last executing test programs: 3.517451054s ago: executing program 4 (id=5191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.426672727s ago: executing program 4 (id=5194): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000f6ffff210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r12], 0x5c}, 0x1, 0x400000000000000}, 0x40000) syz_init_net_socket$x25(0xb, 0x5, 0x27) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000f00)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000f6ffff210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r12], 0x5c}, 0x1, 0x400000000000000}, 0x40000) (async) syz_init_net_socket$x25(0xb, 0x5, 0x27) (async) 3.14976316s ago: executing program 4 (id=5200): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.043903508s ago: executing program 4 (id=5203): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.757936526s ago: executing program 4 (id=5208): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='macvlan0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x8, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24048800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010073797a300000000040000000030a01080000000000000000010000000900030073797a32000008000140000000000900010073797a300000000050000000060a01040000000000000000010000000800ffffff7f00000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000211400000011000100"/203], 0xd8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000003c00f6962f07010000000000000000017ce4ff480e48121f6e0d82268f4e34c70b2f8a7d50cfa208217ad996ab7b7615dfb8"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0xb, 0x5, 0x1) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000001100)=[{{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/30, 0x1e}, {&(0x7f0000000e00)=""/96, 0x60}, {&(0x7f0000000e80)=""/241, 0xf1}, {&(0x7f0000000f80)=""/144, 0x90}], 0x4, &(0x7f0000001080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x1, 0x2, &(0x7f0000001180)={r7, r8+10000000}) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f00000011c0)) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f00000003c0)=0x2) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000640)='dctcp', 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000200)={0x5, 0x3, 0x10}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000500)={0x14, 0x3, {0x4, @usage=0xe7b5, 0x0, 0x4, 0x9, 0x8000000000000001, 0x101, 0x8, 0x38, @usage=0x9, 0x7, 0x5, [0x689, 0x4, 0x10000, 0x2, 0x0, 0x100000001]}, {0x6, @struct={0x6, 0x1}, 0x0, 0xfec, 0x7f, 0x5, 0x8000, 0x5, 0x40, @usage=0x7f, 0x1, 0xa, [0x2, 0x12, 0x8, 0x0, 0x40, 0x4]}, {0x1, @usage=0x4, 0x0, 0x5, 0x7, 0x1, 0xba1a, 0x8, 0x0, @usage=0x7, 0xed79, 0x0, [0x4, 0x2, 0x101, 0x1000, 0x8001, 0xe2]}, {0x7, 0x8, 0xfffffffffffffffe}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071103700000000009500000000755f0485e204bee85f36d3a8a9000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvfrom$packet(r9, &(0x7f0000000300)=""/184, 0xb8, 0x40002021, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000900)={r10, 0x9a27, 0x1, [0x6, 0x1c00, 0x800, 0xc, 0x3], [0x3, 0x2, 0x0, 0x0, 0x6, 0x8, 0x8001, 0x7fff, 0x4, 0x77f4, 0x4, 0x3, 0x5, 0x3, 0xaad, 0x8, 0x1, 0x8001, 0xfffffffffffffffb, 0x9c2c, 0x5b8, 0x1, 0x81, 0x5, 0x10, 0x1ff, 0xfffffffffffffff9, 0x3, 0x40, 0x6, 0xbb28, 0x6, 0x8, 0xfffffffffffff669, 0x48c, 0x800000008, 0x200, 0x6, 0x8, 0x8, 0x8000000000000001, 0x7fff, 0x19, 0x5, 0x101, 0x0, 0x1, 0x8, 0x5, 0x3, 0x7, 0x40, 0x2, 0x5, 0x2, 0xb, 0x4, 0x1ff, 0x8000000000000001, 0x6, 0x4, 0xfffffffffffffff8, 0x5fb, 0x7, 0x3, 0xa, 0x8, 0xffffffff, 0x9, 0xfffffffffffffff8, 0xa71, 0x5, 0x8, 0x7, 0x97f, 0x4, 0x0, 0x8122, 0x0, 0x10001, 0x1ff, 0x9, 0x800, 0x4, 0x8000, 0x4, 0x9, 0x6, 0xb9, 0xd, 0x6a, 0x5, 0x1ff, 0x1, 0x7, 0x9, 0x1000, 0xffffffffffffffff, 0x1, 0x7, 0xffffffffffffffff, 0x9, 0x4, 0x9, 0xd, 0x400, 0x3, 0xff, 0x4, 0x9, 0x1, 0x6, 0x80000001, 0x200, 0x1, 0xca7a, 0x82, 0x1ff, 0x0, 0x80]}) 2.434392351s ago: executing program 4 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x74, 0x2f, &(0x7f0000000300)="3a6a0707f737d3202cc153c261be3b50cb256c04cf2817c8f3742732bfa4a10fbb1d15048a9a552ef5cbc27d53fa96490d904d4d33ccc19ec0001ad6a6b483bd2b0fb5427b4883c5f61c24763e68061a281b6934424024eebbe06d85b29edfda511f243bbfcfb1c7d127c4faf62835b64ac5514a", &(0x7f0000000180)=""/47, 0x9, 0x0, 0x93, 0x7a, &(0x7f00000006c0)="575918cc4a82d17744c816fead4a177483d1331156408048f64e7adec72f7cefc3858518393987f75ae882614880b58f2ac1dc7c420f8d1a985da736854bd2ac1bc56adf3bc4bd6d1b14af4a799c3a5e72a2b53e6616911fff9598556c39abf68771ebe0adf9d5a5a9f9e97e83d95e7645dcc14bbbd70ada2ca63bb4e6be8c99b6cc4199eabb474913e889219b7f2c75883bec", &(0x7f0000000440)="332fcb7581b3b48697c692a0d08fab2518e75d3904cfe47cf47b7d0bc79331ccba7479dee47e2748a84d45daae32581333d41e2edce156b2844787d0e6f2e1e4b43486f18ff48ff1d22de83b9312462e7516f4c7476da322471da16f353994af837dfa74d845571d91e8f662ba876fb75f2b4f599ec08c265cd0", 0x4, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="fec247f36598"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) openat$cgroup_ro(r7, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100003b00010000000000fbdbdf25010117800c00160006ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r2, &(0x7f0000001840)=""/210, 0xd2, 0x2, &(0x7f0000000780)=@hci={0x1f, 0x3, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa9437ca222a384576f011e0193984bbbbbbbbbbbb86dd60cedd0000183aff00000000000000000000000000000000ff020000000000000000000000000001870090780000000000000000000000000000002e05009dc8"], 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3e0000001e00010a71da9ebb000000000000eb00"], 0x14}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000840)={{0x0, 0x2, 0x6, 0xab7, 0x1000, 0x4f, 0x5, 0x24b10934, 0xf, 0x3b2d, 0x1, 0x101, 0x5, 0x400, 0x4}}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r12}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000000240)={{r11, 0x8000000000000001, 0x9, 0xaa, 0x10, 0x7fff, 0x0, 0x0, 0x7, 0x9, 0x7, 0x0, 0xde, 0x6, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r13 = socket$netlink(0x10, 0x3, 0xa) writev(r13, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r9, @ANYRESDEC], 0x30}}, 0x0) 2.33663647s ago: executing program 3 (id=5214): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x80) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x2, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x6400c804) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r3, r5}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB="0a0001"], 0x48}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1a, r2, 0x1}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRESHEX=r11, @ANYBLOB="b35da46afaab245c91fb534f87856721a475b7c0597bb78e62ca49fd83ac81bcb630fffded80d50749114e7bd6c9b77935c5018164324c2746669648f9b9259bdffe31d75d62f4b9b31986df4bb6d29870cca27d3f86461806aefc27794ccb663d5343a41975461d6cafc65501"], 0x7c}}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.24201016s ago: executing program 1 (id=5215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000800) syz_emit_ethernet(0xdeb, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.907475611s ago: executing program 1 (id=5219): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xe, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x240c88e5) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) 1.758068264s ago: executing program 3 (id=5221): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x6}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.640931004s ago: executing program 1 (id=5223): r0 = socket(0xa, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async, rerun: 32) getsockopt$nfc_llcp(r0, 0x29, 0x24, 0x0, 0x2000005d) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000001c0)={{r2, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000040)={@_ha_fsid={[0xfffffffa, 0x7]}, {0x81, 0x6, 0x6, 0x7}}, 0x80, &(0x7f0000000080), &(0x7f0000000180)=0x8001}, {[0xffffdc30, 0x2, 0x1, 0x3ff]}, 0x3, 0xea, &(0x7f0000000280)=""/234}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xcd, 0x2, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7800, 0x8000, 0x9, 0x400}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x13, 0x8, 0x4, 0x8000ff, 0x20, 0x1, 0x0, '\x00', r4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) 1.469728332s ago: executing program 3 (id=5224): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xfffffffc, 0xff, {{0x25, 0x4, 0x0, 0x1a, 0x94, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x8, [{@private=0xa010101, 0x3}, {@private=0xa010101, 0x8001}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}]}, @end, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0x5, [{@multicast2, 0x7000000}]}, @end, @noop, @timestamp_addr={0x44, 0x2c, 0xd2, 0x1, 0xc, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x180}, {@local, 0x6}, {@loopback, 0x7}, {@multicast2, 0x55f5}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0xa, [{@broadcast, 0xa5}]}]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, {0x6, @broadcast}, 0x44, {0x2, 0x4e20, @loopback}, 'ip6_vti0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x10, 0x20, 0x3, 0x5, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x27, 0xb1, [@multicast2, @local, @empty, @private=0xa010100, @private=0xa010100, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xf5, 0x0, 0x1, [0x2db, 0xbad, 0x7, 0x0, 0x7]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000380)={0x924, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x6, 0x7, 0x5}, {0x3, 0x8, 0x2, 0x8001}, {0x8, 0x0, 0xcb, 0x6b}, {0x80, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x2}, {0x0, 0x6, 0x4d, 0x200}, {0x9a0, 0xc, 0x5, 0x815}, {0x6, 0x40, 0x7, 0xa9b}, {0x8, 0x5, 0xf8}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r4}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r1}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0xb, 0x5, 0xe5e}, {0x1, 0x6, 0x2, 0x2087c72c}, {0x403, 0xab, 0x9, 0x6}, {0x3, 0xc0, 0xff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x615a8130}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x60, 0x3, 0x4, 0xfffffff9}, {0x4, 0x8, 0x5, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x96e7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb42b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x49070}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffffff8a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x8040) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080001) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001000)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f00000010c0)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001100)={r8, 0x3542}, 0x8) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f0000001140)='macvlan0\x00') r10 = syz_genetlink_get_family_id$team(&(0x7f00000011c0), r3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001200)={@dev, @empty, 0x0}, &(0x7f0000001240)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000001280)={'syztnl0\x00', r5, 0x4, 0x5, 0x3, 0x7c52be58, 0x54, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0xc, 0xcc78}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001440)={'tunl0\x00', &(0x7f0000001340)={'tunl0\x00', r5, 0x8000, 0x8000, 0x6, 0x7, {{0x2d, 0x4, 0x1, 0x9, 0xb4, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@ssrr={0x89, 0xf, 0xdc, [@remote, @rand_addr=0x64010102, @multicast1]}, @generic={0x82, 0xe, "53dc8f9012493f1840eb13c2"}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0x9, [{@multicast2, 0x10000}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x8d, 0x0, 0x1, [0x6, 0xf]}, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x9, [{@empty, 0x1}]}, @timestamp_addr={0x44, 0x4c, 0x5e, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x9}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x400}, {@empty, 0x7fff}, {@remote, 0x1}, {@private=0xa010102, 0x6}, {@loopback, 0x6}, {@multicast1, 0x401}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x7, "8f46596468"}, @end]}}}}}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001bc0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001480)={0x6dc, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff447}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x1, 0x8, 0x3}]}}}]}}]}, 0x6dc}}, 0x41) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r14, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001c00)=""/250, 0xfa}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/143, 0x8f}, {&(0x7f0000001ec0)=""/209, 0xd1}, {&(0x7f0000001fc0)=""/121, 0x79}, {&(0x7f0000002040)=""/16, 0x10}, {&(0x7f0000002080)=""/160, 0xa0}, {&(0x7f0000002140)=""/104, 0x68}, {&(0x7f00000021c0)=""/48, 0x30}], 0x9, &(0x7f00000022c0)=""/96, 0x60}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x1e) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)=@ipv4_getaddr={0x4c, 0x16, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2, 0x10, 0x0, 0xc8, r4}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_LABEL={0x14, 0x3, 'wlan1\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000002500), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r15, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x1c, r17, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4800) syz_emit_ethernet(0x111, &(0x7f0000002600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, "c6", "c601d6", 