last executing test programs: 28.539642573s ago: executing program 3 (id=14273): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) r5 = accept4$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14, 0x80000) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xe, 0x3}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0xffffffffffffffd9, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r9, r10, 0x0, 0xd029) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r12, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) (async) close(r10) 28.380203841s ago: executing program 3 (id=14276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_PRIORITY={0x8, 0x1e, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c000400140001000200ae2704c31205331120ca0003e000000100000000000000001400020002200000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000004c0006803c636d286165732900200000000000000000000000000300000000000000007987cca419000200000008000600ffffffff00"/81], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 28.174411168s ago: executing program 3 (id=14278): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000500)={'bridge0\x00'}) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) 27.939371552s ago: executing program 3 (id=14282): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0xe8}}, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x25, &(0x7f0000000080)=0x4) 27.76010916s ago: executing program 3 (id=14284): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000000)={@void, @void, @arp=@generic={0x110, 0x8847, 0x6, 0xc, 0x2, @local, "d3d48a5fde78c1a4af85f5f9", @broadcast, "d1"}}, 0x21) write$tun(r5, &(0x7f00000014c0)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0xdc, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1f, 0x7f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x36) 27.244722862s ago: executing program 3 (id=14291): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004845}, 0x4) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) 11.996643733s ago: executing program 32 (id=14291): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004845}, 0x4) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0xc000) 2.115950908s ago: executing program 4 (id=14461): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="02000000835c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32=r1], 0x58}}, 0x48010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) 2.019322723s ago: executing program 1 (id=14465): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000ec3ee3efaa00000072013b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 2.006626762s ago: executing program 4 (id=14466): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040500000000000100677265001c00028008000600ac1414bb06000e000100000006000f00b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4804) 1.835992569s ago: executing program 0 (id=14467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x3, 0x1}, {0x8, 0x1}, {0xf, 0x2}, {0x7, 0x4}, {0xf, 0x4}, {0x7, 0x4}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0xd, 0x4}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xf, 0xfff}, {0x5, 0x5}, {0xe, 0x7}, {0x7, 0x8000}]}, @ptr={0xa}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x2e, 0x2e, 0x61]}}, &(0x7f0000001480)=""/4096, 0xad, 0x1000, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x19, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x60, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="9f1e15d381745c3f28814c8aef30cf13b3623ddd79af58"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x94c8a24d38cc1b1d}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000100}, 0x4004840) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfe, 0xb152, 0x1, 0x401fb, 0xfffffff9, 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r13 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r13, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCATMARK(r14, 0x8905, &(0x7f0000000400)) accept(r12, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bb870000000200000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf256000000008000300", @ANYRES32=r11, @ANYBLOB="0c009900008000005b00000012012a0037f2400564189b3a6e293c877defcf630a4443c529888fac5cf6737ba27aea190e01444009eb353a48f3bb2e66091cd0664e220f01b7a370f9b492afd2b961097d63735a79e39c196bd8666a96362061d01ac8a4022548c80ba8623c17e2050f07e5def5414e5019cac6fd2904c37e6551c4d6524641d05b8313080117c668c1aea0635a3671dc246de4197aa68d14083071f7a90426491540f0be32bc0d35a8db5fb158185c771a58d10824cac212ffd5f04925978460b897b31879010e19020bef7bf1b09e0b3d718f955203269e379ae52cbe66d67b2b4cdbd01e53c87af23f79388deaebe3035992437e3bc2eeb4650c7262751800000000fcff19006d65e8b246218fca4f708d1346ba715500008c002a002d1a00440bf8ffffffffffffff400005001e00000000030300000004845c020600ffffffffffff0200000002004008021100000105000000ffffffffffff25000008021100000109000000240040ffffffffffff00020000ffffffffffff320000080211000000090000002b00000802110000010700000024006804819d06007206030303030303"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) r15 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0x7, &(0x7f0000000380)={0x8, 0x8001, 0x5, 0x16108d61}, 0x10) 1.688747452s ago: executing program 2 (id=14468): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000000)={0x1a, 0x120, 0x9, 0x8, 0x7f}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)='$\xc9:.#-\x00', 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0x4040850) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000480)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000004c0)={'rose0\x00', 0xa77}) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000500)={r10, 0x0, 0x8, 0x4, 0x8, 0x985ad5201bc9ae1, [0xfffffffffffffffe, 0xb8e, 0xc, 0x8, 0x800, 0x2f7e]}) recvmsg$kcm(r0, &(0x7f0000001700)={&(0x7f0000000580)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f0000000640)=""/79, 0x4f}], 0x2, &(0x7f0000000700)=""/4096, 0x1000}, 0x1) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000017c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001800)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001880)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, r11, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x14) recvmsg$kcm(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/205, 0xcd}, {&(0x7f0000001ac0)=""/96, 0x60}, {&(0x7f0000001b40)=""/208, 0xd0}], 0x3, &(0x7f0000001c80)=""/161, 0xa1}, 0x20) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x50, r2, 0x13350000) accept4(r9, &(0x7f0000001d80)=@x25={0x9, @remote}, &(0x7f0000001e00)=0x80, 0x1000) 1.584007557s ago: executing program 4 (id=14469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x24, "e6db0b48ebb93d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001640)={{r3, 0x19b3539d, 0x2, 0x5, 0x3, 0x6999, 0x10, 0x1, 0x100, 0x8, 0x0, 0xaf5a, 0x1, 0xffffffffffff0001, 0x7fffffff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, 0x0, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000200)={0x1, {{0xa, 0x4e23, 0x6, @private2, 0x100}}, {{0xa, 0x4e21, 0xffff, @private0, 0x9}}}, 0x108) 1.318642724s ago: executing program 0 (id=14470): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x20008090) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000001500)={{'\x00', 0x2}, {0x7fffffff}, 0x24, 0x0, 0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)="580d9ef9c58ddbb608ffbb4d18c6f10b7ceea6cfaac03adbf25f4d030b138aaf8ccf26983358bf15c069efb428456d36e69fa21188e2ed9ea93794a67302d245f6de4b7c20976a8fcb7e1d7aac8ec3765388d94eac2d871e6dbb0603b0bdf3772d69dba16c8050029a13d9ebe8eb0bc55fa7e9cf6f328c6fb2eab3ffeb4e04c147999388be800f08b29a82baa0233488816e7a137bbf62cc8c651f9fd31eb04234234c8071938e987dc12770954895b88c7ac9b9aa50c88eeb7c0bc9d40fdd86c67d154e55f1fb3d6939ad9e0d6503c90e85e431e6d64a1f50ae338b3a9ba493492d6314dbdb2a227bb2f11fb13c50965312bfe300d388403c14a8f4b0b9facf20b78d76afb998cf5327450529bc8b3e3b76ca2eea78cc3c7f405fefd21cae7c812749a78b5195c6a9779eeff3133f178106faed64d184e1f9e1324c436481be36e790f940bfb865080347df1903ad7c33453021db6ce2acd43c7b20e3e95d5c1abd7a30fa71965d49ad1147b9c48448c2c1db526527018ce18ef66218079842", 0x180, 0x0, &(0x7f0000001300)={0x2, 0x17c, {0x1, 0xc, 0x85, "0495a26671ad829c42af53e544167f22c3d07b316da44ae63efa5644dd74d073288269521c317405c0a7cb22fbdd224e68cf31cfb150eaf9586968a89c5f793b80aad757525b6975c7b553cbd8ed11262a4850f733b9596c5d3ae68278b3636b4928cc86ca783c4b6363059be90a4617483f54043dd43892b8c5ce5daa9edb49eb45117b86", 0xea, "97b0250d803afd0fcdfa13ca20135130a0784d8d9b85e5f23efab0cdbc942b9cabf3f12318fb71672a01735bfd1bf3fb3ba32f064d02faf8c57b41953d44d1616c4cfc818a55c61f450689d23ef5aeb623eaab8f8a93e7d4f4d94ac18d25f1354d89bc97b01d5b43731117e95a0eab253dc1f5d1431ea8853e7fe25f32a5f993b47273ec93a43efb677ce2e01e8609171268c1ccce91d3d9f5764baac9dd9a2c6853fa005af49a6748a1915d0bbf9d8177a0d380b60be7e8e8ad10b9003ee4dc5aac421d6793ea633b83193d5f15d26a712761380d6bfc219aa898c26472f21c26f8c35a86559763a69f"}, 0x74, "4cf75e06d5c9248a763031a0ffa3c2080eaf8d9cc77e34d19831ba7c620f685b60d177902801e9d2ac8da001d9db80f7fc07e99c4ff1268119d6218a86872714e2977056bf26a6e342c937c2fd7e14323ffdee7c3c77b7d7fafebbf5c8e633cf0cecfe6930bf744286b412515e817c5401296d7b"}, 0x1fc}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r6, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) sendto$inet6(r0, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) 1.194167024s ago: executing program 4 (id=14471): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 64) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRESHEX=r5, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="029000000080040008000a00", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) (async, rerun: 32) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r6, &(0x7f0000000c80)={0x1d, r7}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1fd, 0x6}}]}]}]}, 0x48}}, 0x0) 1.165300728s ago: executing program 2 (id=14472): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x14, 0x0, &(0x7f00000007c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000000), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12141, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000000701010000000000000000030300000000000000000240000000080c000640000000000000000308000540000000000c0003400000000000990205367a8222b5a0d1ea11f63c0f29c8f60e9320991b36c5c2cad7e974588be5ed865ba4caad2ef6c44a48f2a19e2fadb5c1ec372f92b493d77de38438a826b56de935ba327bc7e037c6b2d3c9c3511daa88d75686b9b967c776302891c7e25bf32658d53f20564206cf9ebd9672f0f069b907e13a00"/190], 0x40}}, 0x48000) r8 = socket(0x1e, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockname$packet(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0xb8a87dfe3eb5465, 0x84) sendmmsg$inet6(r11, &(0x7f0000003740)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0xffffff34, @local}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000c80)="e0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x400, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x1}) 1.055108388s ago: executing program 0 (id=14473): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', r3, 0x8000, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "3b8104e49c69f49a76ab4e"}, {0x5, 0x5, "badd0a"}, {0x331905c5a9ce1bc, 0x5, "e7e86a"}, {0x7, 0xc, "51382f47b3a3b24fcb2b"}, {0x2, 0xb, "161ab8385f286286ba"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', r3, 0x8000, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "3b8104e49c69f49a76ab4e"}, {0x5, 0x5, "badd0a"}, {0x331905c5a9ce1bc, 0x5, "e7e86a"}, {0x7, 0xc, "51382f47b3a3b24fcb2b"}, {0x2, 0xb, "161ab8385f286286ba"}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@getchain={0x4c, 0x66, 0x408, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xfff3, 0xfff2}, {0x4, 0xfff2}}, [{0x8, 0xb, 0x8}, {0x8}, {0x8}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x39}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x1, &(0x7f00000004c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash-ce\x00'}, 0x80) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 1.012327829s ago: executing program 1 (id=14474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (rerun: 32) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (rerun: 32) recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="37006da8", @ANYRES16=r1, @ANYBLOB="0107000000000000000045000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040000) (async, rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00010000002f493d67a1a26e02a468f6b0b3b0b8c62e8f7ec57acb8b88d19997f7ca6b364e0070d99db30a54c6766ef728a949c5e9148a7f34ce61d589756a9da115337dec84cbcf3b51147a8ef1b424377a535b94e7d1c090969aacef7319dea2399fbdc80f5b12d1a724bd4db435ed46a2a415199529af23516638d2df75fcd9830d576d45c192ce244bd2d878335545a0065e53d361253fd9e03c561d4aeeb08a8cd65dbb74fa15"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="4c43f8684ae3ad81bd15f6583c561814fad0221ae5953e85f0d9c0adfa0b0bd279308007354ad52e43f4921b44e237066d756d5501cf06aa9897028a2f02c747e30cc73adc0060c89b1df1a7", 0x4c}], 0x1}}], 0x1, 0x2008000) sendto$inet6(r6, &(0x7f0000000940)="97389df07f0f5f99af", 0x9, 0x800, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000104000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="00010000ac0000002c0012800b000100697036746e6c00001c000280050004000300000008001400080000000800070000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) 873.296019ms ago: executing program 2 (id=14475): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) 832.911108ms ago: executing program 4 (id=14476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x9, 0x0, 0xfe, 0x0, 0x0, @multicast1, @broadcast}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 762.825498ms ago: executing program 0 (id=14477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) 629.881165ms ago: executing program 1 (id=14478): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_sctp(0x2, 0x4, 0x84) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48050) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="700200001372652d3ac344c92300000000000000000100", @ANYRES32=r7, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e2279a02d78c2000000011140100000000000000000008004a00000000f107004bcb4ffd98d1d7a81e5addba01d12d51ec84e109e481b7d49d9784f97f29fc211ca0a9c8eec80a299fe7f6834356fb1f31b1292a453be2dafb231058f63d30aa00cfad6bc911590c477b129a1966fcdf10e63a2acf1b01180ead4076b0c7e791b5d9471ee607be6322c72c28f69615b397a26979da8d3a37364494fda0b71d9652"], 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01000e00000000dbdf2501f000100000ffff1fec388e82ea49605ffb8072acf0041fedf1b1c82b2794a50521a7c21fb296e2f86ce3dfb80cf1a4ac0ae2d1192d165a58b1c9e719ed9c3fc876073aeb55dcb6de1a36a1c0f82f1644cea73b3b3a4b7464aa4b33d148870de67072ed83cc0098f1128df36fd23f0661d093ce9029ce75c418ee06dc4b4ed58c380072ea02485f1210", @ANYRES32=r1, @ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 629.244271ms ago: executing program 2 (id=14479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="307a286ebd2f63fa28b13e24251dffa8bae52819718ad71aab20b06a9bf6425fb4f6886f65cd6668d3b285657b0285ce2f104f13985e6f3ba162818d22e663742b32c656024465bca4b7e85ffd82a77e9cbce5e55d3b50c3948b15d78af4c27f", 0x60}], 0x1, &(0x7f0000000540)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x1d, 0x10, '\x00', [@pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0xf9, 0x4, [0xfffffffffffffffc, 0x900000000, 0x2, 0x100000001, 0x2, 0x55, 0x1, 0x6a0d8180]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x6a, [0x9d, 0x0]}}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffcd1}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0xe8}, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x1e4, 0x24, 0x4ee4e6a52ff56541, 0xf0bd2f, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0xf5, 0x463a, 0x1, 0x3, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0xf5b, 0x3e7, 0x5, 0x3, 0x4982]}}, {{0x1c, 0x1, {0x6, 0xf8, 0x1, 0x2cb, 0x1, 0x2, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0x2]}}, {{0x1c, 0x1, {0x8, 0x8, 0x3ff, 0x609, 0x1, 0x1, 0x401, 0x2}}, {0x8, 0x2, [0xf4, 0x3]}}, {{0x1c, 0x1, {0x5, 0x0, 0x7, 0xb9c, 0x1, 0x9, 0x800, 0x5}}, {0xe, 0x2, [0x9, 0x4, 0x2, 0xb5, 0x5]}}, {{0x1c, 0x1, {0xb, 0x3, 0x4, 0xfffff8af, 0x2, 0xd, 0x5, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0xed, 0x20, 0x1, 0x3, 0x1, 0xc1, 0xfffffff9, 0x4}}, {0xc, 0x2, [0x10, 0x53, 0x1, 0x9]}}, {{0x1c, 0x1, {0x3, 0x0, 0x48, 0xef1, 0x2, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0xfd, 0x7, 0x6, 0x1, 0x0, 0x1, 0x0, 0x4}}, {0xc, 0x2, [0x8000, 0x9, 0xf, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_skbprio={{0xa}, {0x8, 0x2, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7eb}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10, 0x8, 0x3, 0x401, 0xfffffffa, 0x400, 0x80000000, 0xc50}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x1e4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r5, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, ' '}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 495.392205ms ago: executing program 0 (id=14480): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) 333.778183ms ago: executing program 1 (id=14481): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 320.040687ms ago: executing program 2 (id=14482): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@ipv6_getnetconf={0x24, 0x52, 0x420, 0x70bd2b, 0x56c, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x8000}, @NETCONFA_IFINDEX={0x8}]}, 0x24}}, 0x404c840) unshare(0x20000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) (async) listen(r0, 0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000040)={r8, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) listen(r5, 0x3) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0xfffffffe) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4a24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x1b, 0x0, "13abcd9d2debb68a5bfc1c64b50a30e0cb34dde0c1121e01004906563b981f8c4600b8b8f4cc0800dda70f54941e7c6343089a41b19dd068a877fa13dd60be9ce9b50c0a568bce047c3ee863b194c264"}, 0xd8) (rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x6, 0x200, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) listen(r11, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x9) 251.312745ms ago: executing program 4 (id=14483): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000ec3ee3efaa00000072013b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 125.582322ms ago: executing program 0 (id=14484): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r10, @ANYBLOB="15000400030000e00a0100000325175362eb4cf242000000"], 