last executing test programs: 2.44115937s ago: executing program 3 (id=5459): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030008ac0f00"], 0x50}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000040)='wlak0\x00', 0x10200, &(0x7f0000000080)={@align=0x3, {0x2, 0x7, 0x401, 0x37}}, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) 2.318175011s ago: executing program 3 (id=5462): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r2, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 2.272969664s ago: executing program 3 (id=5464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x4f, 0xce, &(0x7f0000000900)="d7b6570cc34fbab950f5cee921c626f6be2d1b04bac279bb54d7fce95e8065eef106446d70e615839289567b2c89edc241af34afc1a0dbe982e64a3f42c290f2bd42c1b17947eead3a84c94bf13022", &(0x7f0000000980)=""/206, 0x9b9f, 0x0, 0xc0, 0x74, &(0x7f0000000a80)="af67fc46b934b1d4101152f12e1ede9af50539db4a53f7b52e0fa48572dbd3cbce9261d0403b19deae9715b988b8e2cebf29c5899d7a0e2593124ef5886915029c469edd42190733cf0530b592b284ee2c18b893decbc545af12d2b1eafae359796a718d717166b63480530a8e88961bd04aab13ef7f81f80b6c44bb0d81b103328e44797399423f53fca1601da6bef2bdc4f554be2adf3d1f0de1eb9bbec3103a126021187f557aaa3ab500a0f77b8e72c7de651df19ac5fd49a2497982ece5", &(0x7f0000000b40)="88cf2dfa19fb7a5bc916103c08566d6eac12482a62d57c8440cb43f0a001764b998b811f55f8334aad61dfb2eb820fba6bc2f018eac6b537e2d514f9c5269b303328efd13bd26ffe9cdc4d7407ebf3af5246a9b496873a3d9bafa2dae5540b18b8685df80b8ffd4f5863943a875229e1a238d575", 0x2, 0x0, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000003a0ce375c71a660740dc39487ab92fbf556f27d402cd8a360e6091a09d5f847ef6938f4000010000667f48210f0b9c6bf001ff39f1534a62fa9e51e6c14f98c2f4f8bf8464bc1456b620e8fc26596d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ff73331", @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="57ccaf7bd759778783ed427bed755a3f0925ff71004a6aad4f2951eac4ba17d5f8615a4650b457ba93e8146562da2dedde1588c28533998e6e48645f1e89777b47cb6be5e87b7e78ff4f106050e7f21c94439f70e2958ef7a1ea7e7a3abcb46f7c770306923100000000", 0x1, 0x20008840, 0x0, 0x36) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x8af234ad5f3fd7b5, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$inet6(r9, &(0x7f0000000780)={&(0x7f0000000600)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r11}}}], 0x28}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4240820}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x884) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r13, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=r15, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r12, 0x20, &(0x7f0000000400)={&(0x7f0000000080)=""/56, 0x38, 0x0, &(0x7f00000002c0)=""/165, 0xa5}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r14, 0xffffffffffffffff, 0x3a, 0x0, @val=@tracing={r16, 0xfffffffffffffffd}}, 0x20) 2.032892394s ago: executing program 3 (id=5468): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=ANY=[@ANYBLOB="54000000210001002ebd7000fedbdf250a208002040000030300000014000200fe8000000000000000000000000000aa14000100fc020000000000000000000000000001080d0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.96000236s ago: executing program 3 (id=5469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r3, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r3, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x12, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) 1.418599049s ago: executing program 2 (id=5475): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/27], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x9, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0x102, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.417580483s ago: executing program 1 (id=5476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002e00010a00000000000000001f0000000c00ad7ce032eb21784ef1f09ecbd7bff3000001"], 0x28}}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000305f8ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 1.265730833s ago: executing program 0 (id=5479): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x40400) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x10, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001300)={{r2}, r3, 0x6, @inherit={0x78, &(0x7f00000007c0)={0x0, 0x6, 0x3, 0x722b, {0x28, 0xffffffffffffffff, 0xb, 0x3a, 0xf}, [0x5, 0x4, 0x100, 0x9, 0x9, 0x80000000]}}, @name="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"}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) sendto$inet6(r5, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r10, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x10, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 1.258568576s ago: executing program 2 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) (async) 1.206372276s ago: executing program 1 (id=5482): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002914}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x804) 999.830437ms ago: executing program 1 (id=5484): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x28, 0x80, 0x8, 0x8, 0x9}, 0x14) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x28, 0x80, 0x8, 0x8, 0x9}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x3, @remote, 0x4}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @broadcast}], 0x4c) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) 930.710138ms ago: executing program 2 (id=5485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) unshare(0x28000600) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 928.479247ms ago: executing program 3 (id=5486): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000002010101", 0x2e}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 871.766924ms ago: executing program 2 (id=5487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) 845.575953ms ago: executing program 0 (id=5488): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000300), 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) r5 = socket(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfffffffffffffdf4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r6, 0x4, r6}, 0x6) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e7", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}], 0x20, 0x4855}, 0x24000052) 766.649975ms ago: executing program 1 (id=5489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xffffffc0}, 0x94) 706.167919ms ago: executing program 2 (id=5490): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000010000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/27], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x9, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0x102, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 704.515496ms ago: executing program 4 (id=5491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f00000008c0)=""/53, 0x35}, {&(0x7f0000005780)=""/4093, 0xffd}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/127, 0x7f}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 671.05061ms ago: executing program 2 (id=5492): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket(0x23, 0x3, 0x5) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) (async) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']Tv', 0x3}], 0x1}, 0x20004040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r6}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000980)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000009c0)=@assoc_value={r7, 0x81}, 0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xc3, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) writev(r8, &(0x7f00000008c0)=[{&(0x7f0000000000)="6a8d9069ba8854e9190556d2004891baf18510603fa567ec32201964bf5df361", 0x20}, {&(0x7f00000003c0)="9115b7985a282518c731e8486ea283c134bc6c74949913cf638bd377306557b876e0a37932dd606b1909fd", 0x2b}, {&(0x7f0000000400)="10d91edfc2b73ab8234df794281e7b4b7e", 0x11}, {&(0x7f0000000540)="27cdcdd2aa64a5a0c9935d36677e4bc19891f8d1a466b3a7579e82fefe8c748f261f59c377a9e85d628bd9415f4ff9e4acb661268953691af2a658aba7f85d6b4b8b6fb437e3c3e174c0f5d631ec6a04bf7190153c2848204e3321d687232b132934e73bfc213155ca09c107b93e7fff19b84a12088c4ced633666629b3f904bd43a6e448676ad3e10db2844b83b9818e793b06862dbceb41b97e8a4306aa62e36a131b3c7fa5e182d96fe1990", 0xad}, {&(0x7f0000000600)="172a79e29ea15f6279d0f679acc75e5388853ee6cc3e1079bf7e38355ca65b1991", 0x21}, {&(0x7f0000000640)="7f05f8ef2e6a5ed54bdf0c41", 0xc}, {&(0x7f0000000680)="5947b5f906651d49297f6b050fce9eef4821298f8562763a977a178a713ee146aafd4f33b9c47ca3810dcf9c2f156d9d911eeffbcd3122576540827b48f71d5d63509e948cee9f8bee12a5fbeb0d199b5d8a9d45c9b02812d99322fd11455094504ab7b7ccbc158b149eec2e0f3941fc6baa76e0c28755bbf35cefbdb3a23e139a3e55f8f929", 0x86}, {&(0x7f0000000740)="af6b87b101bb9cd210c2ed6dbe838637ffaf22813afd96e1466e42810ce2d04711825b599d87fc9a3f29b5cf0549a6849fbd5496fde6c1b1f67d9616556badf0f1659e65e47010969f41674a283e5c204999dbd2a6c98394ce39cd665cf866e9e782920bc3c26a4ecf6c50b09350a75e0262e4195cc731ac1ffec2ba2c0b095e9c1983b1b3ae68652af99e56fa8587d6b9e8258e64b7b7f59ef32ad7161d67bfa8da5730d82b1466c4610e91ad251138ac9ee553c87095c2a9e620e315a0c4da27743ee7bd8bb77032b32a67041e05e2a788", 0xd2}, {&(0x7f0000000840)="40f6fbc9a3a643e8d93922b2b202bfc98009b89d414ce0ea38600ac2f49955dc0614a7d04f17a956e48b2271a8b055459b0fb800f1fc4f98ab65235f24fbaed05b7e147bf81f4ff898c4e687f994cf389b242034b0883428648d77406feea7e50d3b347d03", 0x65}], 0x9) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x68}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) close(0x3) ppoll(&(0x7f0000000280)=[{r2, 0x400}], 0x1, &(0x7f0000000340)={r9, r10+10000000}, &(0x7f0000000380)={[0x5]}, 0x8) 566.67633ms ago: executing program 1 (id=5493): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x21, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendfile(r1, r4, 0x0, 0xc1) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0xe0, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f2953ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2028430b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa90b916}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74bd01fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x113e3912}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4734704e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f3a447b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d7fecc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x774606a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xe0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b", @ANYBLOB="280000001000010024bd7000fc0ddf2500000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c0002"], 0x48}}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x94b8ae54eb7c9156}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80080}, 0x8810) 506.830176ms ago: executing program 4 (id=5494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32=r0], 0x34}}, 0x44800) 506.075269ms ago: executing program 0 (id=5495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10100a20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000c00}, 0x240400c1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x55}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000041000100fcff0700040000000100000004004880200001801c00108018000b80140001000000000000000000fdfffeffac1414bb080002"], 0x40}, 0x1, 0x0, 0x0, 0xc849}, 0x4008094) 422.936915ms ago: executing program 4 (id=5496): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xa) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x35, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) 377.393365ms ago: executing program 0 (id=5497): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0x2}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x1, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0xadc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x44080) 242.363801ms ago: executing program 4 (id=5498): socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 170.716948ms ago: executing program 1 (id=5499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="4777d5125c996d0f23677f99c03d55207ba8ed4f54dd8befd37482843c2100deafd30b73349281590b38", @ANYRES16=r2, @ANYBLOB="df4800000000000000000c0000001000038004000380080002000800000018000180140002007369743000"/54], 0x3c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0xec0}, 0x78}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r8 = socket(0x8, 0x4, 0x3) accept4$packet(r8, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000fd"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r13, 0x58, &(0x7f0000000600)}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20484090}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20048010}, 0x8000000) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4004004) (async) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x160, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x1, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 166.764524ms ago: executing program 0 (id=5500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4d, &(0x7f0000000140)=0x516, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0x7ff}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x4d, &(0x7f0000000140)=0x516, 0x4) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0x7ff}, 0x1c) (async) 46.64641ms ago: executing program 4 (id=5501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@generic={0xff, 0xe, 0x0, 0x80, 0x400}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x1, 0x101, 0x9, 0x12000, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x4}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00fbffffffffffffff0000000000000700000706000240886c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010200000000000000000200000005000500000000001400078008000b400000000708001740000000040900020073797a32000000000d000300686173683a6d6163000073683a69702c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 37.282538ms ago: executing program 0 (id=5502): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000010000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/27], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x9, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0x102, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 4 (id=5503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xffffffc3}, 0x94) kernel console output (not intermixed with test programs): nnel medium [ 464.740122][T20082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.838686][T20089] geneve3: entered allmulticast mode [ 464.847626][T20102] netlink: 'syz.4.3598': attribute type 4 has an invalid length. [ 464.859501][T20102] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3598'. [ 465.067501][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.073472][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.089851][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.125769][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.142522][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.168327][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.194078][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.220576][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.236026][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.243093][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.270536][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.271713][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.276615][T20069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.300660][T20121] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3602'. [ 465.391233][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3602'. [ 465.563372][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 465.868677][T20150] netlink: 'syz.1.3611': attribute type 21 has an invalid length. [ 465.868756][T20150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3611'. [ 465.951423][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 465.951461][T20159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3613'. [ 465.980386][T20159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.637915][T20186] netlink: 'syz.4.3620': attribute type 21 has an invalid length. [ 466.638004][T20186] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3620'. [ 466.714006][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3623'. [ 466.714043][T20193] netlink: 'syz.3.3623': attribute type 7 has an invalid length. [ 466.714056][T20193] netlink: 'syz.3.3623': attribute type 8 has an invalid length. [ 466.714070][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'. [ 466.723551][T20194] netlink: 'syz.3.3623': attribute type 7 has an invalid length. [ 466.723573][T20194] netlink: 'syz.3.3623': attribute type 8 has an invalid length. [ 466.809297][ T9248] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 467.125148][T20221] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 467.125180][T20221] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 467.464622][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.464806][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.464956][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.465739][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.468404][T20236] batman_adv: batadv0: Adding interface: veth0 [ 467.468421][T20236] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.468454][T20236] batman_adv: batadv0: Interface activated: veth0 [ 467.962111][T20253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.172363][T20266] tap0: tun_chr_ioctl cmd 2148553947 [ 468.452204][T20279] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 468.752266][ T50] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 468.866388][ T50] bond1: (slave dummy0): link status up again after 0 ms [ 468.886784][ T9263] bond1: (slave dummy0): link status up again after 0 ms [ 468.904726][ T59] bond1: (slave dummy0): link status up again after 0 ms [ 468.924465][ T59] bond1: (slave dummy0): link status up again after 0 ms [ 468.945116][ T50] bond1: (slave dummy0): link status up again after 0 ms [ 468.964249][ T999] bond1: (slave dummy0): link status up again after 0 ms [ 468.989046][ T50] bond1: (slave dummy0): link status up again after 0 ms [ 469.005974][ T9263] bond1: (slave dummy0): link status up again after 0 ms [ 469.527750][T10319] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 469.548151][T10319] bond1: active interface up! [ 470.079590][T20362] validate_nla: 1 callbacks suppressed [ 470.079616][T20362] netlink: 'syz.0.3653': attribute type 1 has an invalid length. [ 470.079631][T20362] netlink: 'syz.0.3653': attribute type 4 has an invalid length. [ 470.079645][T20362] __nla_validate_parse: 11 callbacks suppressed [ 470.079658][T20362] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3653'. [ 471.015564][ T999] net_ratelimit: 39 callbacks suppressed [ 471.015590][ T999] bond1: (slave dummy0): failed to get link speed/duplex [ 471.124706][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 471.234658][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 471.344923][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 471.454542][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 471.554626][T20292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.585797][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 471.696880][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 471.741340][T20368] netlink: 'syz.2.3657': attribute type 20 has an invalid length. [ 471.741364][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 471.767914][T20368] netlink: 'syz.2.3657': attribute type 20 has an invalid length. [ 471.767938][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 471.787955][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.793160][ T999] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.793655][ T999] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.796768][ T999] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.821929][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 471.924646][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 472.012522][T20380] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 136 [ 472.035074][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 472.261099][T20392] syzkaller0: entered promiscuous mode [ 472.261123][T20392] syzkaller0: entered allmulticast mode [ 472.271727][T20394] bridge_slave_1: entered promiscuous mode [ 472.316240][T20396] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 472.373998][T20393] bridge_slave_1: left promiscuous mode [ 472.678365][T20415] geneve2: entered promiscuous mode [ 472.861479][T20424] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3676'. [ 472.913408][T20427] x_tables: duplicate entry at hook 3 [ 473.385256][T20448] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 473.946314][T20472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3691'. [ 474.161837][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 474.187036][ T5628] block nbd2: Receive control failed (result -107) [ 474.246774][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 474.485871][ T5628] block nbd3: Receive control failed (result -32) [ 474.526419][T20496] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3697'. [ 474.640575][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3700'. [ 474.829074][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 474.996753][T20536] 0XD: renamed from gretap0 (while UP) [ 474.998936][T20536] 0XD: entered allmulticast mode [ 475.382349][T20550] __nla_validate_parse: 1 callbacks suppressed [ 475.382369][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 475.413337][T20550] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 475.879194][T20572] netlink: 'syz.4.3720': attribute type 10 has an invalid length. [ 475.908482][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.945756][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.946200][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.946430][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.949956][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.950225][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.950452][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.950673][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 475.950888][T20574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3719'. [ 476.125102][ T9263] net_ratelimit: 36 callbacks suppressed [ 476.125126][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 476.235974][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 476.384239][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 476.506020][ T9262] bond1: (slave dummy0): failed to get link speed/duplex [ 476.617291][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 476.726846][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 476.839930][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 477.317758][ T9262] bond1: (slave dummy0): failed to get link speed/duplex [ 477.486091][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 477.597316][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 477.661377][T20627] syzkaller1: entered promiscuous mode [ 477.661406][T20627] syzkaller1: entered allmulticast mode [ 477.826827][T20647] bond0: ARP target 8.4.0.0 is already present [ 477.826851][T20647] bond0: option arp_ip_target: invalid value (1032) [ 477.828717][T20647] tipc: Started in network mode [ 477.828750][T20647] tipc: Node identity 9688d9955fad, cluster identity 4711 [ 477.828917][T20647] tipc: Enabled bearer , priority 0 [ 477.937709][T20647] syzkaller0: entered promiscuous mode [ 477.937734][T20647] syzkaller0: entered allmulticast mode [ 477.938402][T20647] tipc: Resetting bearer [ 478.010154][T20646] tipc: Resetting bearer [ 478.409787][T20671] netlink: 'syz.2.3744': attribute type 10 has an invalid length. [ 480.519735][T20646] tipc: Disabling bearer [ 480.531591][T20676] macvlan0: entered promiscuous mode [ 480.533276][ T5726] tipc: Node number set to 3374700949 [ 480.979616][T20708] __nla_validate_parse: 19 callbacks suppressed [ 480.979639][T20708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3753'. [ 481.002972][T20706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3753'. [ 481.323267][T20700] netlink: 'syz.1.3750': attribute type 4 has an invalid length. [ 481.340532][T10319] pim6reg: left allmulticast mode [ 481.341006][T10319] dvmrp0: left allmulticast mode [ 481.374373][T20705] netlink: 'syz.1.3750': attribute type 4 has an invalid length. [ 481.449394][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3758'. [ 481.451848][T20726] net_ratelimit: 9 callbacks suppressed [ 481.451864][T20726] ip_tables: iptables: counters copy to user failed while replacing table [ 481.541672][T20735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3760'. [ 482.206680][T10319] gretap0 (unregistering): left promiscuous mode [ 482.262082][T10319] bond6 (unregistering): (slave geneve2): Releasing active interface [ 482.341393][T10319] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 482.341426][T10319] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 32:3e:b2:2a:38:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 482.341461][T10319] bond4 (unregistering): (slave bridge4): making interface the new active one [ 482.341580][T10319] bond4 (unregistering): (slave bridge4): Error 16 setting MAC of new active slave [ 482.399257][T10319] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 482.414811][T10319] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 482.414841][T10319] bridge5 (unregistering): left promiscuous mode [ 482.448343][T10319]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.452875][T10319]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.472131][T10319]  (unregistering): Released all slaves [ 482.488951][T10319] bond1 (unregistering): Released all slaves [ 482.507077][T10319] bond2 (unregistering): Released all slaves [ 482.522485][T10319] bond3 (unregistering): Released all slaves [ 482.537609][T10319] bond4 (unregistering): Released all slaves [ 482.570352][T10319] bond5 (unregistering): Released all slaves [ 482.590161][T10319] bond6 (unregistering): Released all slaves [ 482.610248][T10319] bond0 (unregistering): Released all slaves [ 482.631953][T10319] bond7 (unregistering): Released all slaves [ 482.649104][T10319] bond8 (unregistering): (slave macvlan1): Releasing backup interface [ 482.649661][T10319] veth1_vlan: left allmulticast mode [ 482.651068][T10319] bond8 (unregistering): Released all slaves [ 482.725305][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 482.748752][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 482.765513][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 482.785888][ T9263] bond1: (slave dummy0): link status up again after 0 ms [ 482.815786][ T35] bond1: (slave dummy0): link status up again after 0 ms [ 482.850261][ T35] bond1: (slave dummy0): link status up again after 0 ms [ 482.865539][ T35] bond1: (slave dummy0): link status up again after 0 ms [ 482.906092][ T35] bond1: (slave dummy0): link status up again after 0 ms [ 482.928986][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 482.953854][T20726] tipc: Started in network mode [ 482.953887][T20726] tipc: Node identity ac1414aa, cluster identity 4711 [ 482.954633][T20726] tipc: New replicast peer: 172.20.20.187 [ 482.989347][T20726] tipc: Enabled bearer , priority 10 [ 483.001651][T10319] tipc: Disabling bearer [ 483.003526][T10319] tipc: Left network mode [ 483.114867][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 483.164468][T10319] IPVS: stopping master sync thread 9499 ... [ 483.172507][T10319] IPVS: stopping backup sync thread 16552 ... [ 483.384022][T20757] 8021q: VLANs not supported on sit0 [ 483.577839][T20769] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3769'. [ 483.849714][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 483.874334][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 483.878249][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 483.942886][T20779] veth1_vlan: left promiscuous mode [ 484.053483][ T5761] tipc: Node number set to 2886997162 [ 484.919857][ T5628] Bluetooth: hci5: ACL packet for unknown connection handle 3484 [ 485.325053][T20830] syzkaller0: entered promiscuous mode [ 485.325080][T20830] syzkaller0: entered allmulticast mode [ 485.390015][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 485.495199][T20835] ipvlan2: entered allmulticast mode [ 485.495225][T20835] syz_tun: entered allmulticast mode [ 485.753011][T10319] hsr_slave_0: left promiscuous mode [ 485.764399][T10319] hsr_slave_1: left promiscuous mode [ 485.765287][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.765308][T10319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.772401][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.772424][T10319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.773308][T10319] batman_adv: batadv0: Interface deactivated: veth0 [ 485.773326][T10319] batman_adv: batadv0: Removing interface: veth0 [ 485.971030][T10319] veth1_macvtap: left promiscuous mode [ 485.971072][T10319] veth0_macvtap: left promiscuous mode [ 485.971207][T10319] veth1_vlan: left promiscuous mode [ 485.971278][T10319] veth0_vlan: left promiscuous mode [ 486.059237][T20859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3788'. [ 486.172928][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 486.910724][T10319] team0 (unregistering): Port device team_slave_1 removed [ 487.055364][T10319] team0 (unregistering): Port device dummy0 removed [ 487.187202][ T12] net_ratelimit: 21 callbacks suppressed [ 487.187228][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 487.296965][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 487.404761][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 487.431204][T20909] sctp: [Deprecated]: syz.0.3801 (pid 20909) Use of int in max_burst socket option deprecated. [ 487.431204][T20909] Use struct sctp_assoc_value instead [ 487.476650][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 487.517250][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 487.570222][T20919] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 487.604900][T14357] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 487.625240][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 487.631751][T20923] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3800'. [ 487.736726][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 487.820988][T10319] IPVS: stop unused estimator thread 0... [ 487.845254][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 487.955790][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 488.961659][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'. [ 489.768143][T20887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.998076][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 489.998116][T20979] netlink: 'syz.1.3819': attribute type 10 has an invalid length. [ 489.998134][T20979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3819'. [ 490.043126][T20979] geneve2: entered promiscuous mode [ 490.043150][T20979] geneve2: entered allmulticast mode [ 490.079394][T20981] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 490.181698][T20992] batadv_slave_0: entered promiscuous mode [ 490.198006][T20992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3823'. [ 490.198029][T20992] tipc: Invalid UDP bearer configuration [ 490.198074][T20992] tipc: Enabling of bearer rejected, failed to enable media [ 490.258248][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 490.258385][T20992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.304789][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'. [ 490.309786][T20999] tipc: Trying to set illegal importance in message [ 490.383653][T20992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.118662][T21042] __nla_validate_parse: 2 callbacks suppressed [ 491.118684][T21042] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3841'. [ 491.240684][T21047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3842'. [ 491.252226][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3845'. [ 491.318571][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 491.797478][T21080] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 491.843216][T21080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.930317][T21080] bond2: (slave geneve2): making interface the new active one [ 491.954622][T21086] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 491.959232][T21080] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 491.991508][T21080] syz.2.3852 (21080) used greatest stack depth: 18080 bytes left [ 492.239739][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'. [ 492.294218][ T12] net_ratelimit: 38 callbacks suppressed [ 492.294243][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 492.406202][ T9260] bond1: (slave dummy0): link status up again after 0 ms [ 492.425624][ T12] bond1: (slave dummy0): link status up again after 0 ms [ 492.444711][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 492.464586][ T12] bond1: (slave dummy0): link status up again after 0 ms [ 492.484206][ T12] bond1: (slave dummy0): link status up again after 0 ms [ 492.504800][ T9260] bond1: (slave dummy0): link status up again after 0 ms [ 492.526732][ T9260] bond1: (slave dummy0): link status up again after 0 ms [ 492.544884][T10320] bond1: (slave dummy0): link status up again after 0 ms [ 492.564845][ T9260] bond1: (slave dummy0): link status up again after 0 ms [ 492.655596][T21110] netlink: 5260 bytes leftover after parsing attributes in process `syz.4.3858'. [ 492.822375][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'. [ 492.922776][T21132] ovs-s: entered promiscuous mode [ 492.933079][T21132] openvswitch: ovs-s: Dropping previously announced user features [ 492.943932][T21132] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 492.954563][T21132] netlink: 'syz.0.3862': attribute type 29 has an invalid length. [ 493.618922][T21168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3873'. [ 493.618949][T21168] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3873'. [ 493.618966][T21168] netlink: 'syz.2.3873': attribute type 6 has an invalid length. [ 493.618980][T21168] netlink: 'syz.2.3873': attribute type 5 has an invalid length. [ 493.618993][T21168] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3873'. [ 493.619233][T21167] netlink: 'syz.2.3873': attribute type 6 has an invalid length. [ 493.619249][T21167] netlink: 'syz.2.3873': attribute type 5 has an invalid length. [ 493.912791][T21178] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 493.912842][T21178] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 493.980983][T21181] netlink: 'syz.4.3880': attribute type 1 has an invalid length. [ 494.133119][T21191] Cannot find add_set index 0 as target [ 494.681517][T21232] bond4: entered allmulticast mode [ 494.747594][T21232] bond4 (unregistering): Released all slaves [ 494.937199][T21251] batadv_slave_0: entered promiscuous mode [ 494.962881][T21249] batadv_slave_0: left promiscuous mode [ 495.234212][T10320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.377582][T21270] Cannot find add_set index 65532 as target [ 495.862010][T21301] netlink: 'syz.2.3907': attribute type 4 has an invalid length. [ 496.452613][T21322] pim6reg: entered allmulticast mode [ 496.573753][T21333] __nla_validate_parse: 11 callbacks suppressed [ 496.573774][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 496.597530][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'. [ 496.698405][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3919'. [ 496.898678][T21357] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 496.898702][T21357] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3923'. [ 496.898718][T21357] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 497.413727][T21380] vlan2: entered allmulticast mode [ 497.413749][T21380] bond0: entered allmulticast mode [ 497.413764][T21380] bond_slave_0: entered allmulticast mode [ 497.413780][T21380] bond_slave_1: entered allmulticast mode [ 497.434720][ T50] net_ratelimit: 46 callbacks suppressed [ 497.434777][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 497.467679][T21382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3929'. [ 497.471328][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3929'. [ 497.484340][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 497.534468][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 497.647254][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 497.757515][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 497.789630][T21402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3932'. [ 497.867645][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 497.966748][T21398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.983591][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 498.086339][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 498.196460][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 498.286379][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3939'. [ 498.286410][T21424] block nbd4: Unsupported socket: should be TCP or UNIX. [ 498.315598][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 498.440422][T21429] netlink: 'syz.3.3942': attribute type 12 has an invalid length. [ 498.440445][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'. [ 498.467210][T21429] netlink: 'syz.3.3942': attribute type 12 has an invalid length. [ 498.468819][ T9263] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.470015][ T9263] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.470095][ T9263] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.470134][ T9263] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.485359][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 498.689747][T21438] macvlan0: entered promiscuous mode [ 498.739180][T21445] xt_HMARK: spi-set and port-set can't be combined [ 498.852068][T21448] netlink: 'syz.3.3948': attribute type 30 has an invalid length. [ 499.081038][T21457] syzkaller1: entered promiscuous mode [ 499.081063][T21457] syzkaller1: entered allmulticast mode [ 499.562467][T21485] vlan0: entered promiscuous mode [ 499.562677][T21485] vlan0: entered allmulticast mode [ 499.562692][T21485] veth0_vlan: entered allmulticast mode [ 499.809230][T21498] netlink: 'syz.2.3958': attribute type 1 has an invalid length. [ 500.107356][T21521] netlink: 'syz.4.3967': attribute type 2 has an invalid length. [ 500.108595][T21521] netlink: 'syz.4.3967': attribute type 11 has an invalid length. [ 500.281561][T21527] netlink: 'syz.2.3969': attribute type 32 has an invalid length. [ 500.346870][T21527] bond3: option coupled_control: invalid value (192) [ 500.348888][T21527] bond3 (unregistering): Released all slaves [ 501.089270][T21561] xt_hashlimit: size too large, truncated to 1048576 [ 501.184126][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.290483][T21568] bridge_slave_0 (unregistering): left allmulticast mode [ 501.296051][T21568] bridge_slave_0 (unregistering): left promiscuous mode [ 501.296181][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.798894][T21591] xt_time: unknown flags 0x68 [ 501.921129][T21607] hsr0: entered allmulticast mode [ 501.921153][T21607] hsr_slave_0: entered allmulticast mode [ 501.921172][T21607] hsr_slave_1: entered allmulticast mode [ 501.988504][T21607] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 502.273453][T21619] __nla_validate_parse: 14 callbacks suppressed [ 502.273507][T21619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3994'. [ 502.277596][T21621] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3994'. [ 502.515836][T21631] net_ratelimit: 33 callbacks suppressed [ 502.515856][T21631] ip_tables: iptables: counters copy to user failed while replacing table [ 502.525859][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 502.539482][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 502.540153][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 502.577273][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 502.577818][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 502.644268][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 502.756459][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 502.758166][T21654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'. [ 502.792481][ T5630] block nbd4: Receive control failed (result -107) [ 502.864550][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 502.974377][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 502.979529][T21661] netlink: 'syz.3.4008': attribute type 3 has an invalid length. [ 503.176026][T21671] ip6tnl1: entered promiscuous mode [ 503.176052][T21671] ip6tnl1: entered allmulticast mode [ 503.188903][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 503.279447][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'. [ 503.345964][T21681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.355758][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 503.417298][T21683] netlink: 'syz.4.4014': attribute type 3 has an invalid length. [ 503.466458][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 503.651148][T21695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4018'. [ 504.022828][T21711] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4023'. [ 504.119760][T21714] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.161836][T21725] IPVS: ip_vs_edit_dest(): server weight less than zero [ 504.163430][T10320] IPVS: starting estimator thread 0... [ 504.271099][T21726] IPVS: using max 24 ests per chain, 57600 per kthread [ 504.515925][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.515949][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.567462][T21742] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 504.710605][T21742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.739187][T21747] bond2: (slave bridge3): making interface the new active one [ 504.761947][T21747] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 504.787663][T21750] tipc: Enabled bearer , priority 0 [ 504.875350][T21750] syzkaller0: entered promiscuous mode [ 504.875377][T21750] syzkaller0: entered allmulticast mode [ 504.876115][T21750] tipc: Resetting bearer [ 504.910239][T21744] tipc: Resetting bearer [ 505.342612][T21773] netlink: 'syz.2.4034': attribute type 15 has an invalid length. [ 505.342637][T21773] netlink: 'syz.2.4034': attribute type 7 has an invalid length. [ 507.283350][T21744] tipc: Disabling bearer [ 507.298694][T21764] __nla_validate_parse: 8 callbacks suppressed [ 507.298716][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 507.586415][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4039'. [ 507.617085][T21797] netlink: 'syz.1.4039': attribute type 1 has an invalid length. [ 507.617110][T21797] netlink: 'syz.1.4039': attribute type 2 has an invalid length. [ 507.632732][T10319] net_ratelimit: 12 callbacks suppressed [ 507.632781][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 507.687523][T21808] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4043'. [ 507.688669][T21809] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4043'. [ 507.688958][T21807] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4042'. [ 507.689391][T21807] unsupported nlmsg_type 40 [ 507.736386][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 507.777685][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4045'. [ 507.777722][T21811] netlink: 'syz.0.4045': attribute type 8 has an invalid length. [ 507.844373][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 507.954473][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 508.198840][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 508.278171][T21842] tipc: Enabling of bearer rejected, failed to enable media [ 508.301016][T21829] syzkaller1: entered promiscuous mode [ 508.301041][T21829] syzkaller1: entered allmulticast mode [ 508.316560][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 508.406557][T21847] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 508.431915][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 508.536413][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 508.600444][T21853] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.645783][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 508.783593][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'. [ 508.832275][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4056'. [ 511.122030][T21936] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4075'. [ 511.258288][T21942] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 511.259091][T21942] IPVS: set_ctl: invalid protocol: 10816 0.32.0.0:31748 [ 511.457331][T21961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4080'. [ 511.573074][T21957] nbd: device at index 64 is going down [ 511.658887][T21971] netlink: 'syz.1.4085': attribute type 16 has an invalid length. [ 511.658911][T21971] netlink: 'syz.1.4085': attribute type 3 has an invalid length. [ 511.881983][T18693] udevd[18693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 512.668143][T22002] netlink: 'syz.0.4093': attribute type 1 has an invalid length. [ 512.724492][ T50] net_ratelimit: 36 callbacks suppressed [ 512.724515][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 512.816260][T22009] __nla_validate_parse: 41 callbacks suppressed [ 512.816281][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'. [ 512.834941][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 512.865569][T22014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.865588][T22014] IPv6: NLM_F_CREATE should be set when creating new route [ 512.865616][T22014] IPv6: NLM_F_CREATE should be set when creating new route [ 512.917454][T22012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4097'. [ 512.917511][T22012] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 512.918553][T22016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4097'. [ 512.918598][T22016] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 512.985633][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 513.219805][T22031] netlink: 'syz.0.4103': attribute type 1 has an invalid length. [ 513.336694][T22040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4107'. [ 513.466820][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4107'. [ 513.466850][T22045] nbd: nbd64 already in use [ 513.602684][T22056] netlink: 'syz.1.4109': attribute type 32 has an invalid length. [ 513.602709][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 513.699851][T22031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.703737][T18693] udevd[18693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 513.722746][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 513.797207][T22034] bond3: (slave gretap2): making interface the new active one [ 513.800089][T22034] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 513.803564][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 513.803591][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 513.924737][T22056] bond4: option coupled_control: invalid value (192) [ 513.953133][T22056] bond4 (unregistering): Released all slaves [ 514.082984][T22082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4114'. [ 514.291106][T22077] netlink: Invalid conntrack timeout [ 514.291139][T22077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.344830][T22076] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4111'. [ 514.428145][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 514.655700][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 515.149160][T22143] netlink: 'syz.2.4125': attribute type 4 has an invalid length. [ 515.177447][T22135] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20003 [ 515.180262][T22136] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20003 [ 515.321070][T22150] tipc: Started in network mode [ 515.321103][T22150] tipc: Node identity 56443365860e, cluster identity 4711 [ 515.321276][T22150] tipc: Enabled bearer , priority 0 [ 515.421805][T22154] veth0_to_bond: entered allmulticast mode [ 515.479665][T22150] syzkaller0: MTU too low for tipc bearer [ 515.479689][T22150] tipc: Disabling bearer [ 515.532183][T22157] syzkaller0: entered promiscuous mode [ 515.532208][T22157] syzkaller0: entered allmulticast mode [ 515.549880][T10319] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.549945][T10319] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.549983][T10319] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.555343][ T9263] tipc: Subscription rejected, illegal request [ 515.730729][T22167] Bluetooth: hci0: unsupported parameter 5135 [ 515.730755][T22167] Bluetooth: hci0: unsupported parameter 8192 [ 515.730769][T22167] Bluetooth: hci0: unsupported parameter 5135 [ 515.730783][T22167] Bluetooth: hci0: unsupported parameter 8192 [ 516.385029][T22194] ipvlan2: entered allmulticast mode [ 516.517234][T22207] netlink: 'syz.2.4144': attribute type 21 has an invalid length. [ 516.517262][T22207] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.248878][ T5630] block nbd5: Receive control failed (result -32) [ 517.249404][ T5628] block nbd5: Receive control failed (result -32) [ 517.450670][T22237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.450714][T22237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.792654][T22237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.793265][T22237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.854877][T10319] net_ratelimit: 28 callbacks suppressed [ 517.854903][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 517.984749][T22237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.984794][T22237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.063519][T22258] __nla_validate_parse: 7 callbacks suppressed [ 518.063542][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4158'. [ 518.064608][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 518.217010][T22237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.217051][T22237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.275567][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 518.384466][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 518.454995][ T9255] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.455031][ T9255] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.674379][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.674418][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.674781][T10319] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.674813][T10319] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.674850][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 518.825476][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.825516][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.825568][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 518.939348][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 519.046195][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 519.158393][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 519.266120][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 519.837628][T22333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4179'. [ 519.837677][T22333] netlink: 'syz.4.4179': attribute type 7 has an invalid length. [ 519.837691][T22333] netlink: 'syz.4.4179': attribute type 8 has an invalid length. [ 519.837723][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 519.886288][T22333] bridge0: entered promiscuous mode [ 519.903911][T22333] bridge0: left promiscuous mode [ 519.943918][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 520.685076][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.715711][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.766175][T22386] Bluetooth: MGMT ver 1.23 [ 520.771194][T22386] syzkaller0: entered promiscuous mode [ 520.771225][T22386] syzkaller0: entered allmulticast mode [ 521.023357][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.069432][T22404] xt_TCPMSS: Only works on TCP SYN packets [ 521.148576][T22398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.152487][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.208152][T22411] bond3: option resend_igmp: invalid value (3062) [ 521.208178][T22411] bond3: option resend_igmp: allowed values 0 - 255 [ 521.210317][T22411] bond3 (unregistering): Released