0x3, "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"}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f00000029c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20004800) 1.385566999s ago: executing program 0 (id=5226): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79e16d2f5ba45ae2ebc9ada87b3df9291090c892e0198c3f759d3e92e8decaae25b9b990f47f8df1c270029d925b2732eecacc9d666932d9"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="090000004c000010fdffff000000004000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x19c) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x1d, 0x6, 0xc0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1.356795774s ago: executing program 1 (id=5227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d10002"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r1, &(0x7f0000000180), 0x100000000000003c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c0002800801000000000000050016001c0000000500080006000000"], 0x4c}}, 0x0) 1.124666735s ago: executing program 1 (id=5229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0xfffe, 0x4, 0x2, 0xd06, 0x6, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x6, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x558, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_WOL_MODES={0x350, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "0e7a23e37301fbbef0bc266f86e2db39488b98eb529a80417fe1cfb6b89df540d175ef71613f961ebf8ff563dc7b8c2ca0726a36b777bbd0c20e27f6130e6ac169335fa693e292a9d3c777e9502c7cf339df92f766e22545ead1c05502c5f368d32cf8225df6415b9c5d146abfd0cbffab8947e1f43ca27a73c99ce1505306a2e54ef4452ed6df4f27faa9ce18b0b5e4d3ee842cc3b778be110e5825b8df9005519b213a5bb1f51502ed0fbf562053093f43f1ccbd38a00b2050cc3d2025c73dad5a13ea85a32e331851091d253d6bf7f2ffb46c7cdef30a6d307c6ff176"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'plug\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb09ecc5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x441}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{/&&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa76}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "01f369175c"}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{\'}/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa53c}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&\xf7,#\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '--]]!\x85%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "85a8d9ea5054bd5c7560cf53e174f9ef2aaf3825faebf452b30dc4672042c266db43dcf1b1fbdac3ab86f6da9fa5ea50566083efc5f3e4ada7b0b44dcc981c303d2783329dd2cd0fa95ef18b9e6c139b71"}]}, @ETHTOOL_A_WOL_MODES={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "7e0b6d50655d5e942b54e7406c9764e1addfbe0a90b645deba650470da13e7270b3e667a2621823568082c04d17f77cd50a2f4711b04a873e91afffb"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "7310831dab324549492d0b5894064c36d04f7d63abef365adf342c73279b3ed703ed0eb84a0f9af89269b00decaa424cffcaa2f4355955798b95f1d96f4a17b5596e6082a6c445778e84201bd07af2c62b4b6c50ef7ff0a392a62285dd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "c383a70276260919fdf47ec6bc5655b0c68dbdf68f8f09013f308bfa2d55bf0eca93617efecf0c5f9b52f24988345ff162d8"}, @ETHTOOL_A_BITSET_MASK={0x30, 0x5, "17b4f79767b601eb6eeb24b44b69b1482c346e69bf7ed83c681c7aef2fde1b9ad5476c1d584ec543b3cd1dda"}]}, @ETHTOOL_A_WOL_SOPASS={0x57, 0x3, "3b3870bef8b59c4eab38e03c75aef20f4152a0e623a507a79ac6d2e05e9c715b8f4f2ee84c89ab42797f6a2152691520df69d26f0531f8ad647e84e7fbce819b23ea9690f8090725b8774b0dc26cc49a1ecc30"}]}, 0x558}, 0x1, 0x0, 0x0, 0x8000}, 0xc000044) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) 1.12418155s ago: executing program 0 (id=5230): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xe, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) 1.005973949s ago: executing program 0 (id=5232): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x24, 0x0, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x18, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x6}}, 0x44) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @remote}}, @sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @mcast2}}]}, 0xa8}}, 0x0) 902.098425ms ago: executing program 1 (id=5234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e00140002800800010084000000080009e9feffffff140035006d6163766c616e30000000000000000060a13d742122f646d44b74eb70eb4e6ae29924480ffaeb2dea115c05af0aafb5711be7886da7a66bee6c175c97e80979e1a5ee652dcef511bdf163ce344501bec4b43e442425dc4d99019c7dfc80f2e31187fbb2da284f0c16afb46158b9a240e89b782daf0f745d2681f5d7c7e4fd01cc9979f893e45006b6c5a744dfed6fa6da81a7dd3c42523b9964ef055bb6944af87b596b4494dd9fbf"], 0x58}}, 0x8000) 797.368042ms ago: executing program 0 (id=5236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e401cd2a62646ce5f451d9389b5f840000000000", 0x2f, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'geneve0\x00', @link_local}) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x14, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) 705.231769ms ago: executing program 2 (id=5237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffa6, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) setsockopt$sock_timeval(r2, 0x1, 0x50, &(0x7f0000abaff9), 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x0, 0x5, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "047362d4843af5cce037a189c9077f3f"}]}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r6, 0x301}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)={0x18, 0x2f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0xe9, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 668.209495ms ago: executing program 2 (id=5238): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x0) (async, rerun: 64) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000000)={&(0x7f0000000100)=[{0xfffffffffffffff8, 0x1, 0x0, {0x5db6, 0x6, 0x1}}, {0xc0, 0x2, 0x0, {0x6, 0xdd4f, 0x1}}, {0xe9, 0x0, 0x0, {0x5, 0x4, 0x1}}, {0x140000000, 0x1, 0x0, {0xd, 0x5, 0x2}}, {0xffffffffffffffff, 0x2, 0x0, {0x10000, 0x95e2}}, {0x3, 0x1, 0x0, {0x2, 0x9, 0x2}}, {0x2, 0x1, 0x0, {0x800, 0x7, 0x1}}], 0x7, 0x20, 0x1000, 0xa4f}) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 541.535733ms ago: executing program 3 (id=5239): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x40000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$netlink(0x10, 0x3, 0xf) 470.109983ms ago: executing program 2 (id=5240): r0 = socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x7d9fe000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x100, 0xfd, &(0x7f0000000180)=""/253, 0x40f00, 0x4, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0xa, 0x4, 0x7}, 0x10, 0x9eb3}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r3, r4}, 0xc) socket$packet(0x11, 0x3, 0x300) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x7d9fe000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x100, 0xfd, &(0x7f0000000180)=""/253, 0x40f00, 0x4, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0xa, 0x4, 0x7}, 0x10, 0x9eb3}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r3, r4}, 0xc) (async) 469.214967ms ago: executing program 0 (id=5241): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x803, 0xf) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 403.1006ms ago: executing program 3 (id=5242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @random="b53eab4f726c", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x1c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1, 0x0, 0x0, 0x2}}}}}}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000009c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) (async) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x140) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x20}}, 0x0) 325.604094ms ago: executing program 2 (id=5243): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xe, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) 234.116518ms ago: executing program 0 (id=5244): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 203.288301ms ago: executing program 2 (id=5245): r0 = socket$inet6(0xa, 0x80803, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="050007000000000008006300", @ANYRES32=r0, @ANYBLOB="4400f08000"], 0x12dc}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) 63.6009ms ago: executing program 3 (id=5246): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x7807, 0xe, 0xb, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @private=0xa010101, {[@generic={0x5, 0x6, "29b05787"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x8f4c, 0x3, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @remote, {[@end, @rr={0x7, 0x7, 0x7c, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@initdev, @remote, 0x0}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x2, 0xf, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x40, 0xd8, 0x7}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25170000000c00018008000100", @ANYRES32=r2, @ANYBLOB="240001ffd578732b", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="2c0001800800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000400000058000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000100000018000180140002006261746164765f736c6176655f310000"], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000001000000000000000000000ac04dd17c49b738ec425556576000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="070004000000002000ffe900", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) close(r9) 0s ago: executing program 2 (id=5247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc58}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffff5d8}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x69}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x407f36a0}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x606c}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf2564000000080001004400000008000300", @ANYRES32=r10, @ANYBLOB="76f3d0743e0b6451780d424789b55f6b14ebfb941e56de36c78ee2470f9f74650b501fab8a6d0f37c63d580b1427de2b727d7b06a96d1c7fcf1b9cee7a680fdca0ea5560fb17423ae8d8f1150acc81ac64732d8c6be9e41d20702323c8baf9a69b535625a941653e3994c82f6848a90d"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES16=r3, @ANYBLOB="00082abd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x880) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) kernel console output (not intermixed with test programs): 414.942113][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 414.982882][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 415.103126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.111661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.184938][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 415.185433][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.313172][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 415.412121][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3407'. [ 415.442447][T18619] netlink: 'syz.3.3409': attribute type 1 has an invalid length. [ 415.487886][T18625] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3410'. [ 415.557297][T18627] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 415.590340][T18619] bond3: (slave bridge2): Enslaving as a backup interface with a down link [ 415.957622][T18652] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3418'. [ 416.064551][T18662] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.170014][T18667] pim6reg1: entered promiscuous mode [ 416.186523][T18667] pim6reg1: entered allmulticast mode [ 416.457079][T18681] netlink: 'syz.0.3428': attribute type 1 has an invalid length. [ 416.478683][T18682] syzkaller0: entered promiscuous mode [ 416.484676][T18682] syzkaller0: entered allmulticast mode [ 416.489013][T18681] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3428'. [ 417.253861][T18726] netlink: 'syz.1.3443': attribute type 10 has an invalid length. [ 417.645000][T18744] 8021q: VLANs not supported on wg1 [ 417.669062][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.688202][T18744] bond1: option mode: unable to set because the bond device has slaves [ 418.107409][T18775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 418.115700][T18775] team0: Device macvlan2 is already an upper device of the team interface [ 418.477150][T18803] __nla_validate_parse: 6 callbacks suppressed [ 418.477170][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3465'. [ 418.501828][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 418.531404][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3464'. [ 418.625246][T18805] lo speed is unknown, defaulting to 1000 [ 418.773920][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 418.975037][T18832] xt_cgroup: xt_cgroup: no path or classid specified [ 419.032855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 419.040960][ C0] lec:lec_tx_timeout: lec0 [ 419.266279][T18847] ksmbd: Unknown IPC event: 3, ignore. [ 419.460014][T18854] batman_adv: batadv0: Adding interface: dummy0 [ 