acquire+0xf0/0x2e0 [ 493.287985][T21636] __mutex_lock+0x19f/0x1300 [ 493.293108][T21636] elevator_change+0x1b3/0x450 [ 493.298416][T21636] elevator_set_none+0xb5/0x140 [ 493.303803][T21636] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 493.310140][T21636] nbd_start_device+0x17f/0xb10 [ 493.315612][T21636] nbd_genl_connect+0x165b/0x1cf0 [ 493.321167][T21636] genl_family_rcv_msg_doit+0x22a/0x330 [ 493.327236][T21636] genl_rcv_msg+0x61c/0x7a0 [ 493.332343][T21636] netlink_rcv_skb+0x232/0x4b0 [ 493.337643][T21636] genl_rcv+0x28/0x40 [ 493.342167][T21636] netlink_unicast+0x80f/0x9b0 [ 493.347474][T21636] netlink_sendmsg+0x813/0xb40 [ 493.352883][T21636] ____sys_sendmsg+0x972/0x9f0 [ 493.358203][T21636] ___sys_sendmsg+0x2a5/0x360 [ 493.363421][T21636] __x64_sys_sendmsg+0x1bd/0x2a0 [ 493.369025][T21636] do_syscall_64+0x14d/0xf80 [ 493.374240][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.380664][T21636] [ 493.380664][T21636] other info that might help us debug this: [ 493.380664][T21636] [ 493.391073][T21636] Chain exists of: [ 493.391073][T21636] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 493.391073][T21636] [ 493.404968][T21636] Possible unsafe locking scenario: [ 493.404968][T21636] [ 493.412429][T21636] CPU0 CPU1 [ 493.417798][T21636] ---- ---- [ 493.423160][T21636] lock(&q->q_usage_counter(io)#49); [ 493.428543][T21636] lock(fs_reclaim); [ 493.435220][T21636] lock(&q->q_usage_counter(io)#49); [ 493.443126][T21636] lock(&q->elevator_lock); [ 493.447717][T21636] [ 493.447717][T21636] *** DEADLOCK *** [ 493.447717][T21636] [ 493.455860][T21636] 6 locks held by syz.4.4363/21636: [ 493.461144][T21636] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.469351][T21636] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 493.478345][T21636] #2: ffff88802699d9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 493.489839][T21636] #3: ffff88802699d8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 493.500814][T21636] #4: ffff8880269a4318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 493.511474][T21636] #5: ffff8880269a4350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 493.522374][T21636] [ 493.522374][T21636] stack backtrace: [ 493.528263][T21636] CPU: 0 UID: 0 PID: 21636 Comm: syz.4.4363 Not tainted syzkaller #0 PREEMPT(full) [ 493.528283][T21636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.528294][T21636] Call Trace: [ 493.528300][T21636] [ 493.528308][T21636] dump_stack_lvl+0xe8/0x150 [ 493.528331][T21636] print_circular_bug+0x2e1/0x300 [ 493.528358][T21636] check_noncircular+0x12e/0x150 [ 493.528384][T21636] __lock_acquire+0x15a5/0x2cf0 [ 493.528413][T21636] lock_acquire+0xf0/0x2e0 [ 493.528431][T21636] ? elevator_change+0x1b3/0x450 [ 493.528450][T21636] __mutex_lock+0x19f/0x1300 [ 493.528467][T21636] ? elevator_change+0x1b3/0x450 [ 493.528482][T21636] ? rcu_is_watching+0x15/0xb0 [ 493.528506][T21636] ? elevator_change+0x1b3/0x450 [ 493.528522][T21636] ? __pfx___mutex_lock+0x10/0x10 [ 493.528537][T21636] ? enable_work+0x17f/0x230 [ 493.528560][T21636] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.528587][T21636] ? __cancel_work_sync+0xf7/0x110 [ 493.528610][T21636] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 493.528629][T21636] elevator_change+0x1b3/0x450 [ 493.528647][T21636] elevator_set_none+0xb5/0x140 [ 493.528661][T21636] ? __pfx_elevator_set_none+0x10/0x10 [ 493.528679][T21636] ? xa_load+0x1db/0x210 [ 493.528696][T21636] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 493.528720][T21636] ? kernfs_add_one+0x477/0x5c0 [ 493.528744][T21636] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 493.528766][T21636] ? sysfs_add_file_mode_ns+0x259/0x300 [ 493.528788][T21636] nbd_start_device+0x17f/0xb10 [ 493.528815][T21636] ? device_create_file+0xf4/0x1b0 [ 493.528831][T21636] nbd_genl_connect+0x165b/0x1cf0 [ 493.528858][T21636] ? __pfx_nbd_genl_connect+0x10/0x10 [ 493.528884][T21636] ? rcu_is_watching+0x15/0xb0 [ 493.528909][T21636] ? __nla_parse+0x40/0x60 [ 493.528933][T21636] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 493.528953][T21636] genl_family_rcv_msg_doit+0x22a/0x330 [ 493.528972][T21636] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.528994][T21636] ? __lock_acquire+0x6b5/0x2cf0 [ 493.529015][T21636] genl_rcv_msg+0x61c/0x7a0 [ 493.529032][T21636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.529047][T21636] ? __pfx_nbd_genl_connect+0x10/0x10 [ 493.529070][T21636] ? __lock_acquire+0x6b5/0x2cf0 [ 493.529093][T21636] netlink_rcv_skb+0x232/0x4b0 [ 493.529120][T21636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.529136][T21636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.529162][T21636] ? down_read+0x272/0x2e0 [ 493.529178][T21636] ? genl_rcv+0xd/0x40 [ 493.529192][T21636] genl_rcv+0x28/0x40 [ 493.529206][T21636] netlink_unicast+0x80f/0x9b0 [ 493.529228][T21636] ? __pfx_netlink_unicast+0x10/0x10 [ 493.529247][T21636] ? netlink_sendmsg+0x650/0xb40 [ 493.529267][T21636] ? skb_put+0x11b/0x210 [ 493.529292][T21636] netlink_sendmsg+0x813/0xb40 [ 493.529316][T21636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.529339][T21636] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.529360][T21636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.529379][T21636] ____sys_sendmsg+0x972/0x9f0 [ 493.529393][T21636] ? futex_unqueue+0x211/0x240 [ 493.529414][T21636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.529432][T21636] ? import_iovec+0x73/0xa0 [ 493.529457][T21636] ___sys_sendmsg+0x2a5/0x360 [ 493.529474][T21636] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.529491][T21636] ? futex_wait+0x29a/0x380 [ 493.529523][T21636] ? __fget_files+0x2a/0x420 [ 493.529546][T21636] ? __fget_files+0x3a0/0x420 [ 493.529572][T21636] __x64_sys_sendmsg+0x1bd/0x2a0 [ 493.529588][T21636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.529607][T21636] ? rcu_is_watching+0x15/0xb0 [ 493.529632][T21636] do_syscall_64+0x14d/0xf80 [ 493.529646][T21636] ? trace_irq_disable+0x3b/0x150 [ 493.529669][T21636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.529686][T21636] ? clear_bhb_loop+0x40/0x90 [ 493.529704][T21636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.529720][T21636] RIP: 0033:0x7f73da19c799 [ 493.529736][T21636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.529751][T21636] RSP: 002b:00007f73daf80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.529768][T21636] RAX: ffffffffffffffda RBX: 00007f73da415fa0 RCX: 00007f73da19c799 [ 493.529780][T21636] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 493.529791][T21636] RBP: 00007f73da232c99 R08: 0000000000000000 R09: 0000000000000000 [ 493.529801][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.529811][T21636] R13: 00007f73da416038 R14: 00007f73da415fa0 R15: 00007ffcc19d38e8 [ 493.529829][T21636] [ 493.972923][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.978785][T20604] net_ratelimit: 26 callbacks suppressed [ 493.978804][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.994294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.024171][T21646] syzkaller0: entered promiscuous mode [ 494.042403][T21646] syzkaller0: entered allmulticast mode [ 494.057524][ T5823] block nbd0: Receive control failed (result -32) [ 494.057528][ T5844] block nbd0: Receive control failed (result -32) [ 494.064610][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 494.113664][T21636] nbd0: detected capacity change from 0 to 63 [ 494.130553][T21291] block nbd0: Dead connection, failed to find a fallback [ 494.150305][T21291] block nbd0: shutting down sockets [ 494.161526][T21291] blk_print_req_error: 138 callbacks suppressed [ 494.161547][T21291] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.177874][T21291] buffer_io_error: 138 callbacks suppressed [ 494.177890][T21291] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.194694][T21291] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.204837][T21291] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.212749][T21291] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.222694][T21291] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.231917][T21291] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.242079][T21291] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.250050][T21291] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.260178][T21291] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.269018][T21291] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.279031][T21291] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.287358][T21291] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.297621][T21291] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.308026][T21291] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.317875][T21291] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.326188][T21291] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.336876][T21291] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.344959][T21291] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.354798][T21291] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.363363][T21291] ldm_validate_partition_table(): Disk read failed. [ 494.370466][T21291] Dev nbd0: unable to read RDB block 0 [ 494.376490][T21291] nbd0: unable to read partition table [ 494.386589][T21291] ldm_validate_partition_table(): Disk read failed. [ 494.393711][T21291] Dev nbd0: unable to read RDB block 0 [ 494.400733][T21291] nbd0: unable to read partition table [ 494.431098][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 494.541156][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 494.651256][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 494.761218][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 494.871979][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 494.981230][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 495.011092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.611166][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 499.011566][T20606] net_ratelimit: 36 callbacks suppressed [ 499.011590][T20606] bond9: (slave bridge4): failed to get link speed/duplex [ 499.131175][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 499.241229][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 499.351614][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 499.461122][T20610] bond9: (slave bridge4): failed to get link speed/duplex [ 499.571497][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 499.681279][T20607] bond9: (slave bridge4): failed to get link speed/duplex [ 499.732644][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.791152][T20604] bond9: (slave bridge4): failed to get link speed/duplex [ 499.901256][T20609] bond9: (slave bridge4): failed to get link speed/duplex [ 501.653645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22