0x44}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x4e23, 0x9, 0x4e20, 0x0, 0x2, 0xa0, 0xa0, 0xc, r8, r10}, {0xfffffffffffffffe, 0x1, 0x400, 0x10000, 0x7fffffff, 0xffff, 0x1, 0x4808}, {0x80000000, 0x7fff, 0x118c, 0xa5d1}, 0xff, 0x6e6bbd, 0x0, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d5, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x3503, 0x3, 0x3, 0x1d, 0x4, 0x8, 0x4}}, 0xe8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e", 0x4d}], 0x1, 0x0, 0x0, 0x54}, 0x4040884) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r12, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200"], 0x58}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 123.882429ms ago: executing program 1 (id=14485): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 13.725276ms ago: executing program 1 (id=14486): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x5c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) ppoll(&(0x7f0000000600)=[{r2, 0x101}], 0x1, 0x0, 0x0, 0x0) close(r1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000180)=0x7) accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r6, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 0s ago: executing program 2 (id=14487): r0 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x24, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) kernel console output (not intermixed with test programs): 4538][ C1] lec:lec_tx_timeout: lec0 [ 1523.367121][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1523.412282][T21832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1523.477007][T19916] bond1: (slave lo): failed to get link speed/duplex [ 1523.630913][T21604] IPVS: starting estimator thread 0... [ 1523.722711][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12959'. [ 1523.734131][T21842] IPVS: using max 28 ests per chain, 67200 per kthread [ 1523.744689][T21846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.799302][T21796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1525.990949][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12963'. [ 1526.012379][T21858] validate_nla: 3 callbacks suppressed [ 1526.012404][T21858] netlink: 'syz.0.12963': attribute type 6 has an invalid length. [ 1526.044445][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12963'. [ 1526.078756][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12963'. [ 1526.113365][T21858] netlink: 'syz.0.12963': attribute type 6 has an invalid length. [ 1526.143872][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12963'. [ 1526.264728][T21878] netlink: 'syz.4.12970': attribute type 7 has an invalid length. [ 1526.281382][T21882] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12968'. [ 1526.285967][T21878] netlink: 'syz.4.12970': attribute type 8 has an invalid length. [ 1526.520455][T21895] sctp: [Deprecated]: syz.1.12973 (pid 21895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1526.520455][T21895] Use struct sctp_sack_info instead [ 1526.625023][T21897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12972'. [ 1526.702309][T21908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1526.709624][T21908] IPv6: NLM_F_CREATE should be set when creating new route [ 1526.716993][T21908] IPv6: NLM_F_CREATE should be set when creating new route [ 1526.724257][T21908] IPv6: NLM_F_CREATE should be set when creating new route [ 1526.742827][T21908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1526.786294][T21914] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.12978'. [ 1527.240700][T21944] Cannot find set identified by id 65534 to match [ 1527.264127][T21946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12987'. [ 1527.438482][T19910] net_ratelimit: 34 callbacks suppressed [ 1527.438506][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1527.576668][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1527.604430][T21958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12994'. [ 1527.638038][T21958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12994'. [ 1527.688486][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1527.817013][T19916] bond1: (slave lo): failed to get link speed/duplex [ 1527.940619][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1528.058525][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1528.178733][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1528.243850][T22000] x_tables: duplicate entry at hook 2 [ 1528.266052][T22000] xt_hashlimit: size too large, truncated to 1048576 [ 1528.305284][T19916] bond1: (slave lo): failed to get link speed/duplex [ 1528.381313][T22006] netlink: 'syz.0.13009': attribute type 4 has an invalid length. [ 1528.601099][T22006] lo: entered allmulticast mode [ 1528.629542][T22006] lo: left allmulticast mode [ 1528.647543][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1528.767237][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1528.872925][T22030] syzkaller0: entered promiscuous mode [ 1528.887485][T22030] syzkaller0: entered allmulticast mode [ 1528.963391][T22028] syzkaller0: entered promiscuous mode [ 1528.969262][T22028] syzkaller0: entered allmulticast mode [ 1529.090342][T22027] delete_channel: no stack [ 1529.507327][T22054] bond6: entered promiscuous mode [ 1529.543138][T22054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1529.780655][T22054] bond6: (slave ip6tnl2): refused to change device type [ 1530.823008][T22099] erspan1: entered allmulticast mode [ 1530.826761][T22101] netlink: 'syz.1.13033': attribute type 1 has an invalid length. [ 1530.909908][T22101] bond2: entered promiscuous mode [ 1530.915032][T22101] bond2: entered allmulticast mode [ 1530.921959][T22101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1531.045131][T22120] __nla_validate_parse: 13 callbacks suppressed [ 1531.045153][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13038'. [ 1531.052381][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13036'. [ 1531.167729][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13039'. [ 1532.098640][T22154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13047'. [ 1532.220362][T22160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13051'. [ 1532.399724][T30499] IPVS: starting estimator thread 0... [ 1532.460116][T22173] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1532.499974][T22169] IPVS: using max 28 ests per chain, 67200 per kthread [ 1532.520381][T17029] net_ratelimit: 19 callbacks suppressed [ 1532.520405][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1532.651635][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13057'. [ 1532.765617][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13058'. [ 1532.770411][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13059'. [ 1532.784602][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13058'. [ 1532.833269][T22188] netlink: 'syz.2.13058': attribute type 15 has an invalid length. [ 1532.856062][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13059'. [ 1532.873986][T22190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1533.418083][T19910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1533.418579][T22188] netlink: 'syz.2.13058': attribute type 15 has an invalid length. [ 1533.445449][T19910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1533.528504][ T6041] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1533.646063][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1533.687850][T19910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1533.739482][T22202] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 1533.798415][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1533.813227][T22211] openvswitch: netlink: IP tunnel dst address not specified [ 1533.888682][T22211] xt_hashlimit: invalid rate [ 1533.909252][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1533.994794][T22225] netlink: 'syz.2.13067': attribute type 15 has an invalid length. [ 1534.014283][T22225] netlink: 'syz.2.13067': attribute type 18 has an invalid length. [ 1534.029167][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1534.091831][ T6041] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1534.103525][T22225] netlink: 'syz.2.13067': attribute type 18 has an invalid length. [ 1534.115647][ T6041] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1534.144214][ T6041] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1534.212204][ T6041] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1534.227292][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1534.336902][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1534.397230][T22248] netlink: 'syz.3.13074': attribute type 11 has an invalid length. [ 1534.410619][T22251] netlink: 'syz.0.13075': attribute type 1 has an invalid length. [ 1534.423254][ T9564] lec:lec_start_xmit: lec0:No lecd attached [ 1534.446800][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1534.462648][T22255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1535.104689][T22246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.464031][T22276] Cannot find add_set index 65532 as target [ 1535.751666][T22290] syzkaller0: entered promiscuous mode [ 1535.759903][T22290] syzkaller0: entered allmulticast mode [ 1535.791665][T22295] tipc: Enabling of bearer rejected, failed to enable media [ 1536.011789][T22310] netlink: 'syz.0.13093': attribute type 1 has an invalid length. [ 1536.030807][T22310] netlink: 'syz.0.13093': attribute type 1 has an invalid length. [ 1536.077211][T22313] __nla_validate_parse: 16 callbacks suppressed [ 1536.077233][T22313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13095'. [ 1536.102564][T22313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.110044][T22313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.166284][T22310] netlink: 'syz.0.13093': attribute type 5 has an invalid length. [ 1536.258051][T22320] bond1: entered allmulticast mode [ 1536.263564][T22320] vcan1: entered allmulticast mode [ 1536.306174][T22319] bond1: left allmulticast mode [ 1536.312762][T22319] vcan1: left allmulticast mode [ 1536.786272][T22347] tipc: Enabling of bearer rejected, failed to enable media [ 1537.616759][T14900] net_ratelimit: 19 callbacks suppressed [ 1537.616787][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1537.736682][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1537.847234][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1537.957401][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1538.066724][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1538.177235][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1538.287654][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1538.396755][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1538.507057][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1538.617653][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1539.437070][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1539.445300][ C1] lec:lec_tx_timeout: lec0 [ 1542.697639][T14900] net_ratelimit: 36 callbacks suppressed [ 1542.697658][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1542.817591][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1542.927238][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1543.037117][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1543.147298][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1543.257046][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1543.366649][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1543.478004][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1543.586628][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1543.697131][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1547.777268][ T6039] net_ratelimit: 36 callbacks suppressed [ 1547.777294][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1547.896678][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1548.007654][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1548.119276][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1548.226711][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1548.337558][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1548.443575][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1548.450459][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1548.577811][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1548.688017][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1548.798563][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1550.520392][ T8862] Bluetooth: hci1: command 0x0406 tx timeout [ 1552.877426][T17030] net_ratelimit: 36 callbacks suppressed [ 1552.877451][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1552.918824][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 180 seconds [ 1552.997760][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1553.107624][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1553.217162][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1553.327340][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1553.437675][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1553.457008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1553.465324][ C1] lec:lec_tx_timeout: lec0 [ 1553.534907][ T5195] udevd[5195]: worker [15959] /devices/virtual/block/nbd1 timeout; kill it [ 1553.544775][ T5195] udevd[5195]: seq 47323 '/devices/virtual/block/nbd1' killed [ 1553.552490][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1553.657209][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1553.767741][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1553.877671][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1557.687594][T22352] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1557.732526][T22352] bond7 (unregistering): Released all slaves [ 1557.771136][T22367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1557.820508][T22367] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13106'. [ 1557.854194][T22359] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1557.884215][T22359] bond7 (unregistering): Released all slaves [ 1558.048177][T19910] net_ratelimit: 34 callbacks suppressed [ 1558.048203][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1558.114480][T22380] dvmrp0: entered allmulticast mode [ 1558.155343][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1558.167698][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1558.179786][T22383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1558.206869][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1558.332367][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1558.483363][T22404] netlink: 'syz.0.13117': attribute type 24 has an invalid length. [ 1558.497842][T22406] syzkaller0: entered promiscuous mode [ 1558.504055][T22406] syzkaller0: entered allmulticast mode [ 1558.648211][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1558.655571][T22410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1558.665765][T22408] xt_ecn: cannot match TCP bits for non-tcp packets [ 1558.685502][T22410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1558.704028][T22408] netlink: 'syz.2.13118': attribute type 1 has an invalid length. [ 1558.720710][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13118'. [ 1558.731228][T22408] openvswitch: netlink: Flow actions attr not present in new flow. [ 1558.758279][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1558.877339][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1558.958773][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13122'. [ 1558.969761][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13122'. [ 1559.057213][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1559.080387][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13128'. [ 1559.097328][T22434] openvswitch: netlink: Flow actions attr not present in new flow. [ 1559.128154][T22437] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 1559.167811][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1559.354096][T22453] syz_tun: entered allmulticast mode [ 1559.431640][T22453] syz_tun (unregistering): left allmulticast mode [ 1559.608689][T22467] netlink: 'syz.0.13137': attribute type 21 has an invalid length. [ 1559.647864][T22467] netlink: 'syz.0.13137': attribute type 4 has an invalid length. [ 1559.655777][T22467] netlink: 'syz.0.13137': attribute type 5 has an invalid length. [ 1559.744831][T22467] netlink: 'syz.0.13137': attribute type 21 has an invalid length. [ 1559.799426][T22467] netlink: 'syz.0.13137': attribute type 4 has an invalid length. [ 1559.867327][T22467] netlink: 'syz.0.13137': attribute type 5 has an invalid length. [ 1559.875377][T22487] netlink: 'syz.4.13139': attribute type 12 has an invalid length. [ 1559.894778][T22487] netlink: 'syz.4.13139': attribute type 29 has an invalid length. [ 1560.347571][T21604] IPVS: starting estimator thread 0... [ 1560.456604][T22507] IPVS: using max 32 ests per chain, 76800 per kthread [ 1560.801622][T22525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1561.780427][T22543] syzkaller0: entered promiscuous mode [ 1561.794116][T22543] syzkaller0: entered allmulticast mode [ 1563.117103][ T3762] net_ratelimit: 29 callbacks suppressed [ 1563.117130][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1563.237372][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1563.346643][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1563.456798][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1563.567192][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1563.677589][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1563.787129][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1563.799990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1563.897266][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1564.008622][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1564.558791][T22557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1564.751655][T22601] set match dimension is over the limit! [ 1564.790905][T22603] validate_nla: 4 callbacks suppressed [ 1564.790926][T22603] netlink: 'syz.0.13166': attribute type 32 has an invalid length. [ 1564.827693][T22603] __nla_validate_parse: 14 callbacks suppressed [ 1564.827720][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13166'. [ 1564.905860][T22603] bond3: Setting coupled_control to off (0) [ 1565.444202][T22631] syzkaller0: create flow: hash 3316937215 index 1 [ 1565.500881][T17029] syzkaller0: tun_net_xmit 76 [ 1565.506096][T17029] syzkaller0: tun_net_xmit 48 [ 1565.530769][T21604] syzkaller0: tun_net_xmit 76 [ 1565.629349][T21604] syzkaller0: tun_net_xmit 76 [ 1565.770271][T22628] syzkaller0: delete flow: hash 3316937215 index 1 [ 1565.814794][T22655] netlink: 'syz.4.13177': attribute type 1 has an invalid length. [ 1565.836639][T22655] netlink: 'syz.4.13177': attribute type 1 has an invalid length. [ 1565.844530][T22655] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1565.883191][T18891] Bluetooth: hci3: command 0x0406 tx timeout [ 1568.479172][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1568.489969][T17029] net_ratelimit: 12 callbacks suppressed [ 1568.489992][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1568.506982][T22667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1568.612920][T22676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13181'. [ 1568.624153][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1568.788653][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1568.897082][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1569.027816][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1569.147272][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1569.278500][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1569.303402][T22629] lo speed is unknown, defaulting to 1000 [ 1569.368751][T22703] netlink: 'syz.0.13188': attribute type 63 has an invalid length. [ 1569.396731][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1569.517256][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1569.567785][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13191'. [ 1569.727904][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1569.837340][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1570.074696][T22730] netlink: 'syz.4.13195': attribute type 2 has an invalid length. [ 1570.110377][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13194'. [ 1570.223238][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13194'. [ 1570.894580][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13202'. [ 1571.111204][T22774] wireguard0: entered promiscuous mode [ 1571.141241][T22774] wireguard0: entered allmulticast mode [ 1571.172565][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13204'. [ 1571.184472][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13206'. [ 1571.263532][T22792] netlink: 'syz.4.13207': attribute type 17 has an invalid length. [ 1571.272804][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13207'. [ 1571.283637][T22792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13207'. [ 1571.660046][T22798] netlink: 'syz.1.13209': attribute type 21 has an invalid length. [ 1571.669598][T22798] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1571.697080][T22798] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1571.828422][T22805] delete_channel: no stack [ 1571.837950][T22805] syz.2.13211: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1571.907394][T22805] CPU: 1 UID: 0 PID: 22805 Comm: syz.2.13211 Not tainted syzkaller #0 PREEMPT(full) [ 1571.907427][T22805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1571.907443][T22805] Call Trace: [ 1571.907454][T22805] [ 1571.907465][T22805] dump_stack_lvl+0xe8/0x150 [ 1571.907510][T22805] warn_alloc+0x249/0x340 [ 1571.907574][T22805] ? stack_trace_save+0xa9/0x100 [ 1571.907645][T22805] ? __pfx_warn_alloc+0x10/0x10 [ 1571.907678][T22805] ? kasan_save_track+0x4f/0x80 [ 1571.907723][T22805] ? kasan_save_track+0x3e/0x80 [ 1571.907743][T22805] ? __kasan_kmalloc+0x93/0xb0 [ 1571.907766][T22805] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1571.907789][T22805] ? xskq_create+0x56/0x170 [ 1571.907846][T22805] ? xsk_setsockopt+0x54c/0x990 [ 1571.907874][T22805] ? do_sock_setsockopt+0x17c/0x1b0 [ 1571.907922][T22805] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1571.907955][T22805] ? do_syscall_64+0x14d/0xf80 [ 1571.907983][T22805] __vmalloc_node_range_noprof+0x132/0x1730 [ 1571.908066][T22805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1571.908100][T22805] ? __kasan_kmalloc+0x93/0xb0 [ 1571.908132][T22805] vmalloc_user_noprof+0xad/0xe0 [ 1571.908157][T22805] ? xskq_create+0xbf/0x170 [ 1571.908189][T22805] xskq_create+0xbf/0x170 [ 1571.908224][T22805] xsk_init_queue+0x8a/0xe0 [ 1571.908258][T22805] xsk_setsockopt+0x54c/0x990 [ 1571.908291][T22805] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1571.908322][T22805] ? __pfx_aa_sk_perm+0x10/0x10 [ 1571.908356][T22805] ? aa_sock_opt_perm+0xff/0x1a0 [ 1571.908388][T22805] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1571.908414][T22805] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1571.908447][T22805] do_sock_setsockopt+0x17c/0x1b0 [ 1571.908485][T22805] __x64_sys_setsockopt+0x13d/0x1b0 [ 1571.908524][T22805] do_syscall_64+0x14d/0xf80 [ 1571.908546][T22805] ? trace_irq_disable+0x3b/0x150 [ 1571.908580][T22805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.908605][T22805] ? clear_bhb_loop+0x40/0x90 [ 1571.908634][T22805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.908658][T22805] RIP: 0033:0x7f26e3b9c799 [ 1571.908680][T22805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.908700][T22805] RSP: 002b:00007f26e49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1571.908725][T22805] RAX: ffffffffffffffda RBX: 00007f26e3e15fa0 RCX: 00007f26e3b9c799 [ 1571.908742][T22805] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1571.908757][T22805] RBP: 00007f26e3c32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1571.908772][T22805] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.908787][T22805] R13: 00007f26e3e16038 R14: 00007f26e3e15fa0 R15: 00007fffe7f95078 [ 1571.908826][T22805] [ 1571.908836][T22805] Mem-Info: [ 1571.989929][T22809] syzkaller0: entered promiscuous mode [ 1572.100459][T22805] active_anon:6444 inactive_anon:0 isolated_anon:0 [ 1572.100459][T22805] active_file:2825 inactive_file:40654 isolated_file:0 [ 1572.100459][T22805] unevictable:768 dirty:67 writeback:0 [ 1572.100459][T22805] slab_reclaimable:15464 slab_unreclaimable:209820 [ 1572.100459][T22805] mapped:29649 shmem:1385 pagetables:3659 [ 1572.100459][T22805] sec_pagetables:0 bounce:0 [ 1572.100459][T22805] kernel_misc_reclaimable:0 [ 1572.100459][T22805] free:1177104 free_pcp:26994 free_cma:0 [ 1572.100528][T22805] Node 0 active_anon:25776kB inactive_anon:0kB active_file:11300kB inactive_file:162412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16196kB dirty:268kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21188kB pagetables:14468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1572.100587][T22805] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1572.100644][T22805] Node 0 DMA free:11164kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:60kB free_cma:0kB [ 1572.100714][T22805] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1572.100766][T22805] Node 0 DMA32 free:1184048kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25776kB inactive_anon:0kB active_file:11300kB inactive_file:162412kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:46032kB local_pcp:21224kB free_cma:0kB [ 1572.100837][T22805] lowmem_reserve[]: 0 0 0 0 0 [ 1572.100890][T22805] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1572.100951][T22805] lowmem_reserve[]: 0 0 0 0 0 [ 1572.100999][T22805] Node 1 Normal free:3513204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61840kB local_pcp:27072kB free_cma:0kB [ 1572.368681][T22809] syzkaller0: entered allmulticast mode [ 1572.485883][T22805] lowmem_reserve[]: 0 0 0 0 0 [ 1572.497191][T22805] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11164kB [ 1572.525096][T22805] Node 0 DMA32: 13404*4kB (UM) 9896*8kB (UME) 5502*16kB (UM) 101*32kB (UME) 80*64kB (UME) 152*128kB (UM) 808*256kB (UME) 472*512kB (UME) 371*1024kB (UME) 54*2048kB (UM) 0*4096kB = 1187632kB [ 1572.588970][T22805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1572.609976][T22805] Node 1 Normal: 12*4kB (UE) 14*8kB (UME) 27*16kB (UME) 21*32kB (UME) 18*64kB (UME) 18*128kB (UME) 16*256kB (UME) 15*512kB (UME) 13*1024kB (UM) 13*2048kB (UE) 844*4096kB (UM) = 3513456kB [ 1572.630659][T22818] syzkaller0: entered promiscuous mode [ 1572.636184][T22818] syzkaller0: entered allmulticast mode [ 1572.679807][T22805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1572.720716][T22805] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1572.732256][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13218'. [ 1572.751995][T22805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1572.795032][T22805] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1572.804942][T22805] 44860 total pagecache pages [ 1572.810925][T22805] 0 pages in swap cache [ 1572.818877][T22805] Free swap = 124996kB [ 1572.823353][T22805] Total swap = 124996kB [ 1572.831481][T22805] 2097051 pages RAM [ 1572.835446][T22805] 0 pages HighMem/MovableOnly [ 1572.840760][T22805] 427010 pages reserved [ 1572.844972][T22805] 0 pages cma reserved [ 1572.855958][T22824] macsec1: entered promiscuous mode [ 1573.009679][T22835] bond4: Unable to set up delay as MII monitoring is disabled [ 1573.044280][T22835] bond4 (unregistering): Released all slaves [ 1573.082406][T22828] IPv6: NLM_F_CREATE should be specified when creating new route [ 1573.102208][T22828] netlink: 'syz.0.13219': attribute type 1 has an invalid length. [ 1573.488091][T22868] netlink: 'syz.3.13228': attribute type 1 has an invalid length. [ 1573.560643][ T49] net_ratelimit: 14 callbacks suppressed [ 1573.560667][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1573.636109][T22873] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 1573.682351][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1573.703331][T22873] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 1573.838322][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1573.948504][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1574.058169][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1574.208403][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1574.260647][T22903] delete_channel: no stack [ 1574.644280][T22914] xt_ecn: cannot match TCP bits for non-tcp packets [ 1574.660407][T22914] openvswitch: netlink: IP tunnel dst address not specified [ 1574.830841][T22925] xt_TCPMSS: Only works on TCP SYN packets [ 1574.840674][T22927] netlink: 'syz.3.13245': attribute type 13 has an invalid length. [ 1574.861513][T22927] netlink: 'syz.3.13245': attribute type 17 has an invalid length. [ 1574.895307][T22896] xt_socket: unknown flags 0x50 [ 1577.461168][T22927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.471332][T22927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.489066][T22927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1577.507823][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1577.527756][T22942] --map-set only usable from mangle table [ 1577.619137][T22945] __nla_validate_parse: 3 callbacks suppressed [ 1577.619158][T22945] netlink: 260 bytes leftover after parsing attributes in process `syz.3.13250'. [ 1577.688649][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1577.876083][T22954] netlink: 'syz.4.13252': attribute type 3 has an invalid length. [ 1577.903641][T22954] netlink: 'syz.4.13252': attribute type 3 has an invalid length. [ 1577.933962][T22954] netlink: 'syz.4.13252': attribute type 29 has an invalid length. [ 1577.977905][T22954] netlink: 'syz.4.13252': attribute type 29 has an invalid length. [ 1578.004057][T22954] netlink: 500 bytes leftover after parsing attributes in process `syz.4.13252'. [ 1578.053270][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13254'. [ 1578.661886][ T6039] net_ratelimit: 3 callbacks suppressed [ 1578.661909][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1578.788591][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1578.873119][T22996] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1578.887655][T22996] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1578.927751][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1579.038045][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1579.140993][T23007] tipc: MTU too low for tipc bearer [ 1579.168530][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1579.209599][T23007] ip6gre1: entered allmulticast mode [ 1579.242218][T23007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1579.286750][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1579.408019][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1579.527970][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1579.550517][T23034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13271'. [ 1579.669509][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1579.765939][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13274'. [ 1579.783681][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13275'. [ 1579.805807][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1579.818750][T23042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13275'. [ 1579.829089][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13275'. [ 1579.835051][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13277'. [ 1579.839861][T23042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13275'. [ 1580.267425][T23072] netlink: 'syz.3.13284': attribute type 3 has an invalid length. [ 1580.404207][T23083] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1580.650083][T23096] IPv6: sit1: Disabled Multicast RS [ 1580.669299][T23096] sit1: entered allmulticast mode [ 1580.823789][T23104] netlink: 'syz.2.13291': attribute type 9 has an invalid length. [ 1581.237408][T18891] Bluetooth: hci0: command 0x0406 tx timeout [ 1581.567887][T23140] nftables ruleset with unbound chain [ 1582.152975][T23171] lo: entered allmulticast mode [ 1582.171075][T23170] lo: left allmulticast mode [ 1582.214964][T23169] syzkaller0: entered promiscuous mode [ 1582.236107][T23169] syzkaller0: entered allmulticast mode [ 1582.727906][T23204] __nla_validate_parse: 7 callbacks suppressed [ 1582.727931][T23204] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.13318'. [ 1583.011190][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 210 seconds [ 1583.268441][T23230] tipc: New replicast peer: 255.255.255.255 [ 1583.298840][T23230] tipc: Enabled bearer , priority 10 [ 1583.621278][T23223] netlink: 'syz.2.13324': attribute type 7 has an invalid length. [ 1584.027101][T17030] net_ratelimit: 26 callbacks suppressed [ 1584.027126][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1584.168418][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1584.288351][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1584.326962][T23256] netlink: 'syz.3.13331': attribute type 1 has an invalid length. [ 1584.351683][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1584.362263][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1584.371886][T23256] netlink: 'syz.3.13331': attribute type 2 has an invalid length. [ 1584.387791][T23256] netlink: 'syz.3.13331': attribute type 2 has an invalid length. [ 1584.408120][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1584.432100][T23256] netlink: 'syz.3.13331': attribute type 2 has an invalid length. [ 1584.492804][T23264] netlink: 'syz.0.13334': attribute type 1 has an invalid length. [ 1584.535009][T23264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1584.548184][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1584.632045][T23264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13334'. [ 1584.725525][T23266] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1584.737498][T19916] bond1: (slave lo): failed to get link speed/duplex [ 1584.847197][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1584.892311][T23284] netlink: 'syz.1.13338': attribute type 5 has an invalid length. [ 1584.903754][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13338'. [ 1584.932059][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13333'. [ 1584.956464][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1585.067852][T19916] bond1: (slave lo): failed to get link speed/duplex [ 1585.177141][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1585.233270][T23304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13343'. [ 1585.333610][T23307] syzkaller0: entered promiscuous mode [ 1585.340864][T23307] syzkaller0: entered allmulticast mode [ 1585.555020][T23321] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1585.589694][T23321] xt_hashlimit: invalid rate [ 1585.673892][T23327] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 1585.688800][T23327] bond3 (unregistering): Released all slaves [ 1585.918438][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13354'. [ 1585.990570][T18891] block nbd8: Receive control failed (result -32) [ 1586.278918][T18891] Bluetooth: hci2: command 0x0405 tx timeout [ 1586.409325][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13364'. [ 1586.589165][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1586.829803][T23387] netlink: 'syz.0.13368': attribute type 11 has an invalid length. [ 1586.888794][T23387] netlink: 'syz.0.13368': attribute type 11 has an invalid length. [ 1587.260797][T23383] lo speed is unknown, defaulting to 1000 [ 1589.127481][T17030] net_ratelimit: 25 callbacks suppressed [ 1589.127503][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1589.268475][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1589.386528][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1589.497439][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1589.604720][T23488] netlink: 'syz.4.13391': attribute type 3 has an invalid length. [ 1589.616990][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1589.727205][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1589.847239][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1589.953135][T23500] gre1: entered promiscuous mode [ 1589.976647][T23500] gre1: entered allmulticast mode [ 1590.004952][T23506] netlink: 'syz.1.13396': attribute type 22 has an invalid length. [ 1590.014933][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1590.020906][T23506] __nla_validate_parse: 5 callbacks suppressed [ 1590.020957][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13396'. [ 1590.155119][ T6041] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.203342][ T6041] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.241831][ T6041] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.305108][ T6041] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1590.362032][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1590.464246][T23536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13401'. [ 1590.517587][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1590.713503][T23542] netlink: 