419.471259][T18854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.526275][T18854] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 419.562059][T18864] netlink: 'syz.3.3481': attribute type 8 has an invalid length. [ 419.760724][T18869] IPVS: persistence engine module ip_vs_pe_ not found [ 419.859000][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.866851][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.953929][T18861] bridge_slave_0: left allmulticast mode [ 419.959845][T18861] bridge_slave_0: left promiscuous mode [ 419.967647][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.988506][T18861] bridge_slave_1: left allmulticast mode [ 419.994389][T18861] bridge_slave_1: left promiscuous mode [ 420.000430][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.026954][T18861] bond0: (slave bond_slave_0): Releasing backup interface [ 420.048769][T18861] bond0: (slave bond_slave_1): Releasing backup interface [ 420.068785][T18861] team0: Port device team_slave_0 removed [ 420.083935][T18861] team0: Port device team_slave_1 removed [ 420.095767][T18861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.110586][T18861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.126528][T18861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.137327][T18861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.155708][T18861] net_ratelimit: 224 callbacks suppressed [ 420.155734][T18861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.363219][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 420.374806][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'. [ 420.473416][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 420.538534][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3487'. [ 420.583449][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 420.726062][T14057] bond1: (slave bridge4): failed to get link speed/duplex [ 420.749634][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 420.846657][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 420.863062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.871732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.895922][T18904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3490'. [ 420.983012][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 421.033691][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3492'. [ 421.056942][T18908] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 421.086711][T18912] netlink: 'syz.4.3494': attribute type 1 has an invalid length. [ 421.092901][T14057] bond1: (slave bridge4): failed to get link speed/duplex [ 421.161196][T18912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.207997][T18914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.230139][T18914] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 421.260423][T18914] bond3: (slave vcan1): Error -95 calling set_mac_address [ 421.329848][T18918] bond3: (slave gretap1): making interface the new active one [ 421.339582][T18918] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 421.414126][T18914] macvlan2: entered promiscuous mode [ 421.419848][T18914] macvlan2: entered allmulticast mode [ 421.428745][T18914] bond3: entered promiscuous mode [ 421.436055][T18914] gretap1: entered promiscuous mode [ 421.443118][T18914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.457542][T18914] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 421.471795][T18914] bond3: left promiscuous mode [ 421.478858][T18914] gretap1: left promiscuous mode [ 421.517629][T18922] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 422.276274][T18945] netlink: 'syz.1.3506': attribute type 2 has an invalid length. [ 422.285352][T18945] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3506'. [ 422.287143][T18943] IPv6: sit2: Disabled Multicast RS [ 422.506737][T18949] : renamed from bond0 (while UP) [ 422.864053][T18976] netlink: 'syz.0.3516': attribute type 1 has an invalid length. [ 423.003348][T18976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.075222][T18988] vlan2: entered promiscuous mode [ 423.121222][T18988] bond3: entered promiscuous mode [ 423.151419][T18988] vlan2: entered allmulticast mode [ 423.161381][T18988] bond3: entered allmulticast mode [ 423.256478][T18991] bond3: (slave bridge4): making interface the new active one [ 423.264565][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 423.294166][T18991] bridge4: entered promiscuous mode [ 423.345512][T19007] xt_cgroup: invalid path, errno=-2 [ 423.354737][T18991] bridge4: entered allmulticast mode [ 423.387958][T18991] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 423.441529][T19010] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 423.625625][T19023] __nla_validate_parse: 5 callbacks suppressed [ 423.625646][T19023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3528'. [ 423.663615][T19018] xt_ipcomp: unknown flags 1D [ 423.676311][T19016] netem: incorrect ge model size [ 423.676965][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3526'. [ 423.704737][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 423.715917][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3526'. [ 423.858413][T19030] netlink: 'syz.2.3530': attribute type 178 has an invalid length. [ 423.967169][T19042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3532'. [ 423.986152][T19042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3532'. [ 424.466164][T19074] erspan0: entered allmulticast mode [ 424.590827][T19083] nftables ruleset with unbound chain [ 424.646371][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 424.819469][T19096] netlink: 'syz.2.3543': attribute type 1 has an invalid length. [ 424.844330][T19096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3543'. [ 424.879552][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3545'. [ 424.896543][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 425.249829][T19118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.263079][ T12] net_ratelimit: 27 callbacks suppressed [ 425.263105][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 425.299773][T19116] syzkaller0: entered promiscuous mode [ 425.330080][T19116] syzkaller0: entered allmulticast mode [ 425.382074][T19129] veth0: entered promiscuous mode [ 425.484829][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 425.584430][T19134] lo speed is unknown, defaulting to 1000 [ 425.612128][T19140] netlink: ct family unspecified [ 425.613611][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 425.752984][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 425.845457][T19153] bridge0: port 3(gretap0) entered blocking state [ 425.887151][T19153] bridge0: port 3(gretap0) entered disabled state [ 425.908020][T19153] gretap0: entered allmulticast mode [ 425.940190][T19153] gretap0: entered promiscuous mode [ 425.968663][T19153] bridge0: port 3(gretap0) entered blocking state [ 425.975506][T19153] bridge0: port 3(gretap0) entered forwarding state [ 426.043211][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 426.161911][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 426.217843][T19128] veth0: left promiscuous mode [ 426.412828][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 426.622967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.631466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.150694][T19198] syzkaller0: entered promiscuous mode [ 427.180768][T19198] syzkaller0: entered allmulticast mode [ 427.217723][T19200] tipc: Started in network mode [ 427.226257][T19200] tipc: Node identity ac14140f, cluster identity 4711 [ 427.233598][T19200] tipc: New replicast peer: 255.255.255.255 [ 427.240583][T19200] tipc: Enabled bearer , priority 10 [ 427.507323][T19207] netlink: 'syz.4.3571': attribute type 10 has an invalid length. [ 427.520509][T19207] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.675100][T19221] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 427.736722][T19224] lo speed is unknown, defaulting to 1000 [ 427.786372][T19227] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20006 [ 427.874630][T19220] : entered promiscuous mode [ 427.880759][T19220] bond_slave_0: entered promiscuous mode [ 427.921492][T19220] bond_slave_1: entered promiscuous mode [ 428.363408][ T10] tipc: Node number set to 2886997007 [ 428.585166][T19263] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.711034][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.718325][T19263] bridge0: port 2(bridge_slave_1) entered listening state [ 428.725830][T19263] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.729211][T19272] __nla_validate_parse: 10 callbacks suppressed [ 428.729233][T19272] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3588'. [ 428.733057][T19263] bridge0: port 1(bridge_slave_0) entered listening state [ 428.824453][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3588'. [ 428.988480][T19285] netlink: 'syz.1.3588': attribute type 1 has an invalid length. [ 428.999796][T19285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3588'. [ 429.018478][T19285] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3588'. [ 429.079284][T19285] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3588'. [ 429.383777][T19302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 429.460882][T19305] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3599'. [ 429.530560][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 429.635739][T19315] sctp: [Deprecated]: syz.1.3601 (pid 19315) Use of int in maxseg socket option. [ 429.635739][T19315] Use struct sctp_assoc_value instead [ 429.738018][T19318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.795383][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3602'. [ 429.801595][T19318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.826688][T19322] netlink: 'syz.2.3602': attribute type 4 has an invalid length. [ 429.928298][T19318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.284836][T19337] netlink: 'syz.4.3607': attribute type 2 has an invalid length. [ 430.294349][T19337] netlink: 'syz.4.3607': attribute type 2 has an invalid length. [ 430.344626][ T12] net_ratelimit: 25 callbacks suppressed [ 430.344650][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 430.421387][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3609'. [ 430.742088][T19350] syzkaller0: entered promiscuous mode [ 430.754414][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 430.781603][T19357] tipc: Enabling of bearer rejected, failed to enable media [ 430.968614][T19372] x_tables: duplicate underflow at hook 2 [ 431.235341][T19375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 432.392990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.401520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.468747][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 433.065142][T19366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.202884][T14058] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.227618][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 433.259125][T19384] gretap0: left allmulticast mode [ 433.271530][T19384] gretap0: left promiscuous mode [ 433.281909][T19384] bridge0: port 3(gretap0) entered disabled state [ 433.380645][T19384] bridge_slave_0: left allmulticast mode [ 433.391783][T19392] openvswitch: netlink: Missing key (keys=40, expected=100) [ 433.402309][T19384] bridge_slave_0: left promiscuous mode [ 433.419343][T19384] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.449955][T19384] bridge_slave_1: left allmulticast mode [ 433.460130][T19384] bridge_slave_1: left promiscuous mode [ 433.474694][T19384] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.500044][T19384] : (slave bond_slave_0): Releasing backup interface [ 433.519198][T19384] bond_slave_0: left promiscuous mode [ 433.551672][T19384] : (slave bond_slave_1): Releasing backup interface [ 433.567400][T19384] bond_slave_1: left promiscuous mode [ 433.599851][T19384] team0: Port device team_slave_0 removed [ 433.639936][T19384] team0: Port device team_slave_1 removed [ 433.678320][T19384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.692343][T19384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.707038][T19384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.717981][T19384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.728820][T19384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.755361][T19388] team0: Mode changed to "activebackup" [ 433.883540][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 433.925721][T19413] __nla_validate_parse: 4 callbacks suppressed [ 433.925743][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 433.984442][T19413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3629'. [ 434.042869][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 434.146846][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'. [ 434.474144][T19424] erspan0: left allmulticast mode [ 434.612636][T19450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3639'. [ 434.745499][T19424] : left promiscuous mode [ 434.841824][T19463] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3641'. [ 435.059877][T19454] syzkaller1: entered promiscuous mode [ 435.067418][T19454] syzkaller1: entered