all slaves [ 521.358508][T22398] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.363616][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.408962][T22398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.410347][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.448660][T22398] 8021q: adding VLAN 0 to HW filter on device bond8 [ 521.449726][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.538648][T22398] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.543104][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.611010][T22398] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.612739][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.640631][T22434] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4209'. [ 521.667735][T22398] 8021q: adding VLAN 0 to HW filter on device bond11 [ 521.670998][T22398] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 521.722367][T22398] 8021q: adding VLAN 0 to HW filter on device bond12 [ 521.847252][T22398] 8021q: adding VLAN 0 to HW filter on device bond13 [ 522.065244][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 522.425582][T22470] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4218'. [ 522.425608][T22470] veth0_to_bond: default FDB implementation only supports local addresses [ 522.876038][T10320] net_ratelimit: 26 callbacks suppressed [ 522.876062][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 522.984340][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 523.076808][T22505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4227'. [ 523.219740][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4230'. [ 523.286470][T22502] bridge1: entered promiscuous mode [ 523.302793][T22502] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 523.327991][T22516] bridge2: entered promiscuous mode [ 523.348351][T22516] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 523.386447][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 523.495727][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 523.540056][T22525] Cannot find del_set index 3 as target [ 523.554596][T22527] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4233'. [ 523.562130][T22528] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4234'. [ 523.562147][T22528] veth0_to_bond: default FDB implementation only supports local addresses [ 523.611680][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 523.714348][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 523.884238][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 523.942427][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4242'. [ 523.995002][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 524.144360][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 524.195076][T22565] syzkaller1: entered promiscuous mode [ 524.195102][T22565] syzkaller1: entered allmulticast mode [ 524.248710][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 524.288754][T22572] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4249'. [ 524.295676][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 524.761746][T22597] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4257'. [ 524.761766][T22597] nbd: illegal input index -8454144 [ 524.932104][T22604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4258'. [ 524.989062][T22619] x_tables: duplicate underflow at hook 1 [ 525.130284][T22626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4265'. [ 525.130656][T22626] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 525.362968][T22638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.362990][T22638] IPv6: NLM_F_CREATE should be set when creating new route [ 525.821475][T22660] dvmrp8: entered allmulticast mode [ 526.143538][T22681] x_tables: duplicate underflow at hook 1 [ 526.182402][T22677] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 526.226627][T22677] bond7 (unregistering): Released all slaves [ 527.975221][ T50] net_ratelimit: 28 callbacks suppressed [ 527.975243][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 528.087639][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 528.214862][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 528.324249][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 528.435121][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 528.545212][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 528.569783][T22808] FAULT_INJECTION: forcing a failure. [ 528.569783][T22808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 528.569820][T22808] CPU: 0 UID: 0 PID: 22808 Comm: syz.3.4308 Not tainted syzkaller #0 PREEMPT(full) [ 528.569846][T22808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.569860][T22808] Call Trace: [ 528.569869][T22808] [ 528.569879][T22808] dump_stack_lvl+0xe8/0x150 [ 528.569917][T22808] should_fail_ex+0x410/0x560 [ 528.569949][T22808] _copy_from_user+0x2d/0xb0 [ 528.569980][T22808] kstrtouint_from_user+0xd6/0x180 [ 528.570007][T22808] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 528.570038][T22808] ? lock_acquire+0x115/0x350 [ 528.570065][T22808] proc_fail_nth_write+0x8e/0x210 [ 528.570087][T22808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 528.570132][T22808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 528.570168][T22808] vfs_write+0x296/0xba0 [ 528.570209][T22808] ? __pfx_vfs_write+0x10/0x10 [ 528.570242][T22808] ? __fget_files+0x2a/0x420 [ 528.570275][T22808] ? __fget_files+0x3a2/0x420 [ 528.570305][T22808] ? __fget_files+0x2a/0x420 [ 528.570345][T22808] ksys_write+0x150/0x270 [ 528.570382][T22808] ? __pfx_ksys_write+0x10/0x10 [ 528.570434][T22808] do_syscall_64+0x166/0x520 [ 528.570462][T22808] ? trace_irq_disable+0x3b/0x140 [ 528.570485][T22808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.570509][T22808] ? clear_bhb_loop+0x70/0xc0 [ 528.570539][T22808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.570562][T22808] RIP: 0033:0x7f16a435e98e [ 528.570583][T22808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 528.570603][T22808] RSP: 002b:00007f16a52f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.570628][T22808] RAX: ffffffffffffffda RBX: 00007f16a52f76c0 RCX: 00007f16a435e98e [ 528.570645][T22808] RDX: 0000000000000001 RSI: 00007f16a52f70a0 RDI: 0000000000000005 [ 528.570669][T22808] RBP: 00007f16a52f7090 R08: 0000000000000000 R09: 0000000000000000 [ 528.570683][T22808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.570696][T22808] R13: 00007f16a4626038 R14: 00007f16a4625fa0 R15: 00007ffc8d89d958 [ 528.570732][T22808] [ 528.669381][T22809] xt_hashlimit: size too large, truncated to 1048576 [ 528.672795][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 528.761412][T22810] __nla_validate_parse: 3 callbacks suppressed [ 528.761467][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4309'. [ 528.784827][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 528.885595][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 528.994243][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 529.437393][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 529.439044][T22770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4301'. [ 529.930160][T22851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4318'. [ 529.930206][T22851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4318'. [ 530.016359][T22859] validate_nla: 4 callbacks suppressed [ 530.016383][T22859] netlink: 'syz.2.4318': attribute type 30 has an invalid length. [ 530.093925][T22859] bond5: option arp_missed_max: invalid value (0) [ 530.093949][T22859] bond5: option arp_missed_max: allowed values 1 - 255 [ 530.126616][T22859] bond5 (unregistering): Released all slaves [ 530.146618][T22853] netlink: 'syz.4.4319': attribute type 6 has an invalid length. [ 530.146640][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 530.334756][T22881] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 530.334779][T22881] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 530.334793][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 530.339571][T22881] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 530.339592][T22881] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 530.339606][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 530.339863][T22881] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 530.339878][T22881] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 530.339892][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 530.340115][T22881] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 530.340131][T22881] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 530.340145][T22881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 530.576607][T22889] sctp: [Deprecated]: syz.2.4330 (pid 22889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.576607][T22889] Use struct sctp_sack_info instead [ 530.789225][T22895] bond4: (slave gretap3): making interface the new active one [ 530.792070][T22895] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 530.947202][T22905] tipc: MTU too low for tipc bearer [ 530.980722][T22907] team0: Device gtp0 is up. Set it down before adding it as a team port [ 531.053030][T22911] xt_TCPMSS: Only works on TCP SYN packets [ 531.199127][ T5630] Bluetooth: hci4: connection err: -111 [ 532.127144][T22968] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 532.127171][T22968] CPU: 0 UID: 0 PID: 22968 Comm: syz.2.4352 Not tainted syzkaller #0 PREEMPT(full) [ 532.127198][T22968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.127213][T22968] Call Trace: [ 532.127223][T22968] [ 532.127232][T22968] dump_stack_lvl+0xe8/0x150 [ 532.127273][T22968] sysfs_warn_dup+0x8e/0xa0 [ 532.127310][T22968] sysfs_do_create_link_sd+0xc0/0x110 [ 532.127348][T22968] device_add_class_symlinks+0x1cf/0x240 [ 532.127379][T22968] device_add+0x467/0xb80 [ 532.127405][T22968] wiphy_register+0x1fc8/0x2ff0 [ 532.127447][T22968] ? __pfx_wiphy_register+0x10/0x10 [ 532.127471][T22968] ? __pfx_netdev_run_todo+0x10/0x10 [ 532.127507][T22968] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 532.127550][T22968] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 532.127582][T22968] ieee80211_register_hw+0x3dbb/0x4b00 [ 532.127625][T22968] ? ieee80211_register_hw+0x1941/0x4b00 [ 532.127693][T22968] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 532.127743][T22968] ? __asan_memset+0x22/0x50 [ 532.127780][T22968] ? __hrtimer_setup+0x1b7/0x260 [ 532.127811][T22968] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 532.127845][T22968] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 532.127907][T22968] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 532.127934][T22968] ? kstrndup+0xbd/0x160 [ 532.127964][T22968] ? kstrndup+0xbd/0x160 [ 532.127990][T22968] hwsim_new_radio_nl+0xd8b/0xf90 [ 532.128043][T22968] genl_family_rcv_msg_doit+0x233/0x340 [ 532.128082][T22968] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.128126][T22968] ? bpf_lsm_capable+0x9/0x20 [ 532.128147][T22968] ? security_capable+0x7e/0x2c0 [ 532.128184][T22968] genl_rcv_msg+0x614/0x7a0 [ 532.128220][T22968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.128248][T22968] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 532.128297][T22968] netlink_rcv_skb+0x226/0x4a0 [ 532.128336][T22968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.128367][T22968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.128421][T22968] ? down_read+0x2be/0x330 [ 532.128458][T22968] genl_rcv+0x28/0x40 [ 532.128484][T22968] netlink_unicast+0x7bd/0x940 [ 532.128530][T22968] netlink_sendmsg+0x813/0xb40 [ 532.128578][T22968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.128624][T22968] ? apparmor_socket_sendmsg+0x98/0x360 [ 532.128654][T22968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.128688][T22968] sock_sendmsg_nosec+0x13a/0x180 [ 532.128715][T22968] ____sys_sendmsg+0x54e/0x850 [ 532.128754][T22968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.128820][T22968] ? import_iovec+0x73/0xa0 [ 532.128855][T22968] ___sys_sendmsg+0x2a5/0x360 [ 532.128885][T22968] ? __lock_acquire+0x747/0x2de0 [ 532.128915][T22968] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.128951][T22968] ? futex_wait+0x2a2/0x390 [ 532.129030][T22968] ? __fget_files+0x2a/0x420 [ 532.129062][T22968] ? __fget_files+0x3a2/0x420 [ 532.129107][T22968] __x64_sys_sendmsg+0x1b1/0x290 [ 532.129142][T22968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.129200][T22968] do_syscall_64+0x166/0x520 [ 532.129227][T22968] ? trace_irq_disable+0x3b/0x140 [ 532.129250][T22968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.129273][T22968] ? clear_bhb_loop+0x70/0xc0 [ 532.129301][T22968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.129326][T22968] RIP: 0033:0x7ff5b4b9e159 [ 532.129349][T22968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.129370][T22968] RSP: 002b:00007ff5b5a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.129395][T22968] RAX: ffffffffffffffda RBX: 00007ff5b4e26090 RCX: 00007ff5b4b9e159 [ 532.129412][T22968] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000009 [ 532.129428][T22968] RBP: 00007ff5b4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 532.129444][T22968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.129458][T22968] R13: 00007ff5b4e26128 R14: 00007ff5b4e26090 R15: 00007ffd565ee888 [ 532.129495][T22968] [ 532.700363][T22988] xt_ecn: cannot match TCP bits for non-tcp packets [ 532.784021][T22991] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 532.803445][T22991] IPVS: stopping master sync thread 22992 ... [ 533.065227][ T35] net_ratelimit: 30 callbacks suppressed [ 533.065250][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 533.176082][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 533.285851][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 533.415032][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 533.524772][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 533.772649][T23037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.792120][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 533.894970][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 534.004493][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 534.114404][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 534.336970][T23073] __nla_validate_parse: 37 callbacks suppressed [ 534.336992][T23073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4376'. [ 534.431049][T23075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4377'. [ 534.535858][T23084] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4380'. [ 534.536182][T23084] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.731196][T23117] team0: Cannot enslave team device to itself [ 536.843908][T23122] validate_nla: 62 callbacks suppressed [ 536.843939][T23122] netlink: 'syz.4.4391': attribute type 21 has an invalid length. [ 536.843956][T23122] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4391'. [ 536.844008][T23122] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4391'. [ 537.147390][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.147586][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.147768][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.147957][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.151566][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.151754][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.151931][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.152149][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.152324][T23128] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 537.711727][ T9260] IPVS: starting estimator thread 0... [ 537.794277][T23154] IPVS: using max 24 ests per chain, 57600 per kthread [ 538.104433][ T9255] net_ratelimit: 35 callbacks suppressed [ 538.104456][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 538.192330][T23178] xt_TCPMSS: Only works on TCP SYN packets [ 538.214959][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 538.229462][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4406'. [ 538.324973][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 538.447949][T23193] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4409'. [ 538.448015][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4409'. [ 538.458604][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 538.528938][T23190] syzkaller0: entered promiscuous mode [ 538.528964][T23190] syzkaller0: entered allmulticast mode [ 538.632975][T23200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4414'. [ 538.653349][T23200] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 538.685472][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 538.814252][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 538.836988][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'. [ 539.116082][T23225] vlan2: entered allmulticast mode [ 539.116107][T23225] veth0_vlan: entered allmulticast mode [ 539.124277][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 539.235120][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 539.344229][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 539.351927][T23250] __nla_validate_parse: 8 callbacks suppressed [ 539.351946][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'. [ 539.434980][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 539.454394][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 539.456122][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'. [ 539.569825][T23259] bond5: entered promiscuous mode [ 