'syz.1.13403': attribute type 1 has an invalid length. [ 1590.761848][T23542] netlink: 'syz.1.13403': attribute type 1 has an invalid length. [ 1590.779913][T23550] netlink: 'syz.3.13404': attribute type 30 has an invalid length. [ 1590.873818][T23557] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13406'. [ 1590.929056][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13406'. [ 1591.256180][T23576] Unknown options in mask b7f2 [ 1591.455685][T23588] syz_tun: entered allmulticast mode [ 1591.510371][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13414'. [ 1591.530843][T23592] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13415'. [ 1591.545442][T23595] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13415'. [ 1591.931054][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13421'. [ 1592.777782][T23657] netlink: 'syz.1.13432': attribute type 1 has an invalid length. [ 1592.790593][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13431'. [ 1592.801274][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13431'. [ 1592.880005][T23661] netlink: 'syz.4.13431': attribute type 3 has an invalid length. [ 1593.435277][T23665] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1593.455671][T23665] GUP no longer grows the stack in syz.2.13434 (23665): 200000003000-20000000a000 (200000001000) [ 1593.495171][T23665] CPU: 0 UID: 0 PID: 23665 Comm: syz.2.13434 Not tainted syzkaller #0 PREEMPT(full) [ 1593.495204][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1593.495217][T23665] Call Trace: [ 1593.495228][T23665] [ 1593.495241][T23665] dump_stack_lvl+0xe8/0x150 [ 1593.495280][T23665] __get_user_pages+0x2453/0x29d0 [ 1593.495410][T23665] ? __lock_acquire+0x6b5/0x2cf0 [ 1593.495459][T23665] ? __gup_longterm_locked+0xc4e/0x1630 [ 1593.495490][T23665] ? down_read_killable+0x1bb/0x340 [ 1593.495552][T23665] __gup_longterm_locked+0xdcf/0x1630 [ 1593.495612][T23665] gup_fast_fallback+0x1d82/0x22e0 [ 1593.495688][T23665] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1593.495716][T23665] ? futex_unqueue+0x22/0x240 [ 1593.495800][T23665] ? futex_unqueue+0x22/0x240 [ 1593.495824][T23665] ? is_valid_gup_args+0x11f/0x200 [ 1593.495856][T23665] ? get_user_pages_fast+0x4d/0xb0 [ 1593.495888][T23665] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 1593.495930][T23665] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1593.496016][T23665] iov_iter_get_pages2+0x5e/0xa0 [ 1593.496051][T23665] __se_sys_vmsplice+0x7b3/0x1490 [ 1593.496109][T23665] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1593.496140][T23665] ? __pfx_futex_wait+0x10/0x10 [ 1593.496186][T23665] ? lockdep_hardirqs_on+0x7a/0x110 [ 1593.496284][T23665] do_syscall_64+0x14d/0xf80 [ 1593.496305][T23665] ? trace_irq_disable+0x3b/0x150 [ 1593.496337][T23665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.496359][T23665] ? clear_bhb_loop+0x40/0x90 [ 1593.496386][T23665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.496408][T23665] RIP: 0033:0x7f26e3b9c799 [ 1593.496431][T23665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.496449][T23665] RSP: 002b:00007f26e49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1593.496481][T23665] RAX: ffffffffffffffda RBX: 00007f26e3e15fa0 RCX: 00007f26e3b9c799 [ 1593.496497][T23665] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1593.496511][T23665] RBP: 00007f26e3c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1593.496525][T23665] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1593.496538][T23665] R13: 00007f26e3e16038 R14: 00007f26e3e15fa0 R15: 00007fffe7f95078 [ 1593.496576][T23665] [ 1593.763700][T23688] netlink: 'syz.4.13439': attribute type 1 has an invalid length. [ 1593.972171][T23695] netlink: 'syz.4.13441': attribute type 8 has an invalid length. [ 1594.216980][T17030] net_ratelimit: 30 callbacks suppressed [ 1594.217004][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1594.285576][T23583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1594.345235][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1594.457170][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1594.567238][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1594.678203][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1594.863842][T23734] pim6reg527: entered allmulticast mode [ 1594.927478][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1595.043148][T23742] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1595.085108][T23742] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1595.137373][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1595.249203][T17029] bond1: (slave lo): failed to get link speed/duplex [ 1595.365288][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1595.500666][T23763] syzkaller1: entered promiscuous mode [ 1595.506306][T23763] syzkaller1: entered allmulticast mode [ 1595.528063][T14900] bond1: (slave lo): failed to get link speed/duplex [ 1595.910203][T23792] erspan1: entered allmulticast mode [ 1596.068370][T23800] __nla_validate_parse: 5 callbacks suppressed [ 1596.068393][T23800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13476'. [ 1596.106669][T23800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13476'. [ 1596.160575][T23804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13477'. [ 1596.441169][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13481'. [ 1596.452931][T23823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13480'. [ 1596.897431][T23852] netlink: 'syz.1.13490': attribute type 1 has an invalid length. [ 1596.962950][T23852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1596.973944][T23849] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1596.995324][T23849] syzkaller1: entered promiscuous mode [ 1597.002865][T23849] syzkaller1: entered allmulticast mode [ 1597.021994][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1597.437704][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13492'. [ 1597.759596][T23886] syzkaller1: entered promiscuous mode [ 1597.770588][T23886] syzkaller1: entered allmulticast mode [ 1597.901307][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13503'. [ 1597.916813][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13503'. [ 1597.957948][T23908] netlink: 'syz.1.13504': attribute type 39 has an invalid length. [ 1598.163804][T23918] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1598.341729][ T9564] lec:lec_start_xmit: lec0:No lecd attached [ 1598.400286][T23922] bond5 (unregistering): Released all slaves [ 1598.530808][T23940] IPv6: NLM_F_CREATE should be specified when creating new route [ 1598.880307][T23957] syzkaller0: entered promiscuous mode [ 1598.888271][T23959] netlink: 'syz.0.13522': attribute type 15 has an invalid length. [ 1598.900311][T23957] syzkaller0: entered allmulticast mode [ 1599.230375][T17030] net_ratelimit: 26 callbacks suppressed [ 1599.230399][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1599.304616][T23985] netlink: 'syz.0.13527': attribute type 10 has an invalid length. [ 1599.417139][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1599.547020][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1599.667127][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1599.748671][T24012] bond4: option min_links: invalid value (18446744073709551614) [ 1599.758690][T24012] bond4: option min_links: allowed values 0 - 2147483647 [ 1599.767685][T24016] netlink: 'syz.2.13535': attribute type 1 has an invalid length. [ 1599.780356][T24012] bond4 (unregistering): Released all slaves [ 1599.932070][T24027] netlink: 'syz.3.13538': attribute type 3 has an invalid length. [ 1599.984085][T24028] netlink: 'syz.0.13539': attribute type 1 has an invalid length. [ 1600.317086][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1600.332210][T24023] macvlan0: entered promiscuous mode [ 1600.339255][T24023] macvlan0: entered allmulticast mode [ 1600.347082][T24023] bond7: (slave macvlan0): Opening slave failed [ 1600.429396][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1600.536552][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1600.647399][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1600.709672][T24038] team0: Port device team_slave_0 removed [ 1600.776859][ T6039] bond1: (slave lo): failed to get link speed/duplex [ 1600.897188][ T3762] bond1: (slave lo): failed to get link speed/duplex [ 1601.138150][T24060] netlink: 'syz.2.13549': attribute type 4 has an invalid length. [ 1601.320418][T24067] IPVS: set_ctl: invalid protocol: 50 172.20.20.19:20000 [ 1601.431538][T24073] __nla_validate_parse: 12 callbacks suppressed [ 1601.431567][T24073] netlink: 788 bytes leftover after parsing attributes in process `syz.4.13553'. [ 1601.613130][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13555'. [ 1601.663589][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13556'. [ 1601.720749][T18891] Bluetooth: hci5: command 0x0406 tx timeout [ 1601.762477][T24090] syzkaller1: entered promiscuous mode [ 1601.770082][T24090] syzkaller1: entered allmulticast mode [ 1602.088675][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13560'. [ 1602.869855][T24132] x_tables: duplicate underflow at hook 3 [ 1603.225050][T24152] "syz.3.13571" (24152) uses obsolete ecb(arc4) skcipher [ 1603.357156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1603.365282][ C1] lec:lec_tx_timeout: lec0 [ 1603.933170][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13579'. [ 1604.125596][T24187] netlink: 'syz.4.13581': attribute type 1 has an invalid length. [ 1604.287435][T17030] net_ratelimit: 25 callbacks suppressed [ 1604.287458][T17030] bond1: (slave lo): failed to get link speed/duplex [ 1604.338929][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13581'. [ 1604.467738][T24205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13581'. [ 1604.471969][T24187] veth2: entered allmulticast mode [ 1604.620867][T24217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13587'. [ 1604.655419][T24205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1604.738579][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1604.861534][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1605.027943][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1605.039184][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13591'. [ 1605.062517][T24237] netlink: 328 bytes leftover after parsing attributes in process `syz.0.13593'. [ 1605.075968][T24237] openvswitch: netlink: Flow key attr not present in new flow. [ 1605.197914][ T6041] bond1: (slave lo): failed to get link speed/duplex [ 1605.383900][T24251] syzkaller0: entered promiscuous mode [ 1605.403914][T24251] syzkaller0: entered allmulticast mode [ 1605.508290][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1608.520063][T24277] bridge0: entered promiscuous mode [ 1608.525404][T24277] macsec1: entered promiscuous mode [ 1608.531829][T24277] macsec1: entered allmulticast mode [ 1608.538920][T24277] bridge0: entered allmulticast mode [ 1608.547467][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1608.602105][T24306] team0: Cannot enslave team device to itself [ 1608.657928][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1608.776635][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1608.831783][T24315] __nla_validate_parse: 5 callbacks suppressed [ 1608.831806][T24315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13612'. [ 1609.299041][T24342] netlink: 'syz.3.13616': attribute type 8 has an invalid length. [ 1609.341696][T24346] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13608'. [ 1609.362637][ T13] net_ratelimit: 4 callbacks suppressed [ 1609.362660][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1609.388147][T24311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13608'. [ 1609.754715][T24361] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1609.797824][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1609.832417][T24366] IPVS: set_ctl: invalid protocol: 44 172.20.20.34:20002 [ 1609.892054][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1609.942235][T24371] netlink: 11 bytes leftover after parsing attributes in process `syz.4.13623'. [ 1609.961737][T24371] netlink: 11 bytes leftover after parsing attributes in process `syz.4.13623'. [ 1609.983635][T24375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13625'. [ 1609.994266][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1610.167301][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1610.168585][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13630'. [ 1610.231071][T24385] hsr_slave_0 (unregistering): left promiscuous mode [ 1610.275644][T24388] pim6reg: entered allmulticast mode [ 1610.305480][T24386] pim6reg: left allmulticast mode [ 1610.313601][T24391] netlink: 'syz.0.13631': attribute type 1 has an invalid length. [ 1610.363593][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13632'. [ 1610.377207][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1610.384321][T24391] sctp: [Deprecated]: syz.0.13631 (pid 24391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1610.384321][T24391] Use struct sctp_sack_info instead [ 1610.491889][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1610.605705][T24400] netlink: 160 bytes leftover after parsing attributes in process `syz.4.13635'. [ 1610.679474][T24408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13638'. [ 1610.691509][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1610.830311][T24413] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1610.848420][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1610.956801][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1611.068151][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1611.233524][T24443] netlink: 'syz.3.13650': attribute type 1 has an invalid length. [ 1611.269613][T24442] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 1611.514550][T24453] xt_ecn: cannot match TCP bits for non-tcp packets [ 1611.917474][T24473] tipc: Trying to set illegal importance in message [ 1611.953687][T24477] tipc: Enabling of bearer rejected, failed to enable media [ 1612.008880][T24477] : entered promiscuous mode [ 1612.024800][T24476] netlink: 'syz.0.13662': attribute type 2 has an invalid length. [ 1612.108634][T24481] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 1612.257113][T24491] tipc: Enabling of bearer rejected, failed to enable media [ 1612.583376][T24508] delete_channel: no stack [ 1612.915874][T24528] netlink: 'syz.1.13680': attribute type 1 has an invalid length. [ 1613.081419][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 240 seconds [ 1613.429253][T24550] netlink: 'syz.2.13687': attribute type 1 has an invalid length. [ 1613.550766][T24550] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1613.928876][T24564] syzkaller0: entered promiscuous mode [ 1613.934698][T24564] syzkaller0: entered allmulticast mode [ 1614.064264][T24571] __nla_validate_parse: 18 callbacks suppressed [ 1614.064295][T24571] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.13691'. [ 1614.086871][T24580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13697'. [ 1614.282588][T24591] policy_mt_check: 23 callbacks suppressed [ 1614.282620][T24591] xt_policy: output policy not valid in PREROUTING and INPUT [ 1614.354515][T24585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13698'. [ 1614.387981][T14905] net_ratelimit: 27 callbacks suppressed [ 1614.388003][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1614.421270][T24598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13702'. [ 1614.529270][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1614.647205][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1614.767175][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1614.843864][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13708'. [ 1614.855001][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13708'. [ 1614.877791][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1614.930403][T24623] IPv6: sit1: Disabled Multicast RS [ 1614.987332][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1615.055490][T24626] netlink: 'syz.4.13711': attribute type 58 has an invalid length. [ 1615.064641][T24627] netlink: 'syz.1.13710': attribute type 1 has an invalid length. [ 1615.090507][T24626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13711'. [ 1615.111257][T24627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1615.145188][T24630] vlan5: entered promiscuous mode [ 1615.150765][T24630] bond4: entered promiscuous mode [ 1615.156207][T24630] vlan5: entered allmulticast mode [ 1615.184131][T24630] bond4: entered allmulticast mode [ 1615.294770][T24627] bond4: (slave bridge2): making interface the new active one [ 1615.316428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1615.324597][ C1] lec:lec_tx_timeout: lec0 [ 1615.350573][T24627] bridge2: entered promiscuous mode [ 1615.371631][T24627] bridge2: entered allmulticast mode [ 1615.384966][T24627] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1615.457014][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1615.543490][T24637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13713'. [ 1615.556868][T24639] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.13717'. [ 1615.566973][T24637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13713'. [ 1615.578425][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1615.578563][T24639] netlink: 'syz.1.13717': attribute type 4 has an invalid length. [ 1615.622194][T24643] sctp: [Deprecated]: syz.3.13715 (pid 24643) Use of int in maxseg socket option. [ 1615.622194][T24643] Use struct sctp_assoc_value instead [ 1615.647457][T24640] netlink: 'syz.1.13717': attribute type 4 has an invalid length. [ 1615.661790][T24272] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.682506][T24646] netlink: 'syz.0.13716': attribute type 1 has an invalid length. [ 1615.692490][T24272] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.720279][T24646] netlink: 'syz.0.13716': attribute type 1 has an invalid length. [ 1615.746133][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1615.775369][T24272] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.785046][T24272] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.809316][T24651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1616.159286][T24672] netlink: 'syz.1.13725': attribute type 12 has an invalid length. [ 1616.174008][T24672] netlink: 'syz.1.13725': attribute type 29 has an invalid length. [ 1616.352630][T24682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.383482][T24682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.478916][T24689] netlink: 