allmulticast mode [ 435.121180][T19469] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 435.137884][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 435.336241][T19473] bond4: (slave bridge6): making interface the new active one [ 435.363895][T19473] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 435.408466][T19486] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 435.492639][T19486] bond0: entered promiscuous mode [ 435.498624][T19486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.515355][ T12] net_ratelimit: 5 callbacks suppressed [ 435.515379][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 435.667320][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 435.784744][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 435.789394][T19506] xt_CT: No such helper "pptp" [ 435.838019][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 435.838773][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3657'. [ 435.874072][T19513] netlink: 98 bytes leftover after parsing attributes in process `syz.2.3656'. [ 435.896280][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 436.013583][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 436.134084][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 436.244356][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 436.354227][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 436.464211][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 436.574136][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 438.617866][T19497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.656271][T19530] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 438.707395][T19530] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 438.825565][T19550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3668'. [ 438.859621][T19550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 438.894761][T19550] gretap2: entered promiscuous mode [ 438.910423][T19550] gretap2: entered allmulticast mode [ 439.657674][T19605] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3684'. [ 439.670146][T19607] netlink: 'syz.3.3685': attribute type 1 has an invalid length. [ 439.813841][T19615] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 439.829740][T19615] veth0_to_bridge: entered promiscuous mode [ 439.934463][T19618] syz_tun: entered allmulticast mode [ 439.945436][T19618] batadv_slave_1: entered allmulticast mode [ 439.963127][T19621] netlink: 'syz.4.3690': attribute type 1 has an invalid length. [ 439.971980][T19616] syz_tun: left allmulticast mode [ 439.984103][T19621] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3690'. [ 440.155203][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.164369][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.218649][T14051] x9: left allmulticast mode [ 440.231520][T14051] x9: left promiscuous mode [ 440.239027][T14051] bridge0: port 1(0x9) entered disabled state [ 440.617843][T14051] bond3 (unregistering): (slave bridge2): Releasing active interface [ 440.857500][T14051] bond10 (unregistering): (slave bridge8): Removing an active aggregator [ 440.868159][T14051] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 440.876800][T14051] bond10 (unregistering): (slave bridge8): the permanent HWaddr of slave - de:39:3b:95:3a:d8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 440.895883][T14051] bridge8 (unregistering): left promiscuous mode [ 440.902258][T14051] bridge8 (unregistering): left allmulticast mode [ 440.958082][T14051] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 440.968361][T14051] bridge9 (unregistering): left promiscuous mode [ 440.974877][T14051] bridge9 (unregistering): left allmulticast mode [ 441.048685][T14051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.059875][T14051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.070889][T14051] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 441.081337][T14051] bond0 (unregistering): Released all slaves [ 441.092401][T14051] bond1 (unregistering): (slave veth5): Releasing active interface [ 441.103833][T14051] bond1 (unregistering): Released all slaves [ 441.119450][T14051] bond2 (unregistering): Released all slaves [ 441.133073][T14051] bond3 (unregistering): Released all slaves [ 441.153656][T14051] bond4 (unregistering): Released all slaves [ 441.167231][T14051] bond5 (unregistering): Released all slaves [ 441.185457][T14051] bond6 (unregistering): (slave vxcan1): Releasing backup interface [ 441.200579][T14051] bond6 (unregistering): Released all slaves [ 441.222461][T14051] bond7 (unregistering): Released all slaves [ 441.237865][T14051] bond8 (unregistering): Released all slaves [ 441.257438][T14051] bond9 (unregistering): Released all slaves [ 441.271003][T14051] bond10 (unregistering): Released all slaves [ 441.286085][T14051] bond11 (unregistering): Released all slaves [ 441.596643][T19653] net_ratelimit: 34 callbacks suppressed [ 441.596667][T19653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.656877][T14051] tipc: Left network mode [ 441.693214][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 441.828653][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 441.990677][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 442.112881][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 442.236551][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 442.352853][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 442.473012][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 442.533637][T14051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.541225][T14051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.569478][T14051] veth1_to_hsr: left allmulticast mode [ 442.575446][T14051] veth1_to_hsr: left promiscuous mode [ 442.581397][T14051] veth1_macvtap: left promiscuous mode [ 442.587260][T14051] veth0_macvtap: left promiscuous mode [ 442.594349][T14051] veth1_vlan: left promiscuous mode [ 442.599773][T14051] veth0_vlan: left promiscuous mode [ 442.731534][T14051] team0 (unregistering): Port device macvlan2 removed [ 442.848671][T14051] team0 (unregistering): Port device team_slave_1 removed [ 442.885678][T14051] team0 (unregistering): Port device team_slave_0 removed [ 442.993757][T19674] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 443.024177][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 443.106536][T19624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.126670][T19671] netlink: 'syz.2.3702': attribute type 1 has an invalid length. [ 443.147344][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 443.155451][T19671] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3702'. [ 443.375994][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3704'. [ 443.448272][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 443.536381][T19692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3708'. [ 443.567354][T14051] IPVS: stop unused estimator thread 0... [ 443.831676][ T30] audit: type=1107 audit(1774803817.610:5): pid=19712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']ìnfQ@]foZoEe:(_N¢k&$J:P77 _ox?gQJ%Y47g7F%ͥSHuG' [ 443.984942][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 443.993623][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 444.051903][T19726] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 444.303409][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 444.811012][T19760] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3724'. [ 444.887727][T19760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.891132][T19765] netlink: 'syz.3.3725': attribute type 1 has an invalid length. [ 444.937941][T19760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.018811][T19765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.124595][T19769] bond4: (slave geneve2): making interface the new active one [ 445.140689][T19769] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 445.182777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 445.190922][ C0] lec:lec_tx_timeout: lec0 [ 445.579824][T19808] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 445.625402][T19808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.632792][T19811] netlink: 'syz.3.3740': attribute type 12 has an invalid length. [ 445.687736][T19813] bond5: (slave veth3): Enslaving as an active interface with a down link [ 445.712004][T19808] vlan3: entered allmulticast mode [ 445.717622][T19808] veth0_to_bond: entered allmulticast mode [ 445.726526][T19808] veth0_to_bond: entered promiscuous mode [ 445.735106][T19808] veth0_to_bond: left promiscuous mode [ 445.760602][T19808] bond5: (slave vlan3): making interface the new active one [ 445.794823][T19808] veth0_to_bond: entered promiscuous mode [ 445.805276][T19808] vlan3: entered promiscuous mode [ 445.811727][T19808] bond5: (slave vlan3): Enslaving as an active interface with an up link [ 445.830046][T19815] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3741'. [ 445.849214][T19819] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.856998][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 445.884936][T19822] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3744'. [ 445.886784][T19819] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.916239][T19819] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 445.927156][T19819] team0: Failed to send options change via netlink (err -105) [ 445.935117][T19819] team0: Port device batadv1 added [ 446.078421][T19842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3749'. [ 446.136600][T19850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3749'. [ 446.409084][T19873] bridge2: entered promiscuous mode [ 446.434582][T19873] bridge2: entered allmulticast mode [ 446.470857][T19873] team0: Port device bridge2 added [ 446.486418][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 446.627955][T14058] net_ratelimit: 21 callbacks suppressed [ 446.627980][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 446.646363][T19873] IPVS: sh: FWM 3 0x00000003 - no destination available [ 446.660032][T19873] bridge0: port 2(team0) entered blocking state [ 446.667051][T19873] bridge0: port 2(team0) entered disabled state [ 446.674176][T19873] team0: entered allmulticast mode [ 446.686869][T19873] team_slave_0: entered allmulticast mode [ 446.713172][T19873] team_slave_1: entered allmulticast mode [ 446.731441][T19873] batadv1: entered allmulticast mode [ 446.762574][T19873] team0: entered promiscuous mode [ 446.773000][T19873] team_slave_0: entered promiscuous mode [ 446.787899][T19873] team_slave_1: entered promiscuous mode [ 446.800184][T19873] batadv1: entered promiscuous mode [ 446.843216][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 446.867724][T19896] netlink: 'syz.2.3760': attribute type 1 has an invalid length. [ 446.893030][T14056] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 446.903279][T14056] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 446.954480][T19896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.978871][T19913] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3765'. [ 447.009470][T19912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3764'. [ 447.018816][T19912] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3764'. [ 447.113169][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 447.194245][T19920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.222838][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 447.335588][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 447.391262][T19933] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 447.453155][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 447.464809][T19933] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.563307][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 447.643165][T19950] x_tables: duplicate entry at hook 1 [ 447.669207][T19949] tipc: Started in network mode [ 447.681409][T19949] tipc: Node identity 0a62ef3ab597, cluster identity 4711 [ 447.705033][T19949] tipc: Enabled bearer , priority 0 [ 447.741041][T19949] syzkaller0: mtu less than device minimum [ 447.772993][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 447.835202][T19949] tipc: Disabling bearer [ 448.025641][T19969] "syz.3.3783" (19969) uses obsolete ecb(arc4) skcipher [ 448.203383][T19980] sctp: [Deprecated]: syz.2.3789 (pid 19980) Use of int in max_burst socket option. [ 448.203383][T19980] Use struct sctp_assoc_value instead [ 448.508520][T19998] netlink: 'syz.0.3796': attribute type 10 has an invalid length. [ 448.520619][T10284] lec:lec_start_xmit: lec0:No lecd attached [ 448.552482][T19998] team0: Device ipvlan1 failed to register rx_handler [ 449.080950][ T5888] IPVS: starting estimator thread 0... [ 449.174753][T20036] IPVS: using max 49 ests per chain, 117600 per kthread [ 451.732946][T14058] net_ratelimit: 39 callbacks suppressed [ 451.732972][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 451.761854][T20012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.852832][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 451.972886][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 451.990668][T20063] __nla_validate_parse: 12 callbacks suppressed [ 