540.328841][T23312] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 540.532260][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 540.532291][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 540.574972][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4442'. [ 541.247168][T23360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4453'. [ 541.353778][T23364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.598764][T23377] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.612071][T23377] bond0: (slave team0): Enslaving as an active interface with an up link [ 541.822240][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'. [ 541.822497][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'. [ 541.822725][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'. [ 541.822956][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4463'. [ 541.886003][T23396] pim6reg1: entered promiscuous mode [ 541.886026][T23396] pim6reg1: entered allmulticast mode [ 542.192342][T23414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.192364][T23414] IPv6: NLM_F_CREATE should be set when creating new route [ 542.253329][T23419] bridge_slave_1: default FDB implementation only supports local addresses [ 542.499031][T23428] validate_nla: 30 callbacks suppressed [ 542.499055][T23428] netlink: 'syz.4.4472': attribute type 1 has an invalid length. [ 543.197453][T10320] net_ratelimit: 34 callbacks suppressed [ 543.197475][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 543.304444][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 543.329938][T23439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 543.330060][T23439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 543.414635][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 543.545314][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 543.654240][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 543.765002][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 543.875087][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 543.984358][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 544.094554][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 544.205032][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 546.176499][T23479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.189955][T23505] netlink: 'syz.1.4490': attribute type 1 has an invalid length. [ 546.189978][T23505] __nla_validate_parse: 11 callbacks suppressed [ 546.189992][T23505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4490'. [ 546.567969][T23523] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 546.573871][T23523] IPVS: set_ctl: invalid protocol: 2470 158.0.0.0:0 [ 546.650132][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 546.696436][T23534] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 547.259690][T23516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.558543][T23558] netlink: 'syz.0.4507': attribute type 21 has an invalid length. [ 547.558568][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 547.559634][T23559] netlink: 'syz.0.4507': attribute type 21 has an invalid length. [ 547.559653][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 547.560447][T23558] netlink: 'syz.0.4507': attribute type 21 has an invalid length. [ 547.560464][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 547.561321][T23559] netlink: 'syz.0.4507': attribute type 21 has an invalid length. [ 547.561340][T23559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 547.746688][T23562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.781516][T23569] netlink: 'syz.2.4511': attribute type 1 has an invalid length. [ 547.893503][T23569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.952590][T23578] bond6: (slave geneve3): making interface the new active one [ 547.962950][T23578] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 548.260931][T23599] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.262327][T23599] bridge0: port 3(bond7) entered blocking state [ 548.268985][T23599] bridge0: port 3(bond7) entered disabled state [ 548.281136][T23599] bond7: entered allmulticast mode [ 548.296602][T23599] bond7: entered promiscuous mode [ 548.308897][T23599] bridge0: port 3(bond7) entered blocking state [ 548.309228][T23599] bridge0: port 3(bond7) entered forwarding state [ 548.326691][T10320] net_ratelimit: 33 callbacks suppressed [ 548.326714][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 548.335436][T23609] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4520'. [ 548.412542][T23599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.413433][T23599] bridge0: port 4(bond8) entered blocking state [ 548.413545][T23599] bridge0: port 4(bond8) entered disabled state [ 548.413716][T23599] bond8: entered allmulticast mode [ 548.444933][T23599] bond8: entered promiscuous mode [ 548.445621][T23599] bridge0: port 4(bond8) entered blocking state [ 548.446071][T23599] bridge0: port 4(bond8) entered forwarding state [ 548.448414][ T9260] bridge0: port 3(bond7) entered disabled state [ 548.450469][ T9260] bridge0: port 4(bond8) entered disabled state [ 548.512024][T23599] 8021q: adding VLAN 0 to HW filter on device bond9 [ 548.512922][T23599] bridge0: port 5(bond9) entered blocking state [ 548.513030][T23599] bridge0: port 5(bond9) entered disabled state [ 548.513164][T23599] bond9: entered allmulticast mode [ 548.536223][T23599] bond9: entered promiscuous mode [ 548.565815][T23599] bridge0: port 5(bond9) entered blocking state [ 548.565942][T23599] bridge0: port 5(bond9) entered forwarding state [ 548.663339][T23599] 8021q: adding VLAN 0 to HW filter on device bond10 [ 548.673679][T23599] bridge0: port 6(bond10) entered blocking state [ 548.673803][T23599] bridge0: port 6(bond10) entered disabled state [ 548.687824][T23599] bond10: entered allmulticast mode [ 548.693778][T23599] bond10: entered promiscuous mode [ 548.715161][T23599] bridge0: port 6(bond10) entered blocking state [ 548.715277][T23599] bridge0: port 6(bond10) entered forwarding state [ 548.832011][T23599] 8021q: adding VLAN 0 to HW filter on device bond11 [ 548.832918][T23599] bridge0: port 7(bond11) entered blocking state [ 548.833026][T23599] bridge0: port 7(bond11) entered disabled state [ 548.833162][T23599] bond11: entered allmulticast mode [ 548.863221][T23599] bond11: entered promiscuous mode [ 548.864022][T23599] bridge0: port 7(bond11) entered blocking state [ 548.864200][T23599] bridge0: port 7(bond11) entered forwarding state [ 548.956776][T23599] 8021q: adding VLAN 0 to HW filter on device bond12 [ 548.957569][T23599] bridge0: port 8(bond12) entered blocking state [ 548.957676][T23599] bridge0: port 8(bond12) entered disabled state [ 548.957810][T23599] bond12: entered allmulticast mode [ 548.960404][T23599] bond12: entered promiscuous mode [ 548.961106][T23599] bridge0: port 8(bond12) entered blocking state [ 548.961215][T23599] bridge0: port 8(bond12) entered forwarding state [ 549.013031][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 549.061667][T23629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4523'. [ 549.114526][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 549.224607][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 549.421563][T23638] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 549.439637][T23645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4528'. [ 549.455294][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 549.524952][T23644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4528'. [ 549.545540][ T9255] bridge0: port 5(bond9) entered disabled state [ 549.557864][ T9255] bridge0: port 6(bond10) entered disabled state [ 549.578385][ T9255] bridge0: port 7(bond11) entered disabled state [ 549.596841][ T9255] bridge0: port 8(bond12) entered disabled state [ 549.605107][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 549.715412][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 549.742626][T23656] 0XD: renamed from gretap0 (while UP) [ 549.752446][T23656] 0XD: entered allmulticast mode [ 549.824269][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 549.848554][T23664] sock: sock_set_timeout: `syz.2.4534' (pid 23664) tries to set negative timeout [ 549.850893][T23664] sock: sock_set_timeout: `syz.2.4534' (pid 23664) tries to set negative timeout [ 550.090429][T23677] netlink: 'syz.1.4537': attribute type 4 has an invalid length. [ 550.092138][T23679] netlink: 'syz.1.4537': attribute type 4 has an invalid length. [ 550.131004][T23679] netlink: 'syz.1.4537': attribute type 4 has an invalid length. [ 550.132492][T23682] netlink: 'syz.1.4537': attribute type 29 has an invalid length. [ 550.162035][T23679] netlink: 'syz.1.4537': attribute type 4 has an invalid length. [ 550.772486][T23714] bridge_slave_0: invalid flags given to default FDB implementation [ 551.102354][T23742] bond13: (slave gretap1): making interface the new active one [ 551.103261][T23742] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 551.154315][T23755] xt_hashlimit: max too large, truncated to 1048576 [ 551.210824][T23754] __nla_validate_parse: 35 callbacks suppressed [ 551.210853][T23754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4555'. [ 551.317143][T23744] vlan2: entered allmulticast mode [ 551.317166][T23744] bond0: entered allmulticast mode [ 551.384038][T23755] xt_CT: No such helper "snmp" [ 551.526688][T23766] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 551.527471][T23766] sctp: [Deprecated]: syz.2.4559 (pid 23766) Use of int in maxseg socket option. [ 551.527471][T23766] Use struct sctp_assoc_value instead [ 551.785189][T23777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4562'. [ 551.818487][T23780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4562'. [ 551.863850][T23781] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4564'. [ 551.993229][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'. [ 552.181375][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'. [ 552.450621][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4572'. [ 552.522438][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4561'. [ 552.522473][T23769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4561'. [ 552.656342][T23769] geneve4: entered promiscuous mode [ 552.656366][T23769] geneve4: entered allmulticast mode [ 552.960854][T23835] validate_nla: 86 callbacks suppressed [ 552.960877][T23835] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 552.962359][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4576'. [ 553.357724][ T9260] net_ratelimit: 23 callbacks suppressed [ 553.357753][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 553.685147][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 553.800183][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 553.945231][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 553.970346][T23892] veth0: entered promiscuous mode [ 553.987324][T23890] veth0: left promiscuous mode [ 554.054796][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 554.165222][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 554.399322][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 554.401374][T23911] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 554.419124][ T920] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 554.505365][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 554.808911][T23933] bond3: (slave bond0): Releasing active interface [ 554.887190][T23933] bridge_slave_1: left allmulticast mode [ 554.887219][T23933] bridge_slave_1: left promiscuous mode [ 554.887448][T23933] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.940804][T23933] bond0: (slave bond_slave_0): Releasing backup interface [ 554.968685][T23933] bond0: (slave bond_slave_1): Releasing backup interface [ 555.013633][T23933] team0: Port device team_slave_0 removed [ 555.033629][T23933] team0: Port device team_slave_1 removed [ 555.047814][T23933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.047840][T23933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.050550][T23933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.050573][T23933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.313726][T24012] __nla_validate_parse: 8 callbacks suppressed [ 556.313748][T24012] netlink: 23 bytes leftover after parsing attributes in process `syz.4.4618'. [ 556.920125][T24032] pim6reg: entered allmulticast mode [ 556.932168][T24032] pim6reg: left allmulticast mode [ 557.014589][T24009] infiniband syz1: set active [ 557.014611][T24009] infiniband syz1: added team0 [ 557.053458][T24009] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 557.053501][T24009] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 557.053546][T24009] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 557.236580][T24009] RDS/IB: syz1: added [ 557.236642][T24009] smc: adding ib device syz1 with port count 1 [ 557.236663][T24009] smc: ib device syz1 port 1 has no pnetid [ 557.563008][T24043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4626'. [ 557.699438][T24046] x_tables: duplicate entry at hook 4 [ 557.991553][T24058] syzkaller1: entered promiscuous mode [ 557.991577][T24058] syzkaller1: entered allmulticast mode [ 558.105587][T24063] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 558.105612][T24063] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4634'. [ 558.112767][T24063] sctp: [Deprecated]: syz.1.4634 (pid 24063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.112767][T24063] Use struct sctp_sack_info instead [ 558.152177][T24063] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 558.152201][T24063] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4634'. [ 558.428336][T10320] net_ratelimit: 25 callbacks suppressed [ 558.428361][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 558.534257][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 558.610703][T24071] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 558.644567][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 558.754885][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 558.790942][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'. [ 558.864314][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 558.976364][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 559.084383][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 559.099531][T24086] syzkaller0: entered promiscuous mode [ 559.099595][T24086] syzkaller0: entered allmulticast mode [ 559.177962][T24086] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 559.214400][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 559.230124][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'. [ 559.230227][T24086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4640'. [ 559.324714][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 559.361182][T24098] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 559.435084][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 559.527164][T24101] bond14: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 559.559869][T24101] bond14 (unregistering): Released all slaves [ 559.659243][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4647'. [ 559.682589][T24109] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4648'. [ 559.709450][T24106] : renamed from lo (while UP) [ 559.877589][T24117] vcan0: tx address claim with dest, not broadcast [ 559.931133][T24120] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 560.150889][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4654'. [ 560.219068][T24138] Cannot find del_set index 4 as target [ 560.464717][T24155] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.467540][T24153] syzkaller1: entered promiscuous mode [ 560.467565][T24153] syzkaller1: entered allmulticast mode [ 560.511974][T24155] ip6gre1: entered allmulticast mode [ 560.525781][ T9255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.289190][T24183] netlink: 'syz.3.4668': attribute type 22 has an invalid length. [ 561.395306][T24183] __nla_validate_parse: 5 callbacks suppressed [ 561.395327][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4668'. [ 561.395355][T24183] netlink: 'syz.3.4668': attribute type 22 has an invalid length. [ 561.395369][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4668'. [ 561.560676][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'. [ 561.689590][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 561.690029][T24207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4671'. [ 562.063363][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 562.297176][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4676'. [ 562.529245][T24245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4680'. [ 562.553606][T24251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4680'. [ 562.733531][T24255] netlink: 'syz.4.4681': attribute type 3 has an invalid length. [ 562.912968][ T5628] Bluetooth: hci3: link tx timeout [ 562.913198][ T5628] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 562.950687][T24262] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4683'. [ 563.063515][T24271] netlink: 'syz.2.4686': attribute type 4 has an invalid length. [ 563.205477][T24281] netlink: 'syz.2.4688': attribute type 4 has an invalid length. [ 563.381588][T24284] vlan3: entered promiscuous mode [ 563.381613][T24284] bridge0: entered promiscuous mode [ 563.423821][T24287] netlink: 'syz.2.4690': attribute type 1 has an invalid length. [ 563.524341][ T9260] net_ratelimit: 34 