'syz.1.13729': attribute type 10 has an invalid length. [ 1619.591408][T24709] net_ratelimit: 6 callbacks suppressed [ 1619.591430][T24709] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1619.596577][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1619.787210][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1619.907683][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1619.950471][T24731] __nla_validate_parse: 7 callbacks suppressed [ 1619.950494][T24731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13743'. [ 1619.976832][T24731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13743'. [ 1620.057416][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1620.089588][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13745'. [ 1620.169090][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1620.327364][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1620.451718][T24753] netlink: 'syz.2.13750': attribute type 1 has an invalid length. [ 1620.520605][T24753] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1620.550669][T24758] 8021q: VLANs not supported on lo [ 1620.574424][T24765] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.13749'. [ 1620.629172][T24754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.13749'. [ 1620.701102][T24759] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13752'. [ 1620.710796][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1620.817170][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1620.851099][T24774] syzkaller0: entered promiscuous mode [ 1620.857722][T24774] syzkaller0: entered allmulticast mode [ 1620.936637][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1621.321967][T24766] lo speed is unknown, defaulting to 1000 [ 1621.365960][T24794] 8021q: VLANs not supported on lo [ 1621.473487][T24796] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13760'. [ 1621.661561][T24801] geneve2: entered promiscuous mode [ 1621.688894][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53189 - 0 [ 1621.759419][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53189 - 0 [ 1621.848226][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53189 - 0 [ 1621.885706][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53189 - 0 [ 1622.052162][T24809] syzkaller0: entered promiscuous mode [ 1622.058872][T24809] syzkaller0: entered allmulticast mode [ 1622.109573][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13764'. [ 1622.264554][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1622.323451][T24829] netlink: 'syz.2.13770': attribute type 1 has an invalid length. [ 1622.629989][T24837] netlink: 'syz.1.13774': attribute type 1 has an invalid length. [ 1622.757138][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13774'. [ 1623.045223][T24837] bond5: entered promiscuous mode [ 1623.053047][T24837] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1623.115984][T24850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1623.130631][T24850] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1623.154796][T24850] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1623.190871][T24850] bond5: (slave vcan1): making interface the new active one [ 1623.198874][T24850] vcan1: entered promiscuous mode [ 1623.224642][T24850] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 1623.815094][T24896] IPVS: Error connecting to the multicast addr [ 1623.969153][T24901] erspan0: entered promiscuous mode [ 1623.975813][T24901] gretap0: entered promiscuous mode [ 1623.986116][T24901] debugfs: 'hsr1' already exists in 'hsr' [ 1623.995156][T24901] Cannot create hsr debugfs directory [ 1624.018161][T24901] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1624.064860][T24901] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1624.337251][T24921] netlink: 'syz.3.13794': attribute type 15 has an invalid length. [ 1624.347825][T24920] netlink: 'syz.3.13794': attribute type 15 has an invalid length. [ 1624.370233][T24921] IPVS: length: 8 != 1152 [ 1624.374693][T24920] IPVS: length: 8 != 1152 [ 1624.492912][T24933] xt_hashlimit: size too large, truncated to 1048576 [ 1624.553663][T24939] netlink: 'syz.3.13800': attribute type 4 has an invalid length. [ 1624.657176][T19910] net_ratelimit: 21 callbacks suppressed [ 1624.657210][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1624.754722][T24950] netlink: 'syz.0.13805': attribute type 1 has an invalid length. [ 1624.780001][T24948] netlink: 'syz.1.13804': attribute type 1 has an invalid length. [ 1624.862856][T24957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1624.870181][T24957] IPv6: NLM_F_CREATE should be set when creating new route [ 1624.877534][T24957] IPv6: NLM_F_CREATE should be set when creating new route [ 1624.884802][T24957] IPv6: NLM_F_CREATE should be set when creating new route [ 1624.904045][T24948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1624.922778][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1624.922800][T24957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1624.972825][T24950] bond5: entered promiscuous mode [ 1624.993990][T24950] bond5: entered allmulticast mode [ 1625.013375][T24950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1625.049463][T24958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1625.064359][T24958] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1625.080908][T24958] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1625.155811][T24962] bridge2: entered promiscuous mode [ 1625.188142][ T3768] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1625.204894][T24962] bridge2: entered allmulticast mode [ 1625.220362][T24962] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1625.235084][T24961] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1625.305301][T24965] bond10: option arp_all_targets: invalid value (18446744073709551613) [ 1625.317843][T19910] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1625.341567][T24965] bond10 (unregistering): Released all slaves [ 1625.415242][T24950] bridge3: entered promiscuous mode [ 1625.431664][T24950] bridge3: entered allmulticast mode [ 1625.451294][T24950] bond5: (slave bridge3): Enslaving as a backup interface with a down link [ 1625.516980][T24974] tipc: Started in network mode [ 1625.537033][T24974] tipc: Node identity 925c89a282f9, cluster identity 4711 [ 1625.554650][T24974] tipc: Enabled bearer , priority 0 [ 1625.586548][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1625.688235][T24981] __nla_validate_parse: 9 callbacks suppressed [ 1625.688259][T24981] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13812'. [ 1625.739549][T24974] tipc: Disabling bearer [ 1625.766622][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1626.017270][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13814'. [ 1626.027792][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13814'. [ 1626.057551][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1626.133940][T25004] netlink: 'syz.0.13819': attribute type 1 has an invalid length. [ 1626.150599][T25004] netlink: 136 bytes leftover after parsing attributes in process `syz.0.13819'. [ 1626.168831][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1626.210982][T25004] netlink: 'syz.0.13819': attribute type 1 has an invalid length. [ 1626.235198][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13819'. [ 1626.281065][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1626.407104][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1626.563284][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13825'. [ 1626.578973][T25025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13825'. [ 1626.600953][T25024] netlink: 300 bytes leftover after parsing attributes in process `syz.0.13824'. [ 1626.714296][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13829'. [ 1626.758578][T25041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13829'. [ 1627.535025][T25083] sit0: entered promiscuous mode [ 1629.757406][T19910] net_ratelimit: 29 callbacks suppressed [ 1629.757430][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1629.872374][T25046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1629.880844][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1629.997739][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1630.103290][T25085] netlink: 'syz.3.13843': attribute type 1 has an invalid length. [ 1630.118706][T25085] netlink: 'syz.3.13843': attribute type 1 has an invalid length. [ 1630.127620][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1630.129069][T25085] netlink: 'syz.3.13843': attribute type 8 has an invalid length. [ 1630.237592][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1630.264810][T25100] netlink: 'syz.2.13846': attribute type 1 has an invalid length. [ 1630.287631][T25100] netlink: 'syz.2.13846': attribute type 2 has an invalid length. [ 1630.306138][T25100] netlink: 'syz.2.13846': attribute type 2 has an invalid length. [ 1630.323608][T25100] netlink: 'syz.2.13846': attribute type 2 has an invalid length. [ 1630.347131][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1630.411332][T25107] delete_channel: no stack [ 1630.630599][T25121] pim6reg: entered allmulticast mode [ 1630.637956][ T3768] bridge_slave_1: left allmulticast mode [ 1630.649401][ T3768] bridge_slave_1: left promiscuous mode [ 1630.670110][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.710228][ T3768] bridge_slave_0: left allmulticast mode [ 1630.723340][ T3768] bridge_slave_0: left promiscuous mode [ 1630.739181][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.829037][T25131] netlink: 'syz.0.13854': attribute type 1 has an invalid length. [ 1630.915188][ T8862] Bluetooth: hci2: link tx timeout [ 1630.928845][ T8862] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1631.236153][ T3768] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1631.536171][ T3768] bridge0 (unregistering): left allmulticast mode [ 1631.592525][T25164] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1631.672762][ T3768] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1631.923275][ T3768]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.943110][ T3768]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.962733][ T3768]  (unregistering): Released all slaves [ 1631.982925][ T3768] bond1 (unregistering): Released all slaves [ 1632.006107][ T3768] bond2 (unregistering): Released all slaves [ 1632.024228][ T3768] bond3 (unregistering): Released all slaves [ 1632.042956][ T3768] bond4 (unregistering): Released all slaves [ 1632.068690][ T3768] bond5 (unregistering): Released all slaves [ 1632.084634][ T3768] bond6 (unregistering): Released all slaves [ 1632.103478][ T3768] bond0 (unregistering): (slave bond7): Releasing backup interface [ 1632.114373][ T3768] bond0 (unregistering): Released all slaves [ 1632.135460][ T3768] bond7 (unregistering): Released all slaves [ 1632.160170][ T3768] bond8 (unregistering): Released all slaves [ 1632.190328][T25154] bridge0: port 3(gretap0) entered blocking state [ 1632.207591][T25154] bridge0: port 3(gretap0) entered disabled state [ 1632.220198][T25154] gretap0: entered allmulticast mode [ 1632.238313][T25154] gretap0: entered promiscuous mode [ 1632.244262][T25154] bridge0: port 3(gretap0) entered blocking state [ 1632.250938][T25154] bridge0: port 3(gretap0) entered forwarding state [ 1632.373726][T25169] __nla_validate_parse: 9 callbacks suppressed [ 1632.373751][T25169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1632.391041][T25169] netlink: 'syz.3.13865': attribute type 7 has an invalid length. [ 1632.399389][T25169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13865'. [ 1632.472564][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1632.527917][ T3768] v: left promiscuous mode [ 1632.627979][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1632.641158][T25176] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1632.694597][ T3768] tipc: Disabling bearer [ 1632.730063][ T3768] tipc: Disabling bearer [ 1632.744354][ T3768] tipc: Left network mode [ 1632.812873][T25179] bond5: entered allmulticast mode [ 1632.846780][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1632.997710][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 1633.427820][T25208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1633.447448][T25213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13874'. [ 1633.481473][T25207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1633.988399][T25226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13877'. [ 1634.069771][T25228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13877'. [ 1634.331062][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13879'. [ 1634.362209][T25214] lo speed is unknown, defaulting to 1000 [ 1634.468504][T25237] geneve3: entered promiscuous mode [ 1634.724817][T25245] : entered promiscuous mode [ 1634.787783][T14905] net_ratelimit: 12 callbacks suppressed [ 1634.787807][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1634.957687][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1635.354473][T25275] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13882'. [ 1635.760941][T25271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1636.035032][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.087983][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.179413][ T3768] veth1_vlan: left allmulticast mode [ 1636.180184][T25293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13889'. [ 1636.185320][ T3768] veth1_vlan: left promiscuous mode [ 1636.244522][ T3768] veth0_vlan: left promiscuous mode [ 1636.570045][ T3768] pim6reg (unregistering): left allmulticast mode [ 1637.049818][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1637.338819][T25322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13895'. [ 1637.437441][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1637.676902][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1637.806594][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1637.924968][T14905] bond1: (slave lo): failed to get link speed/duplex [ 1638.111899][T19915] bond1: (slave lo): failed to get link speed/duplex [ 1638.257861][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1638.276095][ T3768] IPVS: stop unused estimator thread 0... [ 1638.378211][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13903'. [ 1638.499157][T25372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13906'. [ 1638.638706][T25378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13909'. [ 1638.687523][T25380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13908'. [ 1638.713439][T25374] syzkaller0: entered promiscuous mode [ 1638.713770][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13909'. [ 1638.731294][T25381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13909'. [ 1638.741857][T25374] syzkaller0: entered allmulticast mode [ 1639.106853][T25398] netlink: 'syz.0.13913': attribute type 2 has an invalid length. [ 1641.677272][T24273] net_ratelimit: 2 callbacks suppressed [ 1641.677296][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1641.742394][T30499] IPVS: starting estimator thread 0... [ 1641.804847][T25410] syzkaller1: entered promiscuous mode [ 1641.833214][T25410] syzkaller1: entered allmulticast mode [ 1641.854271][T25414] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1641.887703][T25409] IPVS: using max 28 ests per chain, 67200 per kthread [ 1641.951455][T25414] tipc: Enabled bearer , priority 0 [ 1641.960310][T25414] syzkaller0: entered promiscuous mode [ 1641.965903][T25414] syzkaller0: entered allmulticast mode [ 1642.028607][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1642.040443][T25414] tipc: Resetting bearer [ 1642.088347][T25413] tipc: Resetting bearer [ 1642.178230][T25413] tipc: Disabling bearer [ 1642.216723][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1642.327738][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1642.412274][T25444] syz.0.13927: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1642.441421][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1642.473936][T25449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13929'. [ 1642.483960][T25444] CPU: 1 UID: 0 PID: 25444 Comm: syz.0.13927 Not tainted syzkaller #0 PREEMPT(full) [ 1642.484015][T25444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1642.484042][T25444] Call Trace: [ 1642.484053][T25444] [ 1642.484063][T25444] dump_stack_lvl+0xe8/0x150 [ 1642.484107][T25444] warn_alloc+0x249/0x340 [ 1642.484135][T25444] ? stack_trace_save+0xa9/0x100 [ 1642.484166][T25444] ? __pfx_warn_alloc+0x10/0x10 [ 1642.484199][T25444] ? kasan_save_track+0x4f/0x80 [ 1642.484221][T25444] ? kasan_save_track+0x3e/0x80 [ 1642.484241][T25444] ? __kasan_kmalloc+0x93/0xb0 [ 1642.484263][T25444] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1642.484285][T25444] ? xskq_create+0x56/0x170 [ 1642.484316][T25444] ? xsk_setsockopt+0x54c/0x990 [ 1642.484340][T25444] ? do_sock_setsockopt+0x17c/0x1b0 [ 1642.484368][T25444] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1642.484393][T25444] ? do_syscall_64+0x14d/0xf80 [ 1642.484416][T25444] __vmalloc_node_range_noprof+0x132/0x1730 [ 1642.484475][T25444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1642.484503][T25444] ? __kasan_kmalloc+0x93/0xb0 [ 1642.484530][T25444] vmalloc_user_noprof+0xad/0xe0 [ 1642.484551][T25444] ? xskq_create+0xbf/0x170 [ 1642.484578][T25444] xskq_create+0xbf/0x170 [ 1642.484609][T25444] xsk_init_queue+0x8a/0xe0 [ 1642.484638][T25444] xsk_setsockopt+0x54c/0x990 [ 1642.484666][T25444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1642.484691][T25444] ? __pfx_aa_sk_perm+0x10/0x10 [ 1642.484719][T25444] ? aa_sock_opt_perm+0xff/0x1a0 [ 1642.484747][T25444] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1642.484769][T25444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1642.484796][T25444] do_sock_setsockopt+0x17c/0x1b0 [ 1642.484829][T25444] __x64_sys_setsockopt+0x13d/0x1b0 [ 1642.484861][T25444] do_syscall_64+0x14d/0xf80 [ 1642.484879][T25444] ? trace_irq_disable+0x3b/0x150 [ 1642.484909][T25444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.484941][T25444] ? clear_bhb_loop+0x40/0x90 [ 1642.484967][T25444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.484986][T25444] RIP: 0033:0x7fb2c739c799 [ 1642.485006][T25444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.485024][T25444] RSP: 002b:00007fb2c8339028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1642.485045][T25444] RAX: ffffffffffffffda RBX: 00007fb2c7615fa0 RCX: 