451.990767][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 452.112842][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 452.168938][T20068] netlink: 'syz.3.3820': attribute type 1 has an invalid length. [ 452.207884][T20072] netlink: 'syz.2.3822': attribute type 1 has an invalid length. [ 452.224380][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 452.357177][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 452.412996][T20080] netlink: 'syz.2.3825': attribute type 11 has an invalid length. [ 452.443445][T20080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3825'. [ 452.466493][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'. [ 452.483814][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 452.494816][T20083] netlink: 'syz.0.3826': attribute type 1 has an invalid length. [ 452.503024][T20083] netlink: 'syz.0.3826': attribute type 2 has an invalid length. [ 452.632972][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 452.645936][T20088] netlink: 'syz.2.3827': attribute type 3 has an invalid length. [ 452.663024][T20088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3827'. [ 452.782277][T20093] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3827'. [ 452.820429][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 452.843472][T20088] syzkaller0: entered promiscuous mode [ 452.849092][T20088] syzkaller0: entered allmulticast mode [ 452.886250][T20092] bridge8: entered promiscuous mode [ 452.899356][T20092] bridge8: entered allmulticast mode [ 452.910201][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3817'. [ 453.063151][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 453.159868][T20111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3833'. [ 453.354437][T20114] xt_CT: No such helper "snmp_trap" [ 453.992916][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 454.001218][ C0] lec:lec_tx_timeout: lec0 [ 455.100510][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 455.354578][T20143] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3842'. [ 455.522643][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3847'. [ 455.641524][T20165] vlan1: entered allmulticast mode [ 455.673274][T20165] bridge3: entered allmulticast mode [ 455.724638][T20169] bond6: option min_links: invalid value (18446744073709551614) [ 455.734809][T20169] bond6: option min_links: allowed values 0 - 2147483647 [ 456.009668][T20169] bond6 (unregistering): Released all slaves [ 456.096538][T20160] bridge3: port 1(erspan0) entered blocking state [ 456.103814][T20160] bridge3: port 1(erspan0) entered disabled state [ 456.110599][T20160] erspan0: entered allmulticast mode [ 456.120634][T20160] erspan0: entered promiscuous mode [ 456.520774][T20207] bridge4: entered promiscuous mode [ 456.527204][T20207] bridge4: entered allmulticast mode [ 456.541985][T20210] netlink: 'syz.4.3860': attribute type 1 has an invalid length. [ 456.743242][ T12] net_ratelimit: 10 callbacks suppressed [ 456.743264][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 456.835802][ T48] vlan3: left promiscuous mode [ 456.922993][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 457.076946][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 457.214377][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 457.345728][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 457.473107][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 457.593537][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 457.702954][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 457.740585][T20274] __nla_validate_parse: 7 callbacks suppressed [ 457.740606][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 457.856176][T20276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3879'. [ 457.865896][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 457.878866][T20278] netlink: 'syz.0.3880': attribute type 4 has an invalid length. [ 457.926864][T20280] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3880'. [ 457.950159][T20278] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3880'. [ 457.977384][T20280] 8021q: VLANs not supported on ip6tnl0 [ 457.994895][T20278] 8021q: VLANs not supported on ip6tnl0 [ 458.022959][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 458.331325][T20297] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3885'. [ 458.477724][T20302] netlink: 'syz.3.3886': attribute type 8 has an invalid length. [ 458.598645][T20308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'. [ 458.874288][T20327] syzkaller1: entered promiscuous mode [ 458.886753][T20327] syzkaller1: entered allmulticast mode [ 459.266488][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 459.275991][T20341] hsr_slave_0: left promiscuous mode [ 459.295041][T20341] hsr_slave_1: left promiscuous mode [ 459.342888][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.350186][ C1] bridge0: topology change detected, propagating [ 459.357169][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.364553][ C1] bridge0: topology change detected, propagating [ 461.509396][T20308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.520707][T20321] netlink: 'syz.2.3888': attribute type 1 has an invalid length. [ 461.849786][ T12] net_ratelimit: 35 callbacks suppressed [ 461.849809][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 461.973998][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 461.981972][T20382] sctp: [Deprecated]: syz.3.3905 (pid 20382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.981972][T20382] Use struct sctp_sack_info instead [ 462.012240][T20382] sctp: [Deprecated]: syz.3.3905 (pid 20382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.012240][T20382] Use struct sctp_sack_info instead [ 462.105922][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 462.223827][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 462.268060][T20409] syzkaller1: entered promiscuous mode [ 462.312921][T20409] syzkaller1: entered allmulticast mode [ 462.342924][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 462.365060][T20422] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 462.447184][T20424] pimreg: entered allmulticast mode [ 462.463571][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 462.538539][T20418] pimreg: left allmulticast mode [ 462.584753][ T12] bond1: (slave bridge4): failed to get link speed/duplex [ 462.704277][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 462.825451][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 462.863205][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 462.894306][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 462.953231][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 463.021910][T20457] Cannot find add_set index 46338 as target [ 463.634547][ T5936] IPVS: starting estimator thread 0... [ 463.743948][T20492] IPVS: using max 27 ests per chain, 64800 per kthread [ 463.886375][T20515] x9: renamed from bridge_slave_0 [ 464.248767][T20527] syzkaller0: entered promiscuous mode [ 464.284035][T20527] syzkaller0: entered allmulticast mode [ 464.338744][T20533] netlink: 'syz.3.3946': attribute type 1 has an invalid length. [ 464.354219][T20533] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3946'. [ 464.378421][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3947'. [ 464.408642][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 464.681543][T20550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3951'. [ 464.853167][T20552] syzkaller1: entered promiscuous mode [ 464.862947][T20552] syzkaller1: entered allmulticast mode [ 465.180706][T20568] syzkaller0: entered promiscuous mode [ 465.194345][T20568] syzkaller0: entered allmulticast mode [ 465.343893][T20578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3960'. [ 465.628361][T20592] syzkaller0: entered promiscuous mode [ 465.634381][T20592] syzkaller0: entered allmulticast mode [ 465.896179][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3971'. [ 466.128163][T20621] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3973'. [ 466.314336][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3975'. [ 466.354180][T20628] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 466.591099][T20636] veth0: entered promiscuous mode [ 466.643985][T20633] veth0: left promiscuous mode [ 466.723990][T20652] xt_hashlimit: size too large, truncated to 1048576 [ 466.832552][T20662] delete_channel: no stack [ 466.964329][T14058] net_ratelimit: 31 callbacks suppressed [ 466.964353][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 467.074466][T20652] xt_hashlimit: size too large, truncated to 1048576 [ 467.086752][T20673] netlink: 'syz.1.3989': attribute type 10 has an invalid length. [ 467.104640][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 467.213904][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 467.297340][T20652] xt_hashlimit: size too large, truncated to 1048576 [ 467.333408][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 467.473683][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 467.491498][T20652] xt_hashlimit: size too large, truncated to 1048576 [ 467.634639][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 467.753043][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 467.771079][T20713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.862853][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 467.972979][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 469.948124][T20665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.207016][T20730] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.255109][T20726] bond6 (unregistering): Released all slaves [ 470.404179][T20736] __nla_validate_parse: 6 callbacks suppressed [ 470.404201][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4004'. [ 470.438559][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4004'. [ 470.452201][T20742] netlink: 'syz.2.4005': attribute type 29 has an invalid length. [ 470.462236][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4004'. [ 470.487830][T20742] netlink: 'syz.2.4005': attribute type 29 has an invalid length. [ 470.506831][T20742] netlink: 'syz.2.4005': attribute type 32 has an invalid length. [ 470.523596][T20742] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4005'. [ 470.539520][T20742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4005'. [ 470.625635][T20746] syzkaller1: entered promiscuous mode [ 470.647205][T20746] syzkaller1: entered allmulticast mode [ 470.843253][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 470.859978][T20763] syzkaller0: entered promiscuous mode [ 470.880488][T20763] syzkaller0: entered allmulticast mode [ 470.907219][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 470.962201][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 470.986361][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 471.030876][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 471.993133][ T36] net_ratelimit: 31 callbacks suppressed [ 471.993155][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 472.063090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.072124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.156388][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 472.190280][T20839] netlink: 'syz.4.4039': attribute type 2 has an invalid length. [ 472.242309][T20844] netlink: 'syz.4.4039': attribute type 2 has an invalid length. [ 472.284051][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 472.403829][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 472.461762][T20850] openvswitch: netlink: Unknown nsh attribute 0 [ 472.575128][T20859] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 472.603846][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 472.763268][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 472.873378][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 472.943286][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 473.040008][T20879] x_tables: duplicate underflow at hook 1 [ 473.048937][T20881] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 474.029782][T20938] bond3: Removing last arp target with arp_interval on [ 474.158188][T20953] bridge_slave_1: default FDB implementation only supports local addresses [ 474.499442][T20912] delete_channel: no stack [ 477.003264][T14058] net_ratelimit: 36 callbacks suppressed [ 477.003290][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 477.123874][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 477.183041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.191321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.233197][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 477.346260][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 477.463634][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 477.572976][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 477.683112][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 477.792961][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 482.104161][T14051] net_ratelimit: 39 callbacks suppressed [ 482.104187][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 482.223285][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 482.332983][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 