callbacks suppressed [ 563.524367][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 563.634401][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 563.744320][ T9260] bond1: (slave dummy0): failed to get link speed/duplex [ 563.854471][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 563.964293][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 564.075174][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 564.184967][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 564.294442][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 564.394619][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.405748][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 564.514578][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 564.955560][ T5628] Bluetooth: hci3: command 0x0405 tx timeout [ 566.017206][T24269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.557073][T24338] __nla_validate_parse: 5 callbacks suppressed [ 566.557097][T24338] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4702'. [ 566.651434][T24348] netlink: 'syz.3.4707': attribute type 11 has an invalid length. [ 566.739073][T24355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4707'. [ 566.913471][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 566.939321][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 567.181195][T24372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4712'. [ 567.238387][T24380] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4713'. [ 567.305274][T24383] veth1_vlan: left promiscuous mode [ 567.710352][T24401] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4718'. [ 567.855958][T24412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4721'. [ 567.916949][T24412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4721'. [ 567.990012][T24416] dvmrp1: entered allmulticast mode [ 568.165120][T24425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4723'. [ 569.094250][ T9255] net_ratelimit: 34 callbacks suppressed [ 569.094274][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 569.206310][ T9263] bond1: (slave dummy0): failed to get link speed/duplex [ 569.315445][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 569.424262][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 569.537750][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 569.644215][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 569.766777][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 569.875776][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 569.984215][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 570.056960][T24523] netlink: 'syz.1.4748': attribute type 3 has an invalid length. [ 570.172691][T24527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.186983][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 570.664368][T24550] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 570.690030][T24550] xt_hashlimit: size too large, truncated to 1048576 [ 570.740033][T24559] C: renamed from lo [ 571.033928][T24552] bond0 (unregistering): Released all slaves [ 571.911288][T24617] netlink: 'syz.3.4769': attribute type 1 has an invalid length. [ 571.982457][T24625] __nla_validate_parse: 6 callbacks suppressed [ 571.982478][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 572.043000][T24631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4773'. [ 572.149773][T24641] netlink: 'syz.1.4775': attribute type 1 has an invalid length. [ 572.289846][T24656] team0: Device gtp0 is up. Set it down before adding it as a team port [ 572.365232][T24657] team0: Device gtp0 is up. Set it down before adding it as a team port [ 572.428861][T24661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4779'. [ 572.448170][T24661] batadv_slave_1: entered allmulticast mode [ 572.465068][T24660] batadv_slave_1: left allmulticast mode [ 572.554487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.598142][T24670] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 573.101954][T24702] syzkaller1: entered promiscuous mode [ 573.101979][T24702] syzkaller1: entered allmulticast mode [ 573.131955][T24711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4789'. [ 573.375137][T24718] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4791'. [ 573.375968][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4791'. [ 573.375991][T24719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4791'. [ 573.377172][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4791'. [ 573.611413][T24728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4792'. [ 573.623968][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4792'. [ 573.831507][T24735] nbd: must specify a device to reconfigure [ 574.133109][T24752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 574.226184][ T50] net_ratelimit: 30 callbacks suppressed [ 574.226212][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 574.378754][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 574.498849][T24767] netlink: 'syz.2.4803': attribute type 21 has an invalid length. [ 574.575340][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 574.685032][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 574.795494][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 574.904654][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 574.942538][T24787] netlink: 'syz.2.4811': attribute type 20 has an invalid length. [ 574.952608][T24787] netlink: 'syz.2.4811': attribute type 20 has an invalid length. [ 575.014282][ T35] bond1: (slave dummy0): failed to get link speed/duplex [ 575.107749][T24800] netlink: 'syz.1.4813': attribute type 11 has an invalid length. [ 575.126670][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 575.235620][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 575.285418][T24807] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 575.344541][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 575.427696][T24810] netlink: 'syz.4.4817': attribute type 2 has an invalid length. [ 575.478785][T24815] macvtap1: entered promiscuous mode [ 575.479093][T24815] macvtap1: entered allmulticast mode [ 575.990530][T24848] xt_hashlimit: invalid interval [ 576.038891][T24846] IPv6: Can't replace route, no match found [ 576.655912][T24882] netlink: 'syz.2.4837': attribute type 10 has an invalid length. [ 576.725824][T24881] bridge0: port 1(vlan0) entered blocking state [ 576.725986][T24881] bridge0: port 1(vlan0) entered disabled state [ 576.726131][T24881] vlan0: entered allmulticast mode [ 576.726143][T24881] geneve0: entered allmulticast mode [ 576.772533][T24894] x_tables: duplicate underflow at hook 1 [ 576.938586][T24899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.002840][T24899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.080507][T24900] netlink: 'syz.1.4842': attribute type 5 has an invalid length. [ 577.638087][T24933] __nla_validate_parse: 87 callbacks suppressed [ 577.638109][T24933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4849'. [ 577.774565][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 577.906445][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 577.992155][T24940] bond15: (slave bridge2): Enslaving as an active interface with an up link [ 577.992458][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 578.029623][T24933] bond15: (slave bridge3): Enslaving as an active interface with an up link [ 578.051036][T24960] netlink: 'syz.4.4853': attribute type 2 has an invalid length. [ 578.065517][T24960] netlink: 'syz.4.4853': attribute type 2 has an invalid length. [ 578.161342][T24940] bond15: (slave bridge4): Enslaving as an active interface with an up link [ 578.161644][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 578.252030][T24940] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 578.252130][T24957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4852'. [ 578.258172][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 578.354822][T24940] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 578.355103][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 578.415018][T24940] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 578.415313][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 578.415377][T24970] netlink: 'syz.2.4856': attribute type 3 has an invalid length. [ 578.486958][T24940] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 578.581044][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4860'. [ 579.334998][T10319] net_ratelimit: 29 callbacks suppressed [ 579.335024][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 579.465722][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 579.577443][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 579.684235][T10319] bond1: (slave dummy0): failed to get link speed/duplex [ 579.797370][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 579.907248][ T9255] bond1: (slave dummy0): failed to get link speed/duplex [ 580.015739][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 580.018876][T25040] netlink: 'syz.4.4875': attribute type 21 has an invalid length. [ 580.018949][T25040] netlink: 'syz.4.4875': attribute type 5 has an invalid length. [ 580.110696][T25044] Cannot find map_set index 135 as target [ 580.124535][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 580.236321][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 580.251508][T25053] tipc: Enabled bearer , priority 0 [ 580.266717][T25053] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 580.285262][T25053] tipc: Resetting bearer [ 580.344308][T10320] bond1: (slave dummy0): failed to get link speed/duplex [ 581.055347][T25092] geneve3: entered promiscuous mode [ 581.055374][T25092] geneve3: entered allmulticast mode [ 581.140983][T25090] tipc: New replicast peer: 172.20.20.187 [ 581.150312][T25090] tipc: Enabled bearer , priority 10 [ 581.578802][T25123] netlink: 'syz.3.4897': attribute type 10 has an invalid length. [ 581.581567][T25125] netlink: 'syz.3.4897': attribute type 10 has an invalid length. [ 581.969152][T25149] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.046458][T25149] bridge_slave_1 (unregistering): left allmulticast mode [ 582.047905][T25149] bridge_slave_1 (unregistering): left promiscuous mode [ 582.047996][T25149] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.255071][ T25] tipc: Node number set to 3494523749 [ 582.462408][T25167] sctp: [Deprecated]: syz.3.4909 (pid 25167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.462408][T25167] Use struct sctp_sack_info instead [ 582.497795][T25173] netlink: 'syz.2.4910': attribute type 32 has an invalid length. [ 582.809371][T25191] __nla_validate_parse: 18 callbacks suppressed [ 582.809396][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'. [ 583.067140][T25212] netlink: 'syz.4.4918': attribute type 1 has an invalid length. [ 583.087717][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4918'. [ 583.133855][T25215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4922'. [ 583.160673][T25215] 8021q: VLANs not supported on ip_vti0 [ 583.238814][T25220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4924'. [ 583.355416][T25230] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4927'. [ 583.375748][T25230] tipc: Enabling of bearer rejected, already enabled [ 583.464492][T25236] netlink: 'syz.0.4928': attribute type 10 has an invalid length. [ 583.498938][T25236] bond1: (slave dummy0): Releasing backup interface [ 583.526798][T25236] team0: Device dummy0 is of different type [ 583.719326][T25240] bond0: invalid NS target ff00:: specified for addition [ 583.719356][T25240] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 584.092128][T25261] netlink: 'syz.3.4938': attribute type 4 has an invalid length. [ 584.308799][T25273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4944'. [ 584.336372][T25268] syzkaller1: entered promiscuous mode [ 584.336397][T25268] syzkaller1: entered allmulticast mode [ 584.396428][T25274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.136746][T25312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4956'. [ 585.248378][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4956'. [ 585.248409][T25314] nbd: device at index 64 is going down [ 585.461415][T18693] udevd[18693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 585.611083][T25324] macvtap1: entered promiscuous mode [ 585.612382][T25324] macvtap1: entered allmulticast mode [ 585.612407][T25324] veth1_vlan: entered allmulticast mode [ 585.792951][T25332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4962'. [ 585.792974][T25332] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4962'. [ 586.159031][T25350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.178909][T25356] netlink: 'syz.2.4971': attribute type 10 has an invalid length. [ 586.204273][T25353] mac80211_hwsim hwsim40 : renamed from wlan1 (while UP) [ 586.234874][T25360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.300095][T25364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.393369][T25369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.495864][T25370] vlan4: entered promiscuous mode [ 586.495894][T25370] 0XD: entered promiscuous mode [ 586.677032][T25382] IPVS: set_ctl: invalid protocol: 61987 172.20.20.40:20003 [ 586.782513][T25386] ip6gre2: entered promiscuous mode [ 586.782536][T25386] ip6gre2: entered allmulticast mode [ 587.179517][T25421] tipc: Started in network mode [ 587.179546][T25421] tipc: Node identity 4, cluster identity 11 [ 587.179560][T25421] tipc: Node number set to 4 [ 587.180021][T25421] tipc: Cannot configure node identity twice [ 587.315256][T25432] pimreg3: entered allmulticast mode [ 587.528443][T25437] netlink: 'syz.2.4993': attribute type 1 has an invalid length. [ 587.632751][T25437] 8021q: adding VLAN 0 to HW filter on device bond9 [ 587.696652][T25452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.736174][T25452] bond9: (slave bond0): Enslaving as a backup interface with an up link [ 587.770546][T25454] x_tables: duplicate underflow at hook 2 [ 587.924371][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.960224][T25460] __nla_validate_parse: 40 callbacks suppressed [ 587.960247][T25460] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5001'. [ 588.113661][T25468] netlink: 'syz.4.5003': attribute type 10 has an invalid length. [ 588.133316][T25468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.152621][T25468] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 588.218276][T25477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5006'. [ 588.243661][T25439] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 588.243681][T25439] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 588.289001][T25469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.312275][T25469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.330835][T25469] bond0 (unregistering): (slave team0): Releasing backup interface [ 588.348841][T25469] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 588.363101][T25469] bond0 (unregistering): Released all slaves [ 588.516175][T25439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.516201][T25439] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 588.623434][T25491] net_ratelimit: 23 callbacks suppressed [ 588.623458][T25491] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 588.671428][T25495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5013'. [ 588.755648][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5012'. [ 589.053849][T25439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.053877][T25439] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 589.169757][T25439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.169785][T25439] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 589.421897][T25527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5022'. [ 589.568201][T25535] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 589.570137][T25536] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 589.613322][T25539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5026'. [ 589.613786][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5026'. [ 589.872725][T25556] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5029'. [ 590.147123][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5032'. [ 590.147154][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5032'. [ 590.192852][T25561] ip_tables: iptables: counters copy to user failed while replacing table [ 590.276064][T25570] openvswitch: netlink: Flow key attr not present in new flow. [ 590.412782][T25572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.412800][T25572] IPv6: NLM_F_CREATE should be set when creating new route [ 590.412848][T25572] IPv6: NLM_F_CREATE should be set when creating new route [ 591.768715][T25638] batadv_slave_0: entered promiscuous mode [ 591.826577][T25640] dvmrp1: entered allmulticast mode [ 591.969863][T25647] set match dimension is over the limit! [ 592.477681][T25631] batadv_slave_0: left promiscuous mode [ 592.832055][T25700] netlink: 'syz.2.5070': attribute type 7 has an invalid length. [ 593.327755][T25726] __nla_validate_parse: 9 callbacks suppressed [ 593.327777][T25726] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5077'. [ 593.327800][T25726] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5077'. [ 594.014493][T25763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5088'. [ 594.049832][T25757] gre0 speed is unknown, defaulting to 1000 [ 594.485731][T25757] wg1 speed is