00007fb2c739c799 [ 1642.485060][T25444] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1642.485072][T25444] RBP: 00007fb2c7432bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1642.485084][T25444] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.485096][T25444] R13: 00007fb2c7616038 R14: 00007fb2c7615fa0 R15: 00007ffe98304ef8 [ 1642.485131][T25444] [ 1642.485139][T25444] Mem-Info: [ 1642.595993][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1642.602789][T25444] active_anon:6575 inactive_anon:0 isolated_anon:0 [ 1642.602789][T25444] active_file:2825 inactive_file:40682 isolated_file:0 [ 1642.602789][T25444] unevictable:768 dirty:59 writeback:0 [ 1642.602789][T25444] slab_reclaimable:15907 slab_unreclaimable:215754 [ 1642.602789][T25444] mapped:29658 shmem:1439 pagetables:3665 [ 1642.602789][T25444] sec_pagetables:0 bounce:0 [ 1642.602789][T25444] kernel_misc_reclaimable:0 [ 1642.602789][T25444] free:1170636 free_pcp:23836 free_cma:0 [ 1642.731175][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13927'. [ 1642.861527][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1642.888715][T25458] netlink: 'syz.2.13929': attribute type 9 has an invalid length. [ 1642.930211][T25444] Node 0 active_anon:26200kB inactive_anon:0kB active_file:11300kB inactive_file:162524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16232kB dirty:236kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20892kB pagetables:14492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1642.988878][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1643.039230][T25444] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1643.084411][T25460] netlink: 'syz.4.13932': attribute type 10 has an invalid length. [ 1643.093568][T25460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13932'. [ 1643.105411][T25460] dummy0: entered promiscuous mode [ 1643.129311][T25444] Node 0 DMA free:11164kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:40kB free_cma:0kB [ 1643.165452][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 270 seconds [ 1643.174712][T25460] bridge0: port 3(dummy0) entered blocking state [ 1643.193087][T25460] bridge0: port 3(dummy0) entered disabled state [ 1643.217340][T25444] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1643.233261][T25460] dummy0: entered allmulticast mode [ 1643.233822][T25444] Node 0 DMA32 free:1201196kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26300kB inactive_anon:0kB active_file:11300kB inactive_file:162524kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:40136kB local_pcp:19712kB free_cma:0kB [ 1643.284201][T25444] lowmem_reserve[]: 0 0 0 0 0 [ 1643.292628][T25462] 8021q: VLANs not supported on sit0 [ 1643.309009][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1643.327069][T25444] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1643.406873][T25444] lowmem_reserve[]: 0 0 0 0 0 [ 1643.411691][T25444] Node 1 Normal free:3470288kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55596kB local_pcp:25304kB free_cma:0kB [ 1643.487886][T25444] lowmem_reserve[]: 0 0 0 0 0 [ 1643.509554][T25444] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11164kB [ 1643.587728][T25444] Node 0 DMA32: 14216*4kB (UM) 10731*8kB (UME) 6014*16kB (UM) 181*32kB (UM) 77*64kB (UM) 118*128kB (UME) 809*256kB (UM) 470*512kB (UME) 370*1024kB (UM) 55*2048kB (UM) 0*4096kB = 1204024kB [ 1643.623158][T25444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1643.673119][T25444] Node 1 Normal: 12*4kB (UE) 16*8kB (UME) 26*16kB (UME) 20*32kB (UME) 20*64kB (UME) 18*128kB (UME) 15*256kB (UME) 17*512kB (UME) 14*1024kB (UM) 13*2048kB (UE) 833*4096kB (UM) = 3470288kB [ 1643.698990][T25444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1643.709831][T25444] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1643.765270][T25489] xt_hashlimit: size too large, truncated to 1048576 [ 1643.772404][T25444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1643.792547][T25444] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1643.820332][T25444] 44892 total pagecache pages [ 1643.825333][T25444] 0 pages in swap cache [ 1643.832647][T25444] Free swap = 124996kB [ 1643.842998][T25444] Total swap = 124996kB [ 1643.847825][T25444] 2097051 pages RAM [ 1643.851997][T25444] 0 pages HighMem/MovableOnly [ 1643.857426][T25444] 427010 pages reserved [ 1643.861938][T25444] 0 pages cma reserved [ 1643.990484][T25486] syzkaller0: entered promiscuous mode [ 1643.996062][T25486] syzkaller0: entered allmulticast mode [ 1644.093400][T25501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13944'. [ 1644.343888][T25507] netlink: 'syz.4.13946': attribute type 1 has an invalid length. [ 1644.353827][T25507] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13946'. [ 1644.391723][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13947'. [ 1644.462021][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13947'. [ 1645.293523][T25538] netlink: 'syz.0.13951': attribute type 12 has an invalid length. [ 1647.469874][T25515] syzkaller1: entered promiscuous mode [ 1647.475597][T25515] syzkaller1: entered allmulticast mode [ 1647.515354][T25538] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1647.527353][T24273] net_ratelimit: 4 callbacks suppressed [ 1647.527377][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1647.730157][T25562] netlink: 'syz.4.13957': attribute type 10 has an invalid length. [ 1647.746635][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1647.754223][T25565] xt_cgroup: invalid path, errno=-2 [ 1647.761398][T25565] xt_cgroup: invalid path, errno=-2 [ 1647.769861][T25565] xt_cgroup: invalid path, errno=-2 [ 1647.775913][T25565] xt_cgroup: invalid path, errno=-2 [ 1647.782654][T25562] bridge_slave_1: left allmulticast mode [ 1647.790846][T25562] bridge_slave_1: left promiscuous mode [ 1647.798978][T25562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.878994][T25562] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1647.917640][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1647.962827][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13960'. [ 1647.972312][T25582] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13961'. [ 1647.985454][T25582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13961'. [ 1648.006102][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13961'. [ 1648.117169][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1648.126047][T25585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1648.202973][T25589] tipc: New replicast peer: 255.255.255.255 [ 1648.238814][T25589] tipc: Enabled bearer , priority 10 [ 1648.271833][T25596] netlink: 'syz.2.13966': attribute type 1 has an invalid length. [ 1648.282895][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1648.299504][T25596] netlink: 'syz.2.13966': attribute type 1 has an invalid length. [ 1648.313776][T25589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1648.419048][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1648.477442][T25604] netlink: 'syz.0.13969': attribute type 1 has an invalid length. [ 1648.525023][T25607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13970'. [ 1648.558619][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13972'. [ 1648.576214][T25604] veth5: entered promiscuous mode [ 1648.583431][T25604] veth5: entered allmulticast mode [ 1648.629367][T25605] veth7: entered promiscuous mode [ 1648.634643][T25605] veth7: entered allmulticast mode [ 1648.666697][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1648.734006][T25613] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1648.777247][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1648.899022][T25622] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1648.910321][T25622] bond4: option arp_ip_target: invalid value (0) [ 1648.928404][T25622] bond4 (unregistering): Released all slaves [ 1649.164580][T25643] __nla_validate_parse: 4 callbacks suppressed [ 1649.164602][T25643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13981'. [ 1649.381036][T30499] tipc: Node number set to 860169482 [ 1649.521277][T25667] netlink: 'syz.1.13987': attribute type 21 has an invalid length. [ 1649.978602][T25691] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.13996'. [ 1650.022086][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13999'. [ 1650.139551][T25703] ipvlan2: entered allmulticast mode [ 1650.158923][T25703] batadv_slave_1: entered allmulticast mode [ 1650.218865][T25703] batman_adv: batadv0: Adding interface: ipvlan2 [ 1650.238678][T25703] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1650.307474][T25703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.336480][T25703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.353423][T25703] batman_adv: batadv0: Interface activated: ipvlan2 [ 1650.618231][T25726] bond0: (slave bridge0): Releasing backup interface [ 1650.659596][T25728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14005'. [ 1650.694668][T25728] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14005'. [ 1650.730141][T25732] netlink: 'syz.0.14006': attribute type 1 has an invalid length. [ 1650.871417][T25737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14007'. [ 1650.914299][T25737] xt_hashlimit: max too large, truncated to 1048576 [ 1651.337681][T25763] 9o+4: renamed from lo [ 1651.391375][T25768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14017'. [ 1651.405314][T25767] syzkaller0: entered promiscuous mode [ 1651.412144][T25767] syzkaller0: entered allmulticast mode [ 1651.432271][T25767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14018'. [ 1651.494443][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14018'. [ 1651.508591][T25771] netlink: 'syz.0.14019': attribute type 1 has an invalid length. [ 1651.528875][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14018'. [ 1651.551391][T25774] netlink: 'syz.4.14020': attribute type 1 has an invalid length. [ 1651.571311][T25774] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1652.112892][T25799] IPVS: Error connecting to the multicast addr [ 1652.637287][ T49] net_ratelimit: 30 callbacks suppressed [ 1652.637312][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1652.877263][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1652.997088][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1653.118188][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1653.178241][T25867] bridge_slave_1: default FDB implementation only supports local addresses [ 1653.210481][T25867] bridge_slave_1: default FDB implementation only supports local addresses [ 1653.249431][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1653.377935][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1653.530157][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1653.642694][T25895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1653.677795][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1653.786575][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1653.920128][T25913] netlink: 'syz.2.14059': attribute type 83 has an invalid length. [ 1654.028580][T25912] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 1654.062847][T25912] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1654.076282][T25912] bond6 (unregistering): Released all slaves [ 1654.146094][T25913] bond4: option mode: unable to set because the bond device has slaves [ 1654.188207][T25913] __nla_validate_parse: 11 callbacks suppressed [ 1654.188230][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1654.255153][T25913] netlink: 292 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1654.298669][T25913] netlink: 124 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1654.349436][T25935] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14065'. [ 1654.909151][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14075'. [ 1655.051890][T25979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14076'. [ 1655.195605][T25986] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1655.295322][T25988] netlink: 'syz.1.14079': attribute type 11 has an invalid length. [ 1655.310186][T25988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14079'. [ 1655.327471][T25986] netlink: 'syz.2.14078': attribute type 9 has an invalid length. [ 1655.335480][T25986] netlink: 'syz.2.14078': attribute type 11 has an invalid length. [ 1655.356154][T25986] netlink: 'syz.2.14078': attribute type 12 has an invalid length. [ 1655.376035][T25986] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1655.410159][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14078'. [ 1655.493262][T26000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14082'. [ 1655.898922][T26020] xt_hashlimit: size too large, truncated to 1048576 [ 1656.285081][T26045] pimreg: entered allmulticast mode [ 1656.361739][T26046] vcan2: entered promiscuous mode [ 1656.377330][T26046] vcan2: entered allmulticast mode [ 1656.533064][T26061] netlink: 'syz.1.14103': attribute type 4 has an invalid length. [ 1657.127785][T26078] netlink: 'syz.1.14109': attribute type 33 has an invalid length. [ 1657.651380][T26103] sctp: [Deprecated]: syz.1.14116 (pid 26103) Use of int in max_burst socket option. [ 1657.651380][T26103] Use struct sctp_assoc_value instead [ 1657.689359][T26102] IPv6: sit2: Disabled Multicast RS [ 1657.699858][T26102] sit2: entered allmulticast mode [ 1657.737796][T24272] net_ratelimit: 30 callbacks suppressed [ 1657.737821][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1657.762491][T26113] netlink: 'syz.2.14118': attribute type 9 has an invalid length. [ 1657.886665][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1658.004299][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1658.117436][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1658.227428][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1658.365745][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1658.375944][T26151] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1658.491296][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1658.549204][T26157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 1658.607862][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1658.717253][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1658.899449][T26177] netlink: 'syz.3.14135': attribute type 5 has an invalid length. [ 1658.908553][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1659.002630][T26182] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1659.279952][T26201] __nla_validate_parse: 13 callbacks suppressed [ 1659.279973][T26201] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14143'. [ 1659.342212][T26213] netlink: 'syz.3.14141': attribute type 1 has an invalid length. [ 1659.357150][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14141'. [ 1659.490072][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14145'. [ 1659.720964][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14150'. [ 1659.738880][T26226] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1659.758216][T26226] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14150'. [ 1660.207595][T26246] syzkaller0: entered promiscuous mode [ 1660.219181][T26246] syzkaller0: entered allmulticast mode [ 1660.569297][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14163'. [ 1660.646804][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14164'. [ 1661.441782][ T9564] lec:lec_start_xmit: lec0:No lecd attached [ 1663.084562][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1663.095316][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14164'. [ 1663.105137][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1663.136699][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1663.152377][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1663.197261][ T13] net_ratelimit: 9 callbacks suppressed [ 1663.197284][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1663.320748][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14165'. [ 1663.336600][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1663.365638][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14165'. [ 1663.383753][T26290] openvswitch: netlink: Message has 4 unknown bytes. [ 1663.402941][T26291] sctp: [Deprecated]: syz.4.14167 (pid 26291) Use of int in maxseg socket option. [ 1663.402941][T26291] Use struct sctp_assoc_value instead [ 1663.447819][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1663.570226][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1663.709121][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1663.866618][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1663.961474][T26320] dummy0: left allmulticast mode [ 1663.978597][T26320] bridge0: port 3(dummy0) entered disabled state [ 1664.002461][T26320] bridge_slave_0: left allmulticast mode [ 1664.009674][T26320] bridge_slave_0: left promiscuous mode [ 1664.018268][T26320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.181056][T26325] batadv1: entered allmulticast mode [ 1664.248925][T26328] syzkaller1: entered promiscuous mode [ 1664.271680][T26328] syzkaller1: entered allmulticast mode [ 1664.407352][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1664.527590][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1664.629054][T26360] __nla_validate_parse: 1 callbacks suppressed [ 1664.629076][T26360] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14185'. [ 1664.647722][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1664.820711][T26368] syzkaller0: entered promiscuous mode [ 1664.830025][T26368] syzkaller0: entered allmulticast mode [ 1664.853982][T26371] netlink: 'syz.0.14189': attribute type 11 has an invalid length. [ 1664.886431][T26371] netlink: 'syz.0.14189': attribute type 11 has an invalid length. [ 1664.929052][T26371] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14189'. [ 1664.950450][T26375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14190'. [ 1665.250286][T26382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14192'. [ 1665.526992][T26403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14196'. [ 1665.598797][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1665.732681][T26399] syzkaller0: entered promiscuous mode [ 1665.740865][T26399] syzkaller0: entered allmulticast mode [ 1665.763474][T26419] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1665.804619][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14198'. [ 1666.079577][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1666.440784][T26448] netlink: 'syz.1.14206': attribute type 1 has an invalid length. [ 