482.443110][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 482.552936][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 482.663251][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 482.773079][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 482.883090][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 482.943015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.951269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.183292][ T1030] net_ratelimit: 42 callbacks suppressed [ 487.183321][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 487.303121][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 487.412941][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 487.523149][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 487.632929][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 487.744202][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 487.853172][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 487.963242][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 488.073299][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 488.183480][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 488.303078][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 491.343227][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 492.293513][T14051] net_ratelimit: 38 callbacks suppressed [ 492.293542][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 492.414118][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 492.523038][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 492.633044][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 492.743179][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 492.852999][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 492.963123][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 493.073160][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 493.183049][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 493.293244][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 497.363551][T14056] net_ratelimit: 39 callbacks suppressed [ 497.363577][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 497.483091][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 497.592890][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 497.702950][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 497.813065][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 497.922967][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 498.032874][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 498.143500][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 498.252893][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 498.362912][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 500.939355][T20958] Cannot find del_set index 4 as target [ 500.988088][T20960] syzkaller0: entered promiscuous mode [ 501.003561][T20960] syzkaller0: entered allmulticast mode [ 501.132271][T20974] __nla_validate_parse: 50 callbacks suppressed [ 501.132295][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 501.201150][T20974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.352136][T20987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4082'. [ 501.467102][T20991] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4085'. [ 501.491344][T20991] syzkaller1: entered promiscuous mode [ 501.497084][T20991] syzkaller1: entered allmulticast mode [ 501.579629][T21001] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4089'. [ 501.605400][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.623873][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 502.014171][T21020] netlink: 'syz.3.4093': attribute type 10 has an invalid length. [ 502.033572][T21020] veth0_macvtap: left promiscuous mode [ 502.189955][T21025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.694079][ T36] net_ratelimit: 34 callbacks suppressed [ 502.694105][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 502.843054][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 502.973442][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 503.143406][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 503.253506][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 503.345432][T21091] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4110'. [ 503.473875][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 503.523612][T21098] vlan2: entered promiscuous mode [ 503.550502][T21098] vlan2: entered allmulticast mode [ 503.562893][T21098] hsr_slave_1: entered allmulticast mode [ 503.642895][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 503.705165][T21106] syzkaller0: create flow: hash 922851856 index 1 [ 503.754600][T21109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4117'. [ 503.795179][T21102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4114'. [ 503.887563][T21118] netlink: 'syz.4.4117': attribute type 2 has an invalid length. [ 503.996539][T14056] syzkaller0: tun_net_xmit 76 [ 504.002390][T14056] syzkaller0: tun_net_xmit 48 [ 504.017345][T21102] syzkaller0: delete flow: hash 922851856 index 1 [ 505.343343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.351804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.433406][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.852178][T21118] 9: entered promiscuous mode [ 505.859741][T21105] syzkaller1: entered promiscuous mode [ 505.865653][T21105] syzkaller1: entered allmulticast mode [ 506.043992][T21143] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4123'. [ 506.203234][T21161] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4125'. [ 506.220196][T21160] netlink: 548 bytes leftover after parsing attributes in process `syz.0.4126'. [ 506.272232][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'. [ 506.396387][T21167] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 506.406062][T21171] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4129'. [ 506.416658][T21167] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4127'. [ 506.428493][T21171] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4129'. [ 506.451804][T21171] netlink: 'syz.1.4129': attribute type 5 has an invalid length. [ 506.462046][T21167] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4127'. [ 506.483167][T21171] netlink: 'syz.1.4129': attribute type 6 has an invalid length. [ 506.490976][T21171] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4129'. [ 506.524165][T21174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4129'. [ 506.532925][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'. [ 506.536321][T21171] netlink: 'syz.1.4129': attribute type 4 has an invalid length. [ 506.715262][T21191] netlink: 'syz.1.4135': attribute type 1 has an invalid length. [ 506.772539][T21191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.795767][T21196] batman_adv: batadv0: Removing interface: dummy0 [ 506.836697][T21196] bond4: (slave dummy0): making interface the new active one [ 506.846273][T21196] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 506.936895][T21191] bond4: (slave dummy0): Releasing active interface [ 506.982198][T21202] syzkaller0: entered promiscuous mode [ 507.019851][T21202] syzkaller0: entered allmulticast mode [ 507.032776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 507.040902][ C0] lec:lec_tx_timeout: lec0 [ 507.244494][T21214] netlink: 'syz.1.4142': attribute type 1 has an invalid length. [ 507.580292][T21217] bond5: (slave ip6gretap1): making interface the new active one [ 507.589632][T21217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.601656][T21217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.613990][T21217] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 507.763190][ T323] net_ratelimit: 11 callbacks suppressed [ 507.763215][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 507.881204][T21248] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 507.965848][T21256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.022910][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 508.133115][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 508.273249][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 508.403500][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 508.519197][T21281] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 508.529517][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 508.556729][T21284] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 508.587344][T21281] h: entered promiscuous mode [ 508.658369][T21289] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 508.673525][T21284] syzkaller1: entered promiscuous mode [ 508.679297][T21284] syzkaller1: entered allmulticast mode [ 508.713119][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 508.973111][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 509.093199][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 509.606033][T21360] netlink: 'syz.3.4178': attribute type 11 has an invalid length. [ 509.973845][T21387] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 510.123087][T21387] IPVS: Error joining to the multicast group [ 510.332717][T21408] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 510.516376][T21408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.533671][T21424] vlan2: entered promiscuous mode [ 510.539608][T21424] bond6: entered promiscuous mode [ 510.550230][T21424] vlan2: entered allmulticast mode [ 510.559705][T21424] bond6: entered allmulticast mode [ 510.574563][T21423] netlink: 'syz.2.4196': attribute type 4 has an invalid length. [ 510.711342][T21423] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 510.900827][T21444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.918422][T21455] Cannot find del_set index 4 as target [ 511.572559][T21500] veth0: entered promiscuous mode [ 511.581800][T21494] veth0: left promiscuous mode [ 511.764021][T21513] __nla_validate_parse: 17 callbacks suppressed [ 511.764044][T21513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4222'. [ 511.910197][T21520] netlink: 'syz.2.4224': attribute type 4 has an invalid length. [ 511.942508][T21523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4227'. [ 512.122569][T21527] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 512.162856][T21527] bond6 (unregistering): Released all slaves [ 512.198953][T21537] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4229'. [ 512.208796][T21544] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4231'. [ 512.212094][T10284] lec:lec_start_xmit: lec0:No lecd attached [ 512.278489][T21548] siw: device registration error -23 [ 512.315941][T21544]  (unregistering): Released all slaves [ 512.457300][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 512.588570][T21539] lo speed is unknown, defaulting to 1000 [ 512.667258][T21564] netlink: 'syz.0.4235': attribute type 4 has an invalid length. [ 512.712992][T21565] netlink: 'syz.0.4235': attribute type 4 has an invalid length. [ 512.720786][T21565] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4235'. [ 512.763182][T21564] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4235'. [ 512.845615][T14059] net_ratelimit: 31 callbacks suppressed [ 512.845642][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 512.985468][T21574] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4238'. [ 513.225613][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 513.346001][T21597] sctp: [Deprecated]: syz.1.4244 (pid 21597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.346001][T21597] Use struct sctp_sack_info instead [ 513.376401][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 513.494258][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 513.531557][T21606] netlink: 'syz.2.4245': attribute type 1 has an invalid length. [ 513.631063][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 513.631215][T21604] netlink: 'syz.2.4245': attribute type 1 has an invalid length. [ 513.838765][T21606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.917305][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 513.989101][T21616] batadv_slave_0: entered promiscuous mode [ 514.081337][T21615] batadv_slave_0: left promiscuous mode [ 514.101542][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 514.154633][T20644] IPVS: starting estimator thread 0... [ 514.242846][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 514.251060][T21637] IPVS: using max 24 ests per chain, 57600 per kthread [ 514.303399][T21645] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4257'. [ 514.305656][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4255'. [ 514.336973][T21641] openvswitch: netlink: Flow actions attr not present in new flow. [ 514.402881][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 514.485165][T21650] netlink: 'syz.2.4258': attribute type 20 has an invalid length. [ 514.530784][ T323] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.542516][T21650] netlink: 'syz.2.4258': attribute type 20 has an invalid length. [ 514.556065][ T323] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.568397][ T323] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.903551][T21683] netlink: 'syz.2.4265': attribute type 