unknown, defaulting to 1000 [ 594.534601][T25786] xt_hashlimit: size too large, truncated to 1048576 [ 595.299112][T25817] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 595.779836][T25836] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5108'. [ 595.795119][T25836] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5108'. [ 596.020956][T25845] tipc: Enabling of bearer rejected, already enabled [ 596.686743][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5118'. [ 596.874975][T25865] bridge12: entered promiscuous mode [ 596.875031][T25865] bridge12: entered allmulticast mode [ 596.894211][T25865] netlink: 'syz.3.5119': attribute type 1 has an invalid length. [ 596.894281][T25865] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5119'. [ 597.087170][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5123'. [ 597.358245][T25880] bond18: (slave bond_slave_0): Device is not bonding slave [ 597.358270][T25880] bond18: option active_slave: invalid value (bond_slave_0) [ 597.362241][T25880] bond18 (unregistering): Released all slaves [ 597.553848][T25884] xt_hashlimit: size too large, truncated to 1048576 [ 597.771539][T25905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5130'. [ 597.829897][T25902] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 598.014605][T25914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5133'. [ 598.367701][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 598.370027][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 598.371116][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 598.478514][T25941] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 598.608611][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5138'. [ 598.635680][T25938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5138'. [ 598.658379][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'. [ 598.886987][T25950] bond18: option fail_over_mac: invalid value (16) [ 598.892089][T25950] bond18 (unregistering): Released all slaves [ 599.009371][T25970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.152949][T25977] tun0: tun_chr_ioctl cmd 1074025675 [ 599.152974][T25977] tun0: persist enabled [ 599.170773][T25979] tun0: tun_chr_ioctl cmd 2147767506 [ 599.238089][T25983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 599.458032][T25995] sock: sock_set_timeout: `syz.1.5152' (pid 25995) tries to set negative timeout [ 599.606992][T26003] netlink: 'syz.0.5155': attribute type 1 has an invalid length. [ 599.627253][T26006] netlink: 'syz.3.5156': attribute type 11 has an invalid length. [ 599.647352][T26003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.701720][T25994] syzkaller0: entered promiscuous mode [ 599.701746][T25994] syzkaller0: entered allmulticast mode [ 599.784724][T26011] vlan3: entered allmulticast mode [ 599.784747][T26011] bond0: entered allmulticast mode [ 600.032431][T26028] netlink: 'syz.3.5161': attribute type 5 has an invalid length. [ 600.109145][T26036] netlink: 'syz.0.5164': attribute type 4 has an invalid length. [ 600.388630][T26050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5168'. [ 600.500527][T26055] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 600.532720][T26062] netlink: 'syz.1.5171': attribute type 8 has an invalid length. [ 600.580131][T26055] xt_hashlimit: size too large, truncated to 1048576 [ 600.688710][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 600.805557][T26076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.809098][T26076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.003183][T26087] ip_tables: iptables: counters copy to user failed while replacing table [ 601.091687][T26096] x_tables: duplicate underflow at hook 1 [ 601.229698][T26088] x_tables: duplicate underflow at hook 1 [ 601.532845][T26120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5186'. [ 601.734518][T26125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5188'. [ 601.734576][T26125] openvswitch: netlink: Missing key (keys=40, expected=100) [ 602.252586][T26155] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 602.822246][T26171] openvswitch: netlink: Flow key attr not present in new flow. [ 603.563938][T26214] netlink: 'syz.1.5217': attribute type 1 has an invalid length. [ 603.615733][T26214] 8021q: adding VLAN 0 to HW filter on device bond18 [ 603.709563][T26221] __nla_validate_parse: 6 callbacks suppressed [ 603.709586][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5219'. [ 603.762382][T26214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5217'. [ 603.948487][T26230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5221'. [ 604.017365][ T50] pim6reg: left allmulticast mode [ 604.017489][ T50] dvmrp0: left allmulticast mode [ 604.017559][ T50] dvmrp8: left allmulticast mode [ 604.060387][T26241] netlink: 'syz.3.5225': attribute type 1 has an invalid length. [ 604.350595][T26259] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5230'. [ 604.432200][T26264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5230'. [ 604.463210][ T50] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 604.463239][ T50] ip6gre1 (unregistering): left promiscuous mode [ 604.535926][ T50] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 604.535949][ T50] ip6gre2 (unregistering): left promiscuous mode [ 604.688464][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5229'. [ 604.688509][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5229'. [ 604.856277][ T9263] smc: removing ib device syz0 [ 604.949209][ T50] bond8 (unregistering): (slave geneve5): Releasing active interface [ 604.971763][ T50] bond2 (unregistering): (slave geneve4): Releasing active interface [ 604.985479][ T9263] smbdirect: ib_dev[syz0] removed [ 605.005745][ T50] bond1 (unregistering): (slave geneve3): Releasing active interface [ 605.217021][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.220098][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.222734][ T50] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 605.245168][ T50] bond0 (unregistering): Released all slaves [ 605.316760][ T50] bond1 (unregistering): Released all slaves [ 605.362358][ T50] bond2 (unregistering): Released all slaves [ 605.419783][ T50] bond3 (unregistering): Released all slaves [ 605.454430][ T50] bond4 (unregistering): Released all slaves [ 605.559051][ T50] bond5 (unregistering): Released all slaves [ 605.619512][ T50] bond6 (unregistering): Released all slaves [ 605.683116][ T50] bond7 (unregistering): Released all slaves [ 605.748100][ T50] bond8 (unregistering): Released all slaves [ 605.791426][ T50] bond9 (unregistering): Released all slaves [ 605.855810][ T50] bond10 (unregistering): Released all slaves [ 605.916577][ T50] bond11 (unregistering): Released all slaves [ 606.371448][T26246] bridge13: entered promiscuous mode [ 606.393974][T26246] bond15: (slave bridge13): making interface the new active one [ 606.405809][T26246] bond15: (slave bridge13): Enslaving as an active interface with an up link [ 606.444452][T26251] bridge14: entered promiscuous mode [ 606.450207][T26251] bond15: (slave bridge14): Enslaving as a backup interface with an up link [ 606.582428][T26254] batman_adv: batadv0: Adding interface: wlan1 [ 606.582448][T26254] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.582479][T26254] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 606.758750][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5233'. [ 606.823092][T26287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5237'. [ 606.928004][T26288] tipc: Resetting bearer [ 606.933346][T26288] syzkaller0: left promiscuous mode [ 606.970714][T26288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5234'. [ 607.197564][T26310] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 607.202388][T26311] xt_policy: neither incoming nor outgoing policy selected [ 607.500314][T26321] veth1_to_bond: entered allmulticast mode [ 607.660950][T26319] veth1_to_bond (unregistering): left allmulticast mode [ 607.699239][T26327] netlink: 'syz.1.5245': attribute type 1 has an invalid length. [ 607.890726][T26327] 8021q: adding VLAN 0 to HW filter on device bond19 [ 608.090055][ T50] tipc: Left network mode [ 608.175458][T26347] netlink: 'syz.1.5249': attribute type 2 has an invalid length. [ 608.208287][T26354] x_tables: duplicate underflow at hook 3 [ 608.212593][T26354] syzkaller0: left promiscuous mode [ 608.212617][T26354] syzkaller0: left allmulticast mode [ 608.393151][ T50] IPVS: stopping master sync thread 7692 ... [ 609.001679][T26388] netlink: 'syz.2.5262': attribute type 1 has an invalid length. [ 609.001703][T26388] __nla_validate_parse: 6 callbacks suppressed [ 609.001716][T26388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5262'. [ 609.068158][T26392] tipc: Enabling of bearer rejected, media not registered [ 609.414591][T26408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5266'. [ 609.420315][T26409] ip_tables: iptables: counters copy to user failed while replacing table [ 609.636949][T26421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5272'. [ 609.659807][ T5630] block nbd6: Receive control failed (result -107) [ 609.727382][T26419] netlink: 'syz.0.5271': attribute type 10 has an invalid length. [ 609.837876][T26426] pim6reg: entered allmulticast mode [ 609.877188][T26429] pim6reg: left allmulticast mode [ 609.881087][T26431] xt_ecn: cannot match TCP bits for non-tcp packets [ 610.448171][T26453] sit0: mtu less than device minimum [ 610.592087][T26460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5283'. [ 610.745654][ T50] hsr_slave_0: left promiscuous mode [ 610.759753][ T50] hsr_slave_1: left promiscuous mode [ 610.768821][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.783568][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.797763][ T50] veth1_vlan: left promiscuous mode [ 610.852143][T26479] Cannot find add_set index 65532 as target [ 611.283311][T26510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5289'. [ 611.443312][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5289'. [ 611.453822][T26545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5289'. [ 611.453856][T26545] netlink: 'syz.2.5289': attribute type 15 has an invalid length. [ 611.491903][T26549] netlink: 'syz.3.5292': attribute type 58 has an invalid length. [ 611.491925][T26549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5292'. [ 611.518372][ T50] team0 (unregistering): Port device team_slave_1 removed [ 611.605685][ T50] team0 (unregistering): Port device team_slave_0 removed [ 611.689562][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5293'. [ 612.061762][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5289'. [ 612.063163][T26545] netlink: 'syz.2.5289': attribute type 15 has an invalid length. [ 612.098111][T26592] veth0: entered promiscuous mode [ 612.098382][T26600] veth0: left promiscuous mode [ 612.106087][T26521] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 612.106152][T26521] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 612.106190][T26521] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 612.128188][T26521] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 612.442298][ T50] IPVS: stop unused estimator thread 0... [ 612.897061][T26649] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 613.731981][T26695] Cannot find add_set index 65532 as target [ 613.997253][T26703] syzkaller1: entered promiscuous mode [ 613.997279][T26703] syzkaller1: entered allmulticast mode [ 614.035370][T26703] netlink: 'syz.4.5317': attribute type 1 has an invalid length. [ 614.035395][T26703] __nla_validate_parse: 4 callbacks suppressed [ 614.035487][T26703] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5317'. [ 614.167440][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 614.379053][T26732] Cannot find add_set index 4 as target [ 614.491971][T26738] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 614.491996][T26738] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 614.492281][T26737] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 614.492299][T26737] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 614.504729][T26731] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 614.504789][T26731] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 614.505142][T26731] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 614.505183][T26731] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 614.505517][T26731] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 614.505553][T26731] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 614.667090][T26749] netlink: 'syz.1.5328': attribute type 1 has an invalid length. [ 614.667374][T26748] netlink: 'syz.1.5328': attribute type 1 has an invalid length. [ 614.839732][T26760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5329'. [ 615.129341][T26775] syzkaller0: Caught tx_queue_len zero misconfig [ 615.792871][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5339'. [ 615.821064][T26812] syzkaller0: left allmulticast mode [ 616.097409][T26826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.401685][T26849] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 616.539952][T26849] 8021q: adding VLAN 0 to HW filter on device bond17 [ 616.597916][T26854] bond17: (slave gretap2): making interface the new active one [ 616.617386][T26854] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 617.077891][T26872] vlan3: entered allmulticast mode [ 617.077918][T26872] bond0: entered allmulticast mode [ 617.077935][T26872] bond_slave_0: entered allmulticast mode [ 617.077954][T26872] bond_slave_1: entered allmulticast mode [ 617.552404][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5359'. [ 617.629789][T26902] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 617.826430][ T31] audit: type=1804 audit(1789911183.942:8): pid=26906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5362" name="/newroot/472/cgroup.controllers" dev="tmpfs" ino=2416 res=1 errno=0 [ 617.828695][ T31] audit: type=1800 audit(1789911183.952:9): pid=26906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5362" name="cgroup.controllers" dev="tmpfs" ino=2416 res=0 errno=0 [ 618.279173][T26941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5372'. [ 618.413239][T26943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5374'. [ 618.442531][T26943] syzkaller1: entered promiscuous mode [ 618.442556][T26943] syzkaller1: entered allmulticast mode [ 618.484001][T26948] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5375'. [ 618.723095][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 618.723133][T26960] netlink: 'syz.4.5380': attribute type 10 has an invalid length. [ 618.723150][T26960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5380'. [ 618.749106][T26960] geneve4: entered promiscuous mode [ 618.749177][T26960] geneve4: entered allmulticast mode [ 618.813108][T26963] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5381'. [ 619.118316][T26984] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5386'. [ 619.118344][T26984] nbd: illegal input index 65508 [ 619.669255][T27022] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5399'. [ 619.669443][T27022] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5399'. [ 619.669464][T27022] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5399'. [ 619.718010][T27024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5398'. [ 619.916998][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 620.348495][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 620.472201][T27068] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5414'. [ 620.503883][T27068] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5414'. [ 620.503913][T27068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5414'. [ 620.557339][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 620.710947][T27080] netlink: 'syz.0.5418': attribute type 10 has an invalid length. [ 620.723068][T27080] team0: Device dummy0 is of different type [ 620.763925][T27085] netlink: 'syz.3.5417': attribute type 1 has an invalid length. [ 620.872235][T27092] netlink: 'syz.0.5420': attribute type 33 has an invalid length. [ 620.923434][T27092] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 620.945722][T27092] bond5 (unregistering): Released all slaves [ 621.511286][T27132] net_ratelimit: 31 callbacks suppressed [ 621.511308][T27132] ip_tables: iptables: counters copy to user failed while replacing table [ 622.281262][T27176] IPVS: length: 65314 != 8 [ 622.332059][T27174] IPVS: Scheduler module ip_vs_sip not found [ 622.420257][T27181] bond0: (slave gretap0): Opening slave failed [ 622.536410][T27192] bond0: (slave gretap0): Opening slave failed [ 622.810225][T27212] vxlan: RTM_NEWNEIGH with invalid state 0x40 [ 622.810357][T27212] FAULT_INJECTION: forcing a failure. [ 622.810357][T27212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.810387][T27212] CPU: 1 UID: 0 PID: 27212 Comm: syz.0.5448 Not tainted syzkaller #0 PREEMPT(full) [ 622.810412][T27212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.810427][T27212] Call Trace: [ 622.810444][T27212] [ 622.810453][T27212] dump_stack_lvl+0xe8/0x150 [ 622.810498][T27212] should_fail_ex+0x410/0x560 [ 622.810529][T27212] _copy_to_user+0x31/0xb0 [ 622.810562][T27212] simple_read_from_buffer+0xe1/0x170 [ 622.810600][T27212] proc_fail_nth_read+0x1bb/0x230 [ 622.810635][T27212] ? common_file_perm+0x20e/0x2b0 [ 622.810667][T27212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.810707][T27212] ? rw_verify_area+0x24a/0x4c0 [ 622.810743][T27212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.810778][T27212] vfs_read+0x213/0xa80 [ 622.810818][T27212] ? __pfx___mutex_lock+0x10/0x10 [ 622.810849][T27212] ? __pfx_vfs_read+0x10/0x10 [ 622.810885][T27212] ? __fget_files+0x2a/0x420 [ 622.810921][T27212] ? __fget_files+0x3a2/0x420 [ 622.810951][T27212] ? __fget_files+0x2a/0x420 [ 622.810992][T27212] ksys_read+0x150/0x270 [ 622.811027][T27212] ? __pfx_ksys_read+0x10/0x10 [ 622.811074][T27212] do_syscall_64+0x166/0x520 [ 622.811102][T27212] ? trace_irq_disable+0x3b/0x140 [ 622.811125][T27212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.811149][T27212] ? clear_bhb_loop+0x70/0xc0 [ 622.811177][T27212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.811200][T27212] RIP: 0033:0x7ff98ff5e98e [ 622.811220][T27212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.811239][T27212] RSP: 002b:00007ff990eb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.811270][T27212] RAX: ffffffffffffffda RBX: 00007ff990eb46c0 RCX: 00007ff98ff5e98e [ 622.811287][T27212] RDX: 000000000000000f RSI: 00007ff990eb40a0 RDI: 0000000000000005 [ 622.811305][T27212] RBP: 00007ff990eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 622.811319][T27212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.811333][T27212] R13: 00007ff990226038 R14: 00007ff990225fa0 R15: 00007fff684d5238 [ 622.811368][T27212] [ 623.119142][T27217] bridge_slave_0: invalid flags given to default FDB implementation [ 623.247521][T27225] syzkaller1: entered promiscuous mode [ 623.247547][T27225] syzkaller1: entered allmulticast mode [ 623.252024][T27222] bond0: entered promiscuous mode [ 623.308176][T27226] syzkaller1: left promiscuous mode [ 623.308203][T27226] syzkaller1: left allmulticast mode [ 623.623114][T27246] IPVS: Unknown mcast interface: veth1_to_bridge [ 623.673985][T27248] ip6gre1: entered allmulticast mode [ 623.683044][ T9248] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.849485][T27260] xt_hashlimit: size too large, truncated to 1048576 [ 623.849507][T27260] xt_hashlimit: max too large, truncated to 1048576 [ 623.849535][T27260] xt_hashlimit: invalid rate [ 623.922750][T27262] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 624.186252][T27278] __nla_validate_parse: 31 callbacks suppressed [ 624.186276][T27278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5471'. [ 624.278311][T27288] netlink: 400 bytes leftover after parsing attributes in process `syz.4.5472'. [ 624.299222][T27288] nbd7: detected capacity change from 0 to 63 [ 624.315051][ T5630] block nbd7: Receive control failed (result -104) [ 624.320608][ T4947] block nbd7: Dead connection, failed to find a fallback [ 624.320632][ T4947] block nbd7: shutting down sockets [ 624.321565][ T4947] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.321708][ T4947] Buffer I/O error on dev nbd7, logical block 1, async page read [ 624.323220][ T4947] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.323252][ T4947] Buffer I/O error on dev nbd7, logical block 2, async page read [ 624.323395][ T4947] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.323423][ T4947] Buffer I/O error on dev nbd7, logical block 3, async page read [ 624.590429][T27298] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5475'. [ 624.590457][T27298] veth0_to_bond: default FDB implementation only supports local addresses [ 624.636442][T27303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5476'. [ 624.765460][T27312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5481'. [ 624.791299][T27315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5480'. [ 624.803967][T27318] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5480'. [ 624.938054][T27309] netlink: 'syz.0.5479': attribute type 178 has an invalid length. [ 625.213890][T27340] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5490'. [ 625.213916][T27340] veth0_to_bond: default FDB implementation only supports local addresses [ 625.283619][T27343] netlink: 'syz.2.5492': attribute type 11 has an invalid length. [ 625.301134][T27344] netlink: 'syz.2.5492': attribute type 11 has an invalid length. [ 625.453651][T27353] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 625.523716][T27344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5492'. [ 625.583526][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'. [ 625.900825][T27378] SET target dimension over the limit! [ 625.997794][T27375] [ 626.000198][T27375] ====================================================== [ 626.007244][T27375] WARNING: possible circular locking dependency detected [ 626.014305][T27375] syzkaller #0 Not tainted [ 626.018782][T27375] ------------------------------------------------------ [ 626.025935][T27375] syz.1.5499/27375 is trying to acquire lock: [ 626.032023][T27375] ffff88805beff018 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 626.040946][T27375] [ 626.040946][T27375] but task is already holding lock: [ 626.048334][T27375] ffff88802bc60588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 626.050459][T27390] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 626.064958][T27375] [ 626.064958][T27375] which lock already depends on the new lock. [ 626.064958][T27375] [ 626.075396][T27375] [ 626.075396][T27375] the existing dependency chain (in reverse order) is: [ 626.084449][T27375] [ 626.084449][T27375] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 626.092318][T27375] __mutex_lock+0x19d/0x1550 [ 626.097471][T27375] elevator_change+0x1af/0x480 [ 626.102792][T27375] elevator_set_none+0xb5/0x140 [ 626.108229][T27375] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 626.114599][T27375] nbd_start_device+0x189/0xb30 [ 626.120010][T27375] nbd_genl_connect+0x167d/0x1cd0 [ 626.125585][T27375] genl_family_rcv_msg_doit+0x233/0x340 [ 626.131699][T27375] genl_rcv_msg+0x614/0x7a0 [ 626.136764][T27375] netlink_rcv_skb+0x226/0x4a0 [ 626.142098][T27375] genl_rcv+0x28/0x40 [ 626.146645][T27375] netlink_unicast+0x7bd/0x940 [ 626.151974][T27375] netlink_sendmsg+0x813/0xb40 [ 626.157314][T27375] sock_sendmsg_nosec+0x13a/0x180 [ 626.163037][T27375] ____sys_sendmsg+0x54e/0x850 [ 626.167164][T27393] veth0_to_bond: default FDB implementation only supports local addresses [ 626.176873][T27375] ___sys_sendmsg+0x2a5/0x360 [ 626.182115][T27375] __x64_sys_sendmsg+0x1b1/0x290 [ 626.187617][T27375] do_syscall_64+0x166/0x520 [ 626.192778][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.199233][T27375] [ 626.199233][T27375] -> #5 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 626.207884][T27375] blk_alloc_queue+0x544/0x690 [ 626.213206][T27375] __blk_mq_alloc_disk+0x194/0x390 [ 626.218917][T27375] nbd_dev_add+0x494/0xb60 [ 626.223880][T27375] nbd_init+0x168/0x1f0 [ 626.228578][T27375] do_one_initcall+0x250/0x870 [ 626.233913][T27375] do_initcall_level+0x10a/0x1a0 [ 626.239414][T27375] do_initcalls+0x59/0xa0 [ 626.244294][T27375] kernel_init_freeable+0x29d/0x3e0 [ 626.250057][T27375] kernel_init+0x22/0x1d0 [ 626.254970][T27375] ret_from_fork+0x514/0xb70 [ 626.260161][T27375] ret_from_fork_asm+0x1a/0x30 [ 626.265495][T27375] [ 626.265495][T27375] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 626.272734][T27375] fs_reclaim_acquire+0x71/0x100 [ 626.278218][T27375] __kmalloc_cache_noprof+0x61/0x600 [ 626.284055][T27375] __request_module+0x2d0/0x630 [ 626.289466][T27375] tcp_ca_find_autoload+0x138/0x240 [ 626.295304][T27375] tcp_set_congestion_control+0x142/0xcb0 [ 626.301585][T27375] do_tcp_setsockopt+0x26d/0x1f80 [ 626.307166][T27375] do_sock_setsockopt+0x17c/0x1b0 [ 626.312751][T27375] __x64_sys_setsockopt+0x13d/0x1b0 [ 626.318512][T27375] do_syscall_64+0x166/0x520 [ 626.323665][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.330120][T27375] [ 626.330120][T27375] -> #3 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 626.338142][T27375] lock_sock_nested+0x41/0x100 [ 626.343457][T27375] inet_shutdown+0x6a/0x390 [ 626.348502][T27375] nbd_mark_nsock_dead+0x2cb/0x550 [ 626.354163][T27375] recv_work+0x1cee/0x1e10 [ 626.359133][T27375] process_scheduled_works+0xc3d/0x1630 [ 626.365241][T27375] worker_thread+0xa47/0xfb0 [ 626.370390][T27375] kthread+0x38b/0x480 [ 626.375017][T27375] ret_from_fork+0x514/0xb70 [ 626.380163][T27375] ret_from_fork_asm+0x1a/0x30 [ 626.385497][T27375] [ 626.385497][T27375] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 626.393231][T27375] __mutex_lock+0x19d/0x1550 [ 626.398394][T27375] nbd_queue_rq+0x373/0xff0 [ 626.403464][T27375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 626.409563][T27375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 626.416462][T27375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 626.422997][T27375] blk_mq_run_work_fn+0x16c/0x300 [ 626.428588][T27375] process_scheduled_works+0xc3d/0x1630 [ 626.434695][T27375] worker_thread+0xa47/0xfb0 [ 626.439846][T27375] kthread+0x38b/0x480 [ 626.444453][T27375] ret_from_fork+0x514/0xb70 [ 626.449590][T27375] ret_from_fork_asm+0x1a/0x30 [ 626.454902][T27375] [ 626.454902][T27375] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 626.462133][T27375] __mutex_lock+0x19d/0x1550 [ 626.467274][T27375] nbd_queue_rq+0xc1/0xff0 [ 626.472324][T27375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 626.478416][T27375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 626.485293][T27375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 626.491828][T27375] blk_mq_run_work_fn+0x16c/0x300 [ 626.497395][T27375] process_scheduled_works+0xc3d/0x1630 [ 626.503498][T27375] worker_thread+0xa47/0xfb0 [ 626.508642][T27375] kthread+0x38b/0x480 [ 626.513270][T27375] ret_from_fork+0x514/0xb70 [ 626.518415][T27375] ret_from_fork_asm+0x1a/0x30 [ 626.523768][T27375] [ 626.523768][T27375] -> #0 (set->srcu){.+.+}-{0:0}: [ 626.530937][T27375] __lock_acquire+0x164c/0x2de0 [ 626.536347][T27375] lock_sync+0xb3/0x130 [ 626.541054][T27375] __synchronize_srcu+0xc9/0x2f0 [ 626.546552][T27375] elevator_switch+0x1e8/0x7b0 [ 626.551868][T27375] elevator_change+0x2fa/0x480 [ 626.557169][T27375] elevator_set_default+0x375/0x440 [ 626.562912][T27375] blk_register_queue+0x3f3/0x4e0 [ 626.568479][T27375] __add_disk+0x6b8/0xdb0 [ 626.573349][T27375] add_disk_fwnode+0x100/0x3a0 [ 626.578657][T27375] nbd_dev_add+0x733/0xb60 [ 626.583622][T27375] nbd_genl_connect+0x96c/0x1cd0 [ 626.589105][T27375] genl_family_rcv_msg_doit+0x233/0x340 [ 626.595191][T27375] genl_rcv_msg+0x614/0x7a0 [ 626.600239][T27375] netlink_rcv_skb+0x226/0x4a0 [ 626.605574][T27375] genl_rcv+0x28/0x40 [ 626.610108][T27375] netlink_unicast+0x7bd/0x940 [ 626.615409][T27375] netlink_sendmsg+0x813/0xb40 [ 626.620713][T27375] sock_sendmsg_nosec+0x13a/0x180 [ 626.626275][T27375] ____sys_sendmsg+0x54e/0x850 [ 626.631580][T27375] ___sys_sendmsg+0x2a5/0x360 [ 626.636829][T27375] __x64_sys_sendmsg+0x1b1/0x290 [ 626.642311][T27375] do_syscall_64+0x166/0x520 [ 626.647465][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.653893][T27375] [ 626.653893][T27375] other info that might help us debug this: [ 626.653893][T27375] [ 626.664155][T27375] Chain exists of: [ 626.664155][T27375] set->srcu --> &q->q_usage_counter(io)#54 --> &q->elevator_lock [ 626.664155][T27375] [ 626.677830][T27375] Possible unsafe locking scenario: [ 626.677830][T27375] [ 626.685296][T27375] CPU0 CPU1 [ 626.690672][T27375] ---- ---- [ 626.696050][T27375] lock(&q->elevator_lock); [ 626.700667][T27375] lock(&q->q_usage_counter(io)#54); [ 626.708583][T27375] lock(&q->elevator_lock); [ 626.715713][T27375] sync(set->srcu); [ 626.719651][T27375] [ 626.719651][T27375] *** DEADLOCK *** [ 626.719651][T27375] [ 626.727808][T27375] locks held by syz.1.5499/27375: 6, last CPU#1: [ 626.734155][T27375] #0: ffffffff902c42e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 626.742377][T27375] #1: ffffffff902c4120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 626.751378][T27375] #2: ffff888025d371c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 626.761763][T27375] #3: ffff88802bc60610 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 626.771632][T27375] #4: ffff88802bc60098 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 626.782532][T27375] #5: ffff88802bc60588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 626.792386][T27375] [ 626.792386][T27375] stack backtrace: [ 626.798284][T27375] CPU: 1 UID: 0 PID: 27375 Comm: syz.1.5499 Not tainted syzkaller #0 PREEMPT(full) [ 626.807670][T27375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 626.817743][T27375] Call Trace: [ 626.821038][T27375] [ 626.824005][T27375] dump_stack_lvl+0xe8/0x150 [ 626.828632][T27375] print_circular_bug+0x2e2/0x300 [ 626.833690][T27375] check_noncircular+0x12f/0x150 [ 626.838650][T27375] __lock_acquire+0x164c/0x2de0 [ 626.843528][T27375] ? lockdep_unlock+0x5c/0xd0 [ 626.848248][T27375] ? __lock_acquire+0x1511/0x2de0 [ 626.853300][T27375] lock_sync+0xb3/0x130 [ 626.857474][T27375] ? __synchronize_srcu+0xb5/0x2f0 [ 626.862609][T27375] ? __synchronize_srcu+0xb5/0x2f0 [ 626.867742][T27375] __synchronize_srcu+0xc9/0x2f0 [ 626.872734][T27375] ? __pfx___synchronize_srcu+0x10/0x10 [ 626.878303][T27375] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.883371][T27375] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.889286][T27375] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 626.894845][T27375] ? synchronize_srcu+0x20a/0x260 [ 626.899887][T27375] elevator_switch+0x1e8/0x7b0 [ 626.904668][T27375] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 626.910152][T27375] elevator_change+0x2fa/0x480 [ 626.914936][T27375] ? do_raw_spin_unlock+0xf5/0x200 [ 626.920072][T27375] elevator_set_default+0x375/0x440 [ 626.925291][T27375] ? __pfx_elevator_set_default+0x10/0x10 [ 626.931036][T27375] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 626.938085][T27375] ? blk_crypto_sysfs_register+0x11c/0x170 [ 626.943911][T27375] blk_register_queue+0x3f3/0x4e0 [ 626.948963][T27375] __add_disk+0x6b8/0xdb0 [ 626.953316][T27375] add_disk_fwnode+0x100/0x3a0 [ 626.958110][T27375] nbd_dev_add+0x733/0xb60 [ 626.962564][T27375] ? __pfx_nbd_dev_add+0x10/0x10 [ 626.967560][T27375] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 626.973381][T27375] ? bpf_lsm_capable+0x9/0x20 [ 626.978099][T27375] ? security_capable+0x7e/0x2c0 [ 626.983071][T27375] ? radix_tree_lookup+0x25c/0x290 [ 626.988202][T27375] nbd_genl_connect+0x96c/0x1cd0 [ 626.993162][T27375] ? __pfx_nbd_genl_connect+0x10/0x10 [ 626.998552][T27375] ? rcu_is_watching+0x16/0xb0 [ 627.003334][T27375] ? trace_kmalloc+0x2a/0xf0 [ 627.007946][T27375] ? __kmalloc_noprof+0x38c/0x720 [ 627.012996][T27375] ? __nla_parse+0x40/0x60 [ 627.017470][T27375] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 627.023823][T27375] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 627.030177][T27375] genl_family_rcv_msg_doit+0x233/0x340 [ 627.035742][T27375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.041919][T27375] ? __lock_acquire+0x747/0x2de0 [ 627.046882][T27375] genl_rcv_msg+0x614/0x7a0 [ 627.051416][T27375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.056460][T27375] ? __pfx_nbd_genl_connect+0x10/0x10 [ 627.061856][T27375] netlink_rcv_skb+0x226/0x4a0 [ 627.066651][T27375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.071706][T27375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.077155][T27375] ? down_read+0x2be/0x330 [ 627.081635][T27375] genl_rcv+0x28/0x40 [ 627.085678][T27375] netlink_unicast+0x7bd/0x940 [ 627.090507][T27375] netlink_sendmsg+0x813/0xb40 [ 627.095313][T27375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.100646][T27375] ? apparmor_socket_sendmsg+0x98/0x360 [ 627.106253][T27375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.111573][T27375] sock_sendmsg_nosec+0x13a/0x180 [ 627.116619][T27375] ____sys_sendmsg+0x54e/0x850 [ 627.121424][T27375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.126739][T27375] ? import_iovec+0x73/0xa0 [ 627.131267][T27375] ___sys_sendmsg+0x2a5/0x360 [ 627.135974][T27375] ? __lock_acquire+0x747/0x2de0 [ 627.140932][T27375] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.146152][T27375] ? futex_wait+0x2a2/0x390 [ 627.150702][T27375] ? __fget_files+0x2a/0x420 [ 627.155329][T27375] ? __fget_files+0x3a2/0x420 [ 627.160049][T27375] __x64_sys_sendmsg+0x1b1/0x290 [ 627.165036][T27375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.170527][T27375] do_syscall_64+0x166/0x520 [ 627.175148][T27375] ? trace_irq_disable+0x3b/0x140 [ 627.180197][T27375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.186275][T27375] ? clear_bhb_loop+0x70/0xc0 [ 627.191030][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.196943][T27375] RIP: 0033:0x7fcc6859e159 [ 627.201383][T27375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.221112][T27375] RSP: 002b:00007fcc6941f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.229553][T27375] RAX: ffffffffffffffda RBX: 00007fcc68825fa0 RCX: 00007fcc6859e159 [ 627.237547][T27375] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 627.245535][T27375] RBP: 00007fcc6863506b R08: 0000000000000000 R09: 0000000000000000 [ 627.253619][T27375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.261687][T27375] R13: 00007fcc68826038 R14: 00007fcc68825fa0 R15: 00007ffc8f4b3208 [ 627.269683][T27375] [ 627.423551][T25908] udevd[25908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 627.440891][T25908] udevd[25908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 627.994180][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!