1666.457181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1666.462359][T26448] netlink: 'syz.1.14206': attribute type 1 has an invalid length. [ 1666.465231][ C1] lec:lec_tx_timeout: lec0 [ 1666.762396][T26460] syzkaller0: entered promiscuous mode [ 1666.773681][T26460] syzkaller0: entered allmulticast mode [ 1666.790702][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14212'. [ 1667.025372][T26476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14215'. [ 1669.490375][T26478] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1669.490904][T26479] netlink: 'syz.0.14215': attribute type 29 has an invalid length. [ 1669.527507][T24273] net_ratelimit: 15 callbacks suppressed [ 1669.527532][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1669.746831][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1669.946655][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1670.067474][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1670.102196][T26533] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1670.170025][T26543] x_tables: duplicate underflow at hook 2 [ 1670.184246][T26544] x_tables: duplicate underflow at hook 2 [ 1670.192600][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1670.319244][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1670.477434][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1670.503578][T26557] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1670.512405][T26561] __nla_validate_parse: 1 callbacks suppressed [ 1670.512423][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14234'. [ 1670.607663][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1670.649508][T26562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14232'. [ 1670.695513][T26570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1670.716566][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1670.859812][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1671.040095][T26595] Cannot find del_set index 4 as target [ 1671.053999][T26597] xt_hashlimit: overflow, try lower: 3/0 [ 1671.081723][T26597] netlink: 'syz.3.14243': attribute type 1 has an invalid length. [ 1671.160164][T26597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1671.255016][T26602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1671.304472][T26602] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1671.335370][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1671.375103][T26602] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1671.409475][T26615] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1671.464399][T26597] veth5: entered promiscuous mode [ 1671.477956][T26597] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1671.504498][T26608] ip6t_srh: unknown srh invflags 4000 [ 1671.529350][T26610] vlan0: entered allmulticast mode [ 1671.534731][T26610] bond4: entered allmulticast mode [ 1671.568601][T26615] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14245'. [ 1671.799127][ T3768] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 1671.845851][T26629] netlink: 'syz.3.14250': attribute type 1 has an invalid length. [ 1671.856013][T26629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14250'. [ 1672.180607][T19914] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1672.234149][T19914] dvmrp0 (unregistering): left allmulticast mode [ 1672.419793][T19914] bond6 (unregistering): (slave bridge3): Releasing active interface [ 1672.701886][T19914] bond0 (unregistering): Released all slaves [ 1672.764437][T19914] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1672.785208][T19914] bond1 (unregistering): Released all slaves [ 1672.802211][T19914] bond2 (unregistering): Released all slaves [ 1672.829806][T19914] bond3 (unregistering): Released all slaves [ 1672.852359][T19914] bond4 (unregistering): Released all slaves [ 1672.872586][T19914] bond5 (unregistering): (slave lo): Releasing backup interface [ 1672.883991][T19914] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1672.897531][T19914] bond5 (unregistering): Released all slaves [ 1672.913128][T19914] bond6 (unregistering): Released all slaves [ 1672.932076][T19914] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1672.942433][T19914] bond7 (unregistering): Released all slaves [ 1672.961290][T19914] bond8 (unregistering): Released all slaves [ 1672.984206][T26632] vcan0: entered allmulticast mode [ 1673.019431][T26652] C: renamed from 9o+4 [ 1673.061013][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14255'. [ 1673.213554][T26677] netlink: 'syz.0.14256': attribute type 9 has an invalid length. [ 1673.239139][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 300 seconds [ 1673.253963][T19914] tipc: Left network mode [ 1673.313776][T26676] netlink: 'syz.1.14257': attribute type 1 has an invalid length. [ 1673.795778][T26702] sctp: [Deprecated]: syz.3.14267 (pid 26702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1673.795778][T26702] Use struct sctp_sack_info instead [ 1674.156090][T26725] netlink: 'syz.2.14272': attribute type 24 has an invalid length. [ 1674.386060][T26739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14276'. [ 1674.433719][T26739] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14276'. [ 1674.558557][ T3768] net_ratelimit: 15 callbacks suppressed [ 1674.558581][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1674.749715][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1674.813883][T26754] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.14281'. [ 1674.887797][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1675.047357][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1675.060073][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14283'. [ 1675.157430][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1675.289247][T26772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14286'. [ 1675.398804][T26787] netlink: 'syz.2.14290': attribute type 3 has an invalid length. [ 1675.577444][ T13] bond1: (slave lo): failed to get link speed/duplex [ 1675.649877][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1675.659789][T26794] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 1675.694512][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1675.707249][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1675.859903][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1675.887583][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1675.987473][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1676.176531][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1676.356925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1676.365011][ C1] lec:lec_tx_timeout: lec0 [ 1676.740891][T19914] hsr_slave_0: left promiscuous mode [ 1676.779062][T19914] hsr_slave_1: left promiscuous mode [ 1676.815440][T19914] veth1_macvtap: left promiscuous mode [ 1676.912513][T26789] infiniband syz2: set active [ 1676.951286][T26789] infiniband syz2: added ip6_vti0 [ 1677.164086][T26789] RDS/IB: syz2: added [ 1677.194900][T26789] smc: adding ib device syz2 with port count 1 [ 1677.216076][T26789] smc: ib device syz2 port 1 has no pnetid [ 1677.303030][T19914] pim6reg527 (unregistering): left allmulticast mode [ 1677.839833][T25814] ip6_vti0 speed is unknown, defaulting to 1000 [ 1677.859709][ T6202] ip6_vti0 speed is unknown, defaulting to 1000 [ 1677.869444][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1678.553268][T26878] erspan2: entered allmulticast mode [ 1678.699755][T26884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14312'. [ 1678.922021][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1678.970065][T19914] IPVS: stop unused estimator thread 0... [ 1679.199040][T26907] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14317'. [ 1679.234429][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14317'. [ 1679.275252][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14317'. [ 1679.289849][T26909] netlink: 244 bytes leftover after parsing attributes in process `syz.4.14318'. [ 1679.622398][T26924] bond6: Removing last ns target with arp_interval on [ 1679.647714][T24272] net_ratelimit: 16 callbacks suppressed [ 1679.647737][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1679.682621][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1679.695795][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1679.732836][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1679.732911][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1679.753739][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14321'. [ 1679.789930][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1679.937200][T19910] bond1: (slave lo): failed to get link speed/duplex [ 1680.057528][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1680.167531][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1680.277701][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1680.371748][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1680.387408][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1680.518248][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1680.650407][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1680.797671][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1680.940922][T19914] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 1681.145512][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1681.439730][T26997] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.14337'. [ 1682.544304][T24273] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 1682.584734][T24273] dvmrp0 (unregistering): left allmulticast mode [ 1682.653192][T24273] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1684.398112][T24273] bond0 (unregistering): Released all slaves [ 1684.410213][T24273] bond1 (unregistering): Released all slaves [ 1684.428102][T24273] bond2 (unregistering): Released all slaves [ 1684.450504][T24273] bond3 (unregistering): Released all slaves [ 1684.472509][T24273] bond4 (unregistering): Released all slaves [ 1684.490415][T24273] bond5 (unregistering): Released all slaves [ 1684.510414][T24273] bond6 (unregistering): Released all slaves [ 1684.531524][T24273] bond7 (unregistering): Released all slaves [ 1684.551341][T24273] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1684.562381][T24273] bond8 (unregistering): Released all slaves [ 1684.582688][T24273] bond9 (unregistering): Released all slaves [ 1684.605127][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1684.732029][T19914] net_ratelimit: 6 callbacks suppressed [ 1684.732051][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1684.900873][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1684.931318][T27039] __nla_validate_parse: 1 callbacks suppressed [ 1684.931340][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1684.954009][T24273] : left promiscuous mode [ 1684.958808][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1685.099291][T24273] v: left promiscuous mode [ 1685.109057][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1685.126851][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1685.194637][T27051] netlink: 'syz.2.14348': attribute type 1 has an invalid length. [ 1685.202774][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1685.210488][T27051] netlink: 'syz.2.14348': attribute type 7 has an invalid length. [ 1685.230085][T27051] netlink: 'syz.2.14348': attribute type 8 has an invalid length. [ 1685.263977][T27051] netlink: 208 bytes leftover after parsing attributes in process `syz.2.14348'. [ 1685.273928][T24273] tipc: Left network mode [ 1685.310620][T27051] NCSI netlink: No device for ifindex 65584 [ 1685.310906][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1685.604880][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1685.627443][T27068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14351'. [ 1685.748547][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1685.762711][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1685.859551][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1685.982028][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1686.105684][T27074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1686.191321][T27076] geneve3: entered promiscuous mode [ 1686.216814][T27076] geneve3: entered allmulticast mode [ 1686.250733][T19914] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 1686.274011][T19914] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 1686.420367][T19914] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 1686.608946][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1686.619167][T27089] bond5: entered allmulticast mode [ 1686.634812][T27089] vcan1: entered allmulticast mode [ 1686.643182][T19914] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 1686.715718][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14358'. [ 1686.974876][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1687.558245][T27116] netlink: 'syz.1.14364': attribute type 1 has an invalid length. [ 1687.590706][T27116] netlink: 'syz.1.14364': attribute type 7 has an invalid length. [ 1687.607961][T27116] netlink: 'syz.1.14364': attribute type 8 has an invalid length. [ 1687.623453][T27116] netlink: 208 bytes leftover after parsing attributes in process `syz.1.14364'. [ 1687.667580][T27116] NCSI netlink: No device for ifindex 65584 [ 1687.955788][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1688.201089][T27141] netlink: 'syz.1.14370': attribute type 32 has an invalid length. [ 1688.248470][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14370'. [ 1688.360591][T27141] bond9: Setting coupled_control to on (1) [ 1688.594007][T27165] netlink: 'syz.0.14375': attribute type 1 has an invalid length. [ 1688.607679][ T8862] Bluetooth: hci2: command 0x0405 tx timeout [ 1688.752918][T27166] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1688.812959][T27166] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1688.960504][T27165] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 1688.981134][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1689.568083][T27207] xt_cgroup: path and classid specified [ 1689.757741][T19913] net_ratelimit: 23 callbacks suppressed [ 1689.757764][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1689.874963][T27221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14386'. [ 1689.909700][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1690.057186][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1690.115399][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1690.180875][T27227] netlink: 'syz.0.14387': attribute type 10 has an invalid length. [ 1690.190260][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1690.317149][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1690.439760][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1690.542754][T27237] syzkaller0: entered promiscuous mode [ 1690.550544][T27237] syzkaller0: entered allmulticast mode [ 1690.571874][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1691.074100][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1691.087598][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1691.097663][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1691.133559][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1691.147379][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1691.301158][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14398'. [ 1693.247193][ T8862] Bluetooth: hci4: command tx timeout [ 1693.897460][T27248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14394'. [ 1693.908016][T27262] veth0: entered promiscuous mode [ 1693.913468][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1693.914720][T27268] veth0: left promiscuous mode [ 1693.938754][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1694.050783][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1694.160428][T27295] tipc: Enabling of bearer rejected, failed to enable media [ 1694.189118][T27295] tipc: Enabling of bearer rejected, failed to enable media [ 1694.270421][ T6043] bond1: (slave lo): failed to get link speed/duplex [ 1694.770923][T27325] syzkaller0: entered allmulticast mode [ 1694.800116][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1694.975252][ T6045] net_ratelimit: 4 callbacks suppressed [ 1694.975276][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1695.061870][T27346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14414'. [ 1695.097912][T27349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14414'. [ 1695.158364][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1695.318459][ T8862] Bluetooth: hci4: command tx timeout [ 1695.338633][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1695.466577][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1695.480677][T27360] syzkaller0: entered promiscuous mode [ 1695.489782][T27365] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.14418'. [ 1695.497231][T27360] syzkaller0: entered allmulticast mode [ 1695.527383][T27365] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.14418'. [ 1695.875722][T27387] netlink: 196 bytes leftover after parsing attributes in process `syz.0.14420'. [ 1695.894056][T26789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1695.903823][T27388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14421'. [ 1695.913945][T19914] bond1: (slave lo): failed to get link speed/duplex [ 1696.087644][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14421'. [ 1696.107469][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1696.338115][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1696.467434][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1696.589177][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1696.611879][T27412] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.14428'. [ 1696.707130][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1697.299278][T27437] netlink: 'syz.1.14435': attribute type 10 has an invalid length. [ 1697.310884][T27437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14435'. [ 1697.342505][T27439] netlink: 'syz.2.14436': attribute type 10 has an invalid length. [ 1697.363385][T27440] netlink: 'syz.2.14436': attribute type 1 has an invalid length. [ 1697.398427][ T8862] Bluetooth: hci4: command tx timeout [ 1697.447831][T27422] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1697.472832][T27422] syzkaller0: entered promiscuous mode [ 1697.479060][T27422] syzkaller0: entered allmulticast mode [ 1697.745265][T27264] lo speed is unknown, defaulting to 1000 [ 1697.895253][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14441'. [ 1698.154075][T27471] x_tables: duplicate underflow at hook 1 [ 