21 has an invalid length. [ 515.778059][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3c [ 516.301237][T21776] netlink: 'syz.2.4296': attribute type 3 has an invalid length. [ 516.327501][T21778] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 516.821664][T21803] __nla_validate_parse: 49 callbacks suppressed [ 516.821688][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4302'. [ 516.932058][T21808] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4304'. [ 517.048285][T21814] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 517.057044][T21814] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.894083][ T323] net_ratelimit: 28 callbacks suppressed [ 517.894102][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 517.982725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 517.990918][ C0] lec:lec_tx_timeout: lec0 [ 518.013508][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 518.122969][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 518.232832][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 518.343252][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 518.452897][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 518.564527][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 518.672959][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 518.701489][T21732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.711623][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'. [ 518.783047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.791857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.817056][T21820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4307'. [ 518.950637][T21826] sctp: [Deprecated]: syz.2.4309 (pid 21826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.950637][T21826] Use struct sctp_sack_info instead [ 518.969085][T21826] sctp: [Deprecated]: syz.2.4309 (pid 21826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.969085][T21826] Use struct sctp_sack_info instead [ 518.974177][T21833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4312'. [ 519.455357][T21859] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 519.725234][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'. [ 519.929512][T21897] syzkaller1: entered promiscuous mode [ 519.949586][T21897] syzkaller1: entered allmulticast mode [ 520.015556][T21900] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4330'. [ 520.032621][T21902] netlink: 'syz.3.4332': attribute type 1 has an invalid length. [ 520.036546][T21897] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4330'. [ 520.050789][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 520.099763][T21903] sctp: [Deprecated]: syz.2.4331 (pid 21903) Use of int in max_burst socket option deprecated. [ 520.099763][T21903] Use struct sctp_assoc_value instead [ 520.142051][T21899] netlink: 'syz.2.4331': attribute type 1 has an invalid length. [ 520.242504][T21899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.301652][T21918] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 520.314433][T21903] bond4: (slave geneve2): making interface the new active one [ 520.331578][T21903] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 520.577966][T21932] netlink: 'syz.0.4340': attribute type 1 has an invalid length. [ 520.618432][T21932] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 520.705861][T21948] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4345'. [ 520.884708][T21958] xt_hashlimit: size too large, truncated to 1048576 [ 521.426897][T21991] ipvlan2: entered allmulticast mode [ 521.453100][T21991] batadv_slave_1: entered allmulticast mode [ 521.475773][T21991] batman_adv: batadv0: Adding interface: ipvlan2 [ 521.488969][T21991] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.547467][T21991] batman_adv: batadv0: Interface activated: ipvlan2 [ 522.057695][T22032] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 522.164123][T22034] syzkaller1: entered promiscuous mode [ 522.190625][T22034] syzkaller1: entered allmulticast mode [ 522.258414][T22044] vlan3: entered promiscuous mode [ 522.287381][T22044] vlan3: entered allmulticast mode [ 522.292586][T22044] hsr_slave_1: entered allmulticast mode [ 522.828535][T22075] netlink: 'syz.0.4383': attribute type 1 has an invalid length. [ 522.913028][ T323] net_ratelimit: 32 callbacks suppressed [ 522.913054][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 523.053403][T22094] __nla_validate_parse: 5 callbacks suppressed [ 523.053426][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4389'. [ 523.081527][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 523.128097][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4391'. [ 523.224482][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 523.333742][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 523.417299][T22119] sit1: entered promiscuous mode [ 523.428755][T22119] sit1: entered allmulticast mode [ 523.443158][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 523.524872][T22127] netlink: 'syz.0.4395': attribute type 14 has an invalid length. [ 523.535213][T22127] netem: change failed [ 523.560140][T22126] x_tables: unsorted entry at hook 2 [ 523.581368][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 523.692825][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 523.730620][T22080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.813520][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 523.823013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.925782][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 523.933493][T22135] netlink: 'syz.2.4398': attribute type 7 has an invalid length. [ 523.955547][T22135] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4398'. [ 524.805652][T22207] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.817547][T22208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.840148][T22208] netlink: 'syz.2.4418': attribute type 1 has an invalid length. [ 524.848905][T22208] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.864049][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.878382][T22211] netlink: 'syz.2.4418': attribute type 1 has an invalid length. [ 524.907620][T22211] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.940339][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4418'. [ 524.969539][T22207] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4418'. [ 525.111669][T22213] bond7: entered promiscuous mode [ 525.119945][T22213] bond7: entered allmulticast mode [ 525.135529][T22213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 525.279912][T22230] tipc: Enabled bearer , priority 0 [ 525.399373][T22230] syzkaller0: MTU too low for tipc bearer [ 525.406258][T22230] tipc: Disabling bearer [ 527.319894][T22248] syz.1.4428: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 527.352139][T22245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 527.465797][T22248] CPU: 0 UID: 0 PID: 22248 Comm: syz.1.4428 Not tainted syzkaller #0 PREEMPT(full) [ 527.465827][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.465839][T22248] Call Trace: [ 527.465847][T22248] [ 527.465855][T22248] dump_stack_lvl+0xe8/0x150 [ 527.465890][T22248] warn_alloc+0x249/0x340 [ 527.465915][T22248] ? stack_trace_save+0xa9/0x100 [ 527.465940][T22248] ? __pfx_warn_alloc+0x10/0x10 [ 527.465969][T22248] ? kasan_save_track+0x4f/0x80 [ 527.465989][T22248] ? kasan_save_track+0x3e/0x80 [ 527.466007][T22248] ? __kasan_kmalloc+0x93/0xb0 [ 527.466028][T22248] ? __kmalloc_cache_noprof+0x31c/0x660 [ 527.466050][T22248] ? xskq_create+0x56/0x170 [ 527.466070][T22248] ? xsk_setsockopt+0x54c/0x990 [ 527.466097][T22248] ? do_sock_setsockopt+0x17c/0x1b0 [ 527.466116][T22248] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 527.466136][T22248] ? do_syscall_64+0x14d/0xf80 [ 527.466163][T22248] __vmalloc_node_range_noprof+0x132/0x1730 [ 527.466231][T22248] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.466262][T22248] ? __kasan_kmalloc+0x93/0xb0 [ 527.466290][T22248] vmalloc_user_noprof+0xad/0xe0 [ 527.466313][T22248] ? xskq_create+0xbf/0x170 [ 527.466336][T22248] xskq_create+0xbf/0x170 [ 527.466358][T22248] xsk_init_queue+0x8a/0xe0 [ 527.466380][T22248] xsk_setsockopt+0x54c/0x990 [ 527.466413][T22248] ? __pfx_xsk_setsockopt+0x10/0x10 [ 527.466442][T22248] ? __pfx_aa_sk_perm+0x10/0x10 [ 527.466473][T22248] ? aa_sock_opt_perm+0xff/0x1a0 [ 527.466502][T22248] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 527.466518][T22248] ? __pfx_xsk_setsockopt+0x10/0x10 [ 527.466536][T22248] do_sock_setsockopt+0x17c/0x1b0 [ 527.466553][T22248] __x64_sys_setsockopt+0x13d/0x1b0 [ 527.466570][T22248] do_syscall_64+0x14d/0xf80 [ 527.466584][T22248] ? trace_irq_disable+0x3b/0x150 [ 527.466595][T22248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.466607][T22248] ? clear_bhb_loop+0x40/0x90 [ 527.466622][T22248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.466634][T22248] RIP: 0033:0x7fb233b9c799 [ 527.466647][T22248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.466658][T22248] RSP: 002b:00007fb234aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 527.466673][T22248] RAX: ffffffffffffffda RBX: 00007fb233e16180 RCX: 00007fb233b9c799 [ 527.466682][T22248] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 527.466689][T22248] RBP: 00007fb233c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 527.466697][T22248] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.466704][T22248] R13: 00007fb233e16218 R14: 00007fb233e16180 R15: 00007ffc372e7d48 [ 527.466724][T22248] [ 527.476224][T22248] Mem-Info: [ 527.527668][T22255] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 527.624082][T22248] active_anon:5841 inactive_anon:0 isolated_anon:0 [ 527.624082][T22248] active_file:2826 inactive_file:40098 isolated_file:0 [ 527.624082][T22248] unevictable:768 dirty:122 writeback:0 [ 527.624082][T22248] slab_reclaimable:13310 slab_unreclaimable:125002 [ 527.624082][T22248] mapped:29127 shmem:1374 pagetables:3436 [ 527.624082][T22248] sec_pagetables:0 bounce:0 [ 527.624082][T22248] kernel_misc_reclaimable:0 [ 527.624082][T22248] free:1277626 free_pcp:22466 free_cma:0 [ 527.624145][T22248] Node 0 active_anon:23364kB inactive_anon:0kB active_file:11304kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79644kB dirty:488kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15344kB pagetables:13560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.624196][T22248] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.624244][T22248] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 527.624309][T22248] lowmem_reserve[]: 0 [ 527.925205][T22263] net_ratelimit: 11 callbacks suppressed [ 527.925229][T22263] IPVS: rr: FWM 3 0x00000003 - no destination available [ 527.933180][T22248] 2492 2493 2493 2493 [ 527.948119][T22248] Node 0 DMA32 free:1300044kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23764kB inactive_anon:0kB active_file:11304kB inactive_file:160188kB unevictable:1536kB writepending:488kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:32208kB local_pcp:20028kB free_cma:0kB [ 527.985505][T22248] lowmem_reserve[]: 0 0 0 0 0 [ 527.995962][T22248] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.035707][T22265] bond8: Unable to set up delay as MII monitoring is disabled [ 528.052022][T22265] bond8 (unregistering): Released all slaves [ 528.064602][T22248] lowmem_reserve[]: 0 0 0 0 0 [ 528.072208][T22248] Node 1 Normal free:3799256kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56536kB local_pcp:27824kB free_cma:0kB [ 528.112096][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 528.112476][T22248] lowmem_reserve[]: 0 0 0 0 0 [ 528.161590][T22248] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 528.190405][T22264] ip6gre1: entered allmulticast mode [ 528.197043][T22248] Node 0 DMA32: 6730*4kB (UM) 5033*8kB (UM) 2791*16kB (UM) 705*32kB (UME) 366*64kB (UME) 717*128kB (UME) 745*256kB (UME) 424*512kB (UM) 299*1024kB (U) 164*2048kB (UM) 0*4096kB = 1299456kB [ 528.226588][T22248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.242769][T22248] Node 1 Normal: 8*4kB (UM) 7*8kB (UM) 10*16kB (UM) 17*32kB (UM) 11*64kB (UM) 6*128kB (UM) 8*256kB (UM) 8*512kB (UM) 6*1024kB (UM) 4*2048kB (U) 922*4096kB (UM) = 3799256kB [ 528.319493][T22248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.352165][T22248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.368740][T22248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.385652][T22248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.395764][T22248] 44296 total pagecache pages [ 528.400560][T22248] 0 pages in swap cache [ 528.407182][T22248] Free swap = 124996kB [ 528.411414][T22248] Total swap = 124996kB [ 528.412135][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 528.416040][T22248] 2097051 pages RAM [ 528.427311][T22248] 0 pages HighMem/MovableOnly [ 528.432171][T22248] 427052 pages reserved [ 528.437288][T22248] 0 pages cma reserved [ 528.493757][T22262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 528.557066][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 528.717837][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 528.834138][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 