1698.240355][T27474] netlink: 'syz.4.14447': attribute type 24 has an invalid length. [ 1698.285531][T27264] ip6_vti0 speed is unknown, defaulting to 1000 [ 1698.429837][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14449'. [ 1698.503274][T27483] bond6: option xmit_hash_policy: invalid value (64) [ 1698.512887][T27483] bond6 (unregistering): Released all slaves [ 1698.695451][T27434] siw: device registration error -23 [ 1699.034810][T27503] syzkaller0: entered promiscuous mode [ 1699.045511][T27503] syzkaller0: entered allmulticast mode [ 1699.477460][ T8862] Bluetooth: hci4: command tx timeout [ 1699.561454][T24273] : left allmulticast mode [ 1699.626861][T24273] team0 (unregistering): Port device wireguard0 removed [ 1700.113221][T24273] smc: removing net device team0 with user defined pnetid SYZ2 [ 1700.287131][ T3768] net_ratelimit: 14 callbacks suppressed [ 1700.287154][ T3768] bond1: (slave lo): failed to get link speed/duplex [ 1700.352564][T27544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14460'. [ 1700.450788][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1700.631046][T27264] chnl_net:caif_netlink_parms(): no params data found [ 1700.727883][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1700.924370][T27568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1701.094537][T27570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14467'. [ 1701.157740][T27264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.172323][T27264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.183065][T27264] bridge_slave_0: entered allmulticast mode [ 1701.194920][T27264] bridge_slave_0: entered promiscuous mode [ 1701.223524][T27264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.245130][T27264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.267661][T27264] bridge_slave_1: entered allmulticast mode [ 1701.286129][T27264] bridge_slave_1: entered promiscuous mode [ 1701.297842][T27581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14469'. [ 1701.312475][T24273] IPVS: stop unused estimator thread 0... [ 1701.320066][T19913] bond1: (slave lo): failed to get link speed/duplex [ 1701.483837][T27264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.507317][ T49] bond1: (slave lo): failed to get link speed/duplex [ 1701.532003][T27264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.622981][T27589] netlink: 'syz.4.14471': attribute type 1 has an invalid length. [ 1701.643496][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1701.654285][T27590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14471'. [ 1701.679738][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1701.720035][T27589] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1701.723310][T27592] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1701.724350][T27264] team0: Port device team_slave_0 added [ 1701.758293][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1701.799131][T27264] team0: Port device team_slave_1 added [ 1701.891074][T27264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.911563][T27264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.969677][T27264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.986747][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1702.014187][T27264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.028608][T27264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.120610][T27264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.137187][ T6045] bond1: (slave lo): failed to get link speed/duplex [ 1702.373186][T27264] hsr_slave_0: entered promiscuous mode [ 1702.398445][T27264] hsr_slave_1: entered promiscuous mode [ 1702.405162][T27264] debugfs: 'hsr0' already exists in 'hsr' [ 1702.457701][T27264] Cannot create hsr debugfs directory [ 1702.620928][T27644] netlink: 'syz.1.14485': attribute type 58 has an invalid length. [ 1702.642811][T27644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14485'. [ 1702.686936][ T31] INFO: task udevd:15959 blocked for more than 143 seconds. [ 1702.694301][ T31] Not tainted syzkaller #0 [ 1702.710638][ T31] Blocked by coredump. [ 1702.715675][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1702.735154][ T31] task:udevd state:D stack:23552 pid:15959 tgid:15959 ppid:5195 task_flags:0x40054c flags:0x00080803 [ 1702.758569][T24272] bond1: (slave lo): failed to get link speed/duplex [ 1702.766640][ T31] Call Trace: [ 1702.770050][ T31] [ 1702.773021][ T31] __schedule+0x1585/0x5340 [ 1702.778341][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1702.783770][ T31] ? __pfx___schedule+0x10/0x10 [ 1702.789072][ T31] ? schedule+0x90/0x360 [ 1702.793557][ T31] schedule+0x164/0x360 [ 1702.797962][ T31] io_schedule+0x7f/0xd0 [ 1702.802280][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1702.808684][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1702.814561][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1702.840718][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1702.860972][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1702.876397][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1702.893577][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 1702.903776][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1702.922590][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1702.960916][ T31] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1702.985012][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1702.992057][T24273] bond1: (slave lo): failed to get link speed/duplex [ 1703.017784][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1703.023026][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1703.034025][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1703.039711][ T31] bdev_release+0x417/0x650 [ 1703.044513][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1703.050976][ T31] blkdev_release+0x15/0x20 [ 1703.067470][ T31] __fput+0x44f/0xa70 [ 1703.073945][T27651] netlink: 154500 bytes leftover after parsing attributes in process `syz.1.14486'. [ 1703.088536][ T31] task_work_run+0x1d9/0x270 [ 1703.093405][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1703.100588][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1703.113101][ T31] do_exit+0x69b/0x2320 [ 1703.119567][ T31] ? __pfx_do_exit+0x10/0x10 [ 1703.128952][ T31] ? cgroup1_freezing+0x20/0x350 [ 1703.142851][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1703.154471][ T31] do_group_exit+0x21b/0x2d0 [ 1703.169606][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1703.181734][ T31] get_signal+0x1284/0x1330 [ 1703.192582][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1703.214447][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1703.222960][ T31] ? ksys_read+0x1fc/0x270 [ 1703.231096][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1703.238587][ T31] ? rcu_is_watching+0x15/0xb0 [ 1703.243629][ T31] do_syscall_64+0x32d/0xf80 [ 1703.261573][ T31] ? trace_irq_disable+0x3b/0x150 [ 1703.267994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.274425][ T31] ? clear_bhb_loop+0x40/0x90 [ 1703.280155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.286224][ T31] RIP: 0033:0x7f1bbf4a7407 [ 1703.291088][ T31] RSP: 002b:00007ffd017020e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1703.301603][ T31] RAX: fffffffffffffffc RBX: 00007f1bbfb85880 RCX: 00007f1bbf4a7407 [ 1703.310932][ T31] RDX: 0000000000000200 RSI: 00007f1bbfb84000 RDI: 0000000000000009 [ 1703.320811][ T1605] block nbd1: Possible stuck request ffff88802670aa00: control (read@0,4096B). Runtime 330 seconds [ 1703.337963][ T31] RBP: 000055b33404c050 R08: 0000000000000000 R09: 0000000000000000 [ 1703.346236][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1703.358811][ T31] R13: 0000000000000000 R14: 000055b33404d638 R15: 00007f1bbfcac39c [ 1703.367667][ T31] [ 1703.370941][ T31] [ 1703.370941][ T31] Showing all locks held in the system: [ 1703.395203][ T31] 1 lock held by khungtaskd/31: [ 1703.405194][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1703.427139][ T31] 2 locks held by getty/5584: [ 1703.434352][ T31] #0: ffff8880367780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1703.454294][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1703.466031][ T31] 1 lock held by udevd/15959: [ 1703.474907][T27264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1703.475235][ T31] #0: ffff888026604358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1703.499251][ T31] 3 locks held by syz-executor/27264: [ 1703.504655][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1703.514652][ T31] #1: ffff888028214d40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: do_setlink+0x3d2/0x4590 [ 1703.526085][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1703.538364][ T31] [ 1703.540828][ T31] ============================================= [ 1703.540828][ T31] [ 1703.551793][T27264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1703.563305][ T31] NMI backtrace for cpu 0 [ 1703.563328][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1703.563352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.563366][ T31] Call Trace: [ 1703.563376][ T31] [ 1703.563386][ T31] dump_stack_lvl+0xe8/0x150 [ 1703.563425][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1703.563515][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1703.563578][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1703.563610][ T31] sys_info+0x135/0x170 [ 1703.563657][ T31] watchdog+0xfd9/0x1030 [ 1703.563756][ T31] ? watchdog+0x21a/0x1030 [ 1703.563798][ T31] kthread+0x388/0x470 [ 1703.563843][ T31] ? __pfx_watchdog+0x10/0x10 [ 1703.563872][ T31] ? __pfx_kthread+0x10/0x10 [ 1703.563895][ T31] ret_from_fork+0x51e/0xb90 [ 1703.563960][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1703.563987][ T31] ? __switch_to+0xc7d/0x1450 [ 1703.564016][ T31] ? __pfx_kthread+0x10/0x10 [ 1703.564038][ T31] ret_from_fork_asm+0x1a/0x30 [ 1703.564112][ T31] [ 1703.564148][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1703.680460][ C1] NMI backtrace for cpu 1 [ 1703.680482][ C1] CPU: 1 UID: 0 PID: 24272 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 1703.680504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.680518][ C1] Workqueue: bond8 bond_alb_monitor [ 1703.680629][ C1] RIP: 0010:unwind_next_frame+0x18ce/0x23c0 [ 1703.680669][ C1] Code: c1 e8 03 0f b6 04 28 84 c0 0f 85 42 0a 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 9a 0d 00 00 84 c0 0f 84 46 01 00 00 <48> bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 84 c0 0f [ 1703.680685][ C1] RSP: 0018:ffffc90000a082d8 EFLAGS: 00000202 [ 1703.680701][ C1] RAX: 1ffff92000141001 RBX: ffffffff90a75262 RCX: 0000000000000001 [ 1703.680715][ C1] RDX: ffffc90000a083e8 RSI: dffffc0000000000 RDI: ffffc9000e17fe18 [ 1703.680730][ C1] RBP: dffffc0000000000 R08: ffffc9000e17fe18 R09: 0000000000000000 [ 1703.680743][ C1] R10: ffffc90000a083f8 R11: fffff52000141081 R12: ffffc90000a083f8 [ 1703.680758][ C1] R13: 1ffff92000141077 R14: ffffc90000a083a8 R15: 1ffffffff214ea4c [ 1703.680772][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 1703.680788][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1703.680800][ C1] CR2: 00007f92f01ea4b8 CR3: 000000007d9fe000 CR4: 00000000003526f0 [ 1703.680817][ C1] Call Trace: [ 1703.680825][ C1] [ 1703.680838][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1703.680866][ C1] ? worker_thread+0xa50/0xfc0 [ 1703.680921][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1703.680941][ C1] arch_stack_walk+0x11b/0x150 [ 1703.680999][ C1] ? kthread+0x388/0x470 [ 1703.681020][ C1] stack_trace_save+0xa9/0x100 [ 1703.681038][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1703.681055][ C1] ? kfree+0x1c1/0x630 [ 1703.681084][ C1] ? ip_protocol_deliver_rcu+0x282/0x440 [ 1703.681146][ C1] ? ip_local_deliver_finish+0x3bb/0x6f0 [ 1703.681166][ C1] ? NF_HOOK+0x336/0x3c0 [ 1703.681183][ C1] ? NF_HOOK+0x336/0x3c0 [ 1703.681201][ C1] ? process_backlog+0xaa3/0x1950 [ 1703.681272][ C1] ? __napi_poll+0xae/0x340 [ 1703.681291][ C1] ? net_rx_action+0x627/0xf70 [ 1703.681312][ C1] ? handle_softirqs+0x22a/0x870 [ 1703.681337][ C1] kasan_save_track+0x3e/0x80 [ 1703.681355][ C1] ? kasan_save_track+0x3e/0x80 [ 1703.681371][ C1] ? kasan_save_free_info+0x46/0x50 [ 1703.681396][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1703.681413][ C1] ? kmem_cache_free+0x187/0x630 [ 1703.681431][ C1] ? __udp4_lib_rcv+0x10d4/0x2630 [ 1703.681489][ C1] ? ip_protocol_deliver_rcu+0x282/0x440 [ 1703.681507][ C1] ? ip_local_deliver_finish+0x3bb/0x6f0 [ 1703.681527][ C1] ? NF_HOOK+0x336/0x3c0 [ 1703.681544][ C1] ? NF_HOOK+0x336/0x3c0 [ 1703.681562][ C1] ? process_backlog+0xaa3/0x1950 [ 1703.681583][ C1] ? __napi_poll+0xae/0x340 [ 1703.681601][ C1] ? net_rx_action+0x627/0xf70 [ 1703.681622][ C1] ? handle_softirqs+0x22a/0x870 [ 1703.681645][ C1] ? do_softirq+0x76/0xd0 [ 1703.681673][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 1703.681695][ C1] ? __dev_queue_xmit+0x1e78/0x3890 [ 1703.681733][ C1] ? alb_send_lp_vid+0x348/0x550 [ 1703.681749][ C1] ? alb_send_learning_packets+0x12c/0x300 [ 1703.681776][ C1] ? bond_alb_monitor+0x3d5/0x17e0 [ 1703.681801][ C1] ? process_scheduled_works+0xb02/0x1830 [ 1703.681823][ C1] ? worker_thread+0xa50/0xfc0 [ 1703.681871][ C1] kasan_save_free_info+0x46/0x50 [ 1703.681896][ C1] __kasan_slab_free+0x5c/0x80 [ 1703.681915][ C1] kmem_cache_free+0x187/0x630 [ 1703.681934][ C1] ? __udp4_lib_rcv+0x10d4/0x2630 [ 1703.681958][ C1] __udp4_lib_rcv+0x10d4/0x2630 [ 1703.681989][ C1] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1703.682013][ C1] ? __pfx_udp_rcv+0x10/0x10 [ 1703.682034][ C1] ip_protocol_deliver_rcu+0x282/0x440 [ 1703.682055][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1703.682077][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1703.682102][ C1] NF_HOOK+0x336/0x3c0 [ 1703.682122][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1703.682142][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1703.682161][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1703.682179][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1703.682201][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1703.682223][ C1] ? skb_dst+0x4f/0xd0 [ 1703.682242][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1703.682264][ C1] NF_HOOK+0x336/0x3c0 [ 1703.682284][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1703.682304][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1703.682322][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1703.682343][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1703.682366][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1703.682385][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1703.682403][ C1] ? process_backlog+0x3eb/0x1950 [ 1703.682426][ C1] process_backlog+0xaa3/0x1950 [ 1703.682462][ C1] __napi_poll+0xae/0x340 [ 1703.682482][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1703.682505][ C1] net_rx_action+0x627/0xf70 [ 1703.682527][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1703.682564][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1703.682593][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1703.682683][ C1] handle_softirqs+0x22a/0x870 [ 1703.682709][ C1] ? do_softirq+0x76/0xd0 [ 1703.682736][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1703.682753][ C1] do_softirq+0x76/0xd0 [ 1703.682775][ C1] [ 1703.682782][ C1] [ 1703.682789][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1703.682812][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1703.682828][ C1] __dev_queue_xmit+0x1e78/0x3890 [ 1703.682851][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1703.682878][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1703.682897][ C1] ? rcu_is_watching+0x15/0xb0 [ 1703.682923][ C1] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1703.682953][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1703.682994][ C1] ? alb_send_lp_vid+0x14e/0x550 [ 1703.683014][ C1] alb_send_lp_vid+0x348/0x550 [ 1703.683034][ C1] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1703.683050][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.683085][ C1] alb_send_learning_packets+0x12c/0x300 [ 1703.683112][ C1] ? register_lock_class+0x31/0x2e0 [ 1703.683135][ C1] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1703.683172][ C1] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1703.683198][ C1] bond_alb_monitor+0x3d5/0x17e0 [ 1703.683230][ C1] ? bond_alb_monitor+0xf8/0x17e0 [ 1703.683258][ C1] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1703.683287][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1703.683310][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1703.683334][ C1] process_scheduled_works+0xb02/0x1830 [ 1703.683375][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1703.683403][ C1] ? assign_work+0x3d5/0x5e0 [ 1703.683429][ C1] worker_thread+0xa50/0xfc0 [ 1703.683471][ C1] kthread+0x388/0x470 [ 1703.683488][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1703.683511][ C1] ? __pfx_kthread+0x10/0x10 [ 1703.683529][ C1] ret_from_fork+0x51e/0xb90 [ 1703.683555][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1703.683577][ C1] ? __switch_to+0xc7d/0x1450 [ 1703.683601][ C1] ? __pfx_kthread+0x10/0x10 [ 1703.683618][ C1] ret_from_fork_asm+0x1a/0x30 [ 1703.683665][ C1] [ 1704.021391][T27264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1704.032729][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1704.032802][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1704.032875][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.032915][ T31] Call Trace: [ 1704.032941][ T31] [ 1704.032979][ T31] vpanic+0x56c/0xa60 [ 1704.033079][ T31] ? __pfx___schedule+0x10/0x10 [ 1704.033176][ T31] ? __pfx_vpanic+0x10/0x10 [ 1704.033261][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1704.033493][ T31] panic+0xc5/0xd0 [ 1704.033574][ T31] ? __pfx_panic+0x10/0x10 [ 1704.033664][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1704.033750][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1704.033844][ T31] watchdog+0x1023/0x1030 [ 1704.033952][ T31] ? watchdog+0x21a/0x1030 [ 1704.034060][ T31] kthread+0x388/0x470 [ 1704.034131][ T31] ? __pfx_watchdog+0x10/0x10 [ 1704.034214][ T31] ? __pfx_kthread+0x10/0x10 [ 1704.034269][ T31] ret_from_fork+0x51e/0xb90 [ 1704.034360][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1704.034435][ T31] ? __switch_to+0xc7d/0x1450 [ 1704.034548][ T31] ? __pfx_kthread+0x10/0x10 [ 1704.034620][ T31] ret_from_fork_asm+0x1a/0x30 [ 1704.034750][ T31] [ 1704.035962][ T31] Kernel Offset: disabled