528.944263][T14056] bond1: (slave bridge4): failed to get link speed/duplex [ 528.962185][T22310] syzkaller0: entered promiscuous mode [ 528.981256][T22310] syzkaller0: entered allmulticast mode [ 529.028902][T22313] syzkaller0: entered promiscuous mode [ 529.035234][T22313] syzkaller0: entered allmulticast mode [ 529.063887][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 529.173335][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 529.343153][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 529.417875][T22332] __nla_validate_parse: 7 callbacks suppressed [ 529.417899][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 529.448824][T22332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4449'. [ 529.532725][T22332] geneve2: entered promiscuous mode [ 529.554276][T22342] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 529.591944][ T5144] Bluetooth: hci4: link tx timeout [ 529.599637][ T5144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 529.643377][T22332] geneve2: entered allmulticast mode [ 530.148383][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4457'. [ 530.213559][T22373] netlink: 'syz.1.4458': attribute type 12 has an invalid length. [ 530.603381][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 530.867566][T22402] tipc: Enabled bearer , priority 0 [ 531.028565][T22399] syzkaller0: entered promiscuous mode [ 531.034558][T22399] syzkaller0: entered allmulticast mode [ 531.041391][T22399] tipc: Resetting bearer [ 531.047472][T22407] netlink: 'syz.2.4465': attribute type 12 has an invalid length. [ 531.092201][T22398] tipc: Resetting bearer [ 531.335194][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 531.650876][T22429] netlink: 'syz.4.4468': attribute type 8 has an invalid length. [ 531.677584][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 533.093786][T22398] tipc: Disabling bearer [ 533.110303][ T1030] net_ratelimit: 15 callbacks suppressed [ 533.110319][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 533.198910][T22423] macvtap1: entered promiscuous mode [ 533.204973][T22423] vlan0: entered promiscuous mode [ 533.210736][T22423] macvtap1: entered allmulticast mode [ 533.216911][T22423] vlan0: entered allmulticast mode [ 533.222229][T22423] veth0_vlan: entered allmulticast mode [ 533.280554][T20644] tipc: Node number set to 3220565818 [ 533.293405][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 533.423868][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 533.623077][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 533.672606][T22457] sctp: [Deprecated]: syz.4.4480 (pid 22457) Use of int in max_burst socket option. [ 533.672606][T22457] Use struct sctp_assoc_value instead [ 533.709954][T22457] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.724526][T22463] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4478'. [ 533.753054][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 533.858851][T22472] netlink: 'syz.0.4485': attribute type 1 has an invalid length. [ 533.867013][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 533.876075][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 533.911847][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'. [ 533.935379][T22472] netlink: 'syz.0.4485': attribute type 2 has an invalid length. [ 533.952774][T22472] netlink: 'syz.0.4485': attribute type 2 has an invalid length. [ 533.963574][T22472] netlink: 'syz.0.4485': attribute type 2 has an invalid length. [ 533.983979][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 534.049631][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4487'. [ 534.102969][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 534.234203][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 534.363110][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 534.392482][T22508] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 535.008594][T22542] netlink: 'syz.1.4501': attribute type 11 has an invalid length. [ 535.376952][T22567] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4509'. [ 535.462838][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4512'. [ 535.472134][T22574] netlink: 'syz.4.4512': attribute type 1 has an invalid length. [ 535.490931][T22574] netlink: 'syz.4.4512': attribute type 2 has an invalid length. [ 535.613182][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 535.640009][T22572] gre1: entered promiscuous mode [ 535.646028][T22572] gre1: entered allmulticast mode [ 535.685474][T22585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4513'. [ 535.705381][T22588] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4516'. [ 535.718794][T22585] netlink: 'syz.0.4513': attribute type 7 has an invalid length. [ 535.737380][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4513'. [ 535.743408][T22585] netlink: 'syz.0.4513': attribute type 8 has an invalid length. [ 535.816407][T22600] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4517'. [ 535.858252][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4513'. [ 535.964389][T22607] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4518'. [ 535.992816][T22607] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4518'. [ 537.025244][ T1030] wlan1: Trigger new scan to find an IBSS to join [ 537.050992][T22682] x_tables: duplicate underflow at hook 3 [ 537.529628][T22710] syzkaller1: entered promiscuous mode [ 537.535911][T22710] syzkaller1: entered allmulticast mode [ 537.617834][T22716] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 537.950881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df63000: rx timeout, send abort [ 538.213089][T14058] net_ratelimit: 30 callbacks suppressed [ 538.213113][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 538.354098][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 538.450954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df62c00: rx timeout, send abort [ 538.468429][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 538.583355][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 538.632882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.641393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.694385][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 538.803544][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 538.914357][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 538.959444][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df62c00: abort rx timeout. Force session deactivation [ 539.034979][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 539.985129][T14057] wlan1: Trigger new scan to find an IBSS to join [ 540.094242][T22684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.103518][T22710] netlink: 'syz.4.4548': attribute type 1 has an invalid length. [ 541.111353][T22794] lo speed is unknown, defaulting to 1000 [ 541.845069][T22813] __nla_validate_parse: 22 callbacks suppressed [ 541.845084][T22813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'. [ 541.876218][T22813] team1: entered promiscuous mode [ 541.881289][T22813] team1: entered allmulticast mode [ 543.023164][T14057] wlan1: Creating new IBSS network, BSSID 16:f4:d6:91:2b:70 [ 543.283273][ T1030] net_ratelimit: 37 callbacks suppressed [ 543.283298][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 543.403314][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 543.513336][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 543.623249][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 543.681706][T22779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.734168][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 543.865601][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 543.933405][T22825] netlink: 'syz.2.4574': attribute type 1 has an invalid length. [ 543.969321][T22823] syzkaller1: entered promiscuous mode [ 543.976655][T22823] syzkaller1: entered allmulticast mode [ 544.003098][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 544.168831][T22823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.248707][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 544.284171][T22844] sock: sock_set_timeout: `syz.4.4579' (pid 22844) tries to set negative timeout [ 544.342097][T22823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.382917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.463764][T22856] x_tables: duplicate underflow at hook 3 [ 544.511832][T22823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.709712][T22823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.985215][T22887] netlink: 'syz.2.4591': attribute type 21 has an invalid length. [ 545.114472][T22887] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 545.142587][T22887] bond5 (unregistering): Released all slaves [ 545.200330][T14058] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.230643][T22891] geneve2: entered promiscuous mode [ 545.429335][T14057] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.443555][T22908] syzkaller0: entered promiscuous mode [ 545.449144][T22908] syzkaller0: entered allmulticast mode [ 545.520963][T14057] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.611724][T14058] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.667278][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4599'. [ 545.771386][T22927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4600'. [ 545.811301][T22927] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4600'. [ 545.843801][T22927] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4600'. [ 545.857256][T22933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4600'. [ 546.316184][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'. [ 546.485655][T22970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.492997][T22970] IPv6: NLM_F_CREATE should be set when creating new route [ 546.500444][T22970] IPv6: NLM_F_CREATE should be set when creating new route [ 546.595594][T22977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4614'. [ 546.604935][T22977] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4614'. [ 546.618834][T22977] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4614'. [ 546.914011][T22995] tap0: tun_chr_ioctl cmd 1074025672 [ 546.923029][T22995] tap0: ignored: set checksum disabled [ 547.020497][T22999] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 547.474515][T23025] syzkaller1: entered promiscuous mode [ 547.493981][T23025] syzkaller1: entered allmulticast mode [ 547.578496][T23031] __nla_validate_parse: 4 callbacks suppressed [ 547.578519][T23031] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4630'. [ 547.615753][T23033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4630'. [ 547.632374][T23031] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4630'. [ 547.648662][T23031] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4630'. [ 547.890253][T23041] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4634'. [ 548.198748][T23063] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4639'. [ 548.239837][T23063] netlink: 'syz.2.4639': attribute type 9 has an invalid length. [ 548.252844][T23065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'. [ 548.276538][T23060] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 548.291309][T23065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'. [ 548.325287][T23060] bond8 (unregistering): Released all slaves [ 548.387539][ T1030] net_ratelimit: 21 callbacks suppressed [ 548.387563][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 548.508007][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 548.538410][T23074] netlink: 'syz.2.4643': attribute type 1 has an invalid length. [ 548.612209][T23074] bond5: (slave ip6gretap1): making interface the new active one [ 548.622282][T23074] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 548.632848][T23074] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 548.641219][T23074] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 548.651457][T23082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4644'. [ 548.672990][T23082] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4644'. [ 548.693102][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 548.799480][T23096] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.823363][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 548.896248][T23096] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.972894][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 549.008864][T23096] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.085950][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 549.183550][T23096] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.204982][T14057] bond1: (slave bridge4): failed to get link speed/duplex [ 549.322798][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 549.436275][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 549.472529][T23129] IPVS: set_ctl: invalid protocol: 22 172.20.20.54:20001 [ 549.563833][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 549.746287][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 549.849972][ T323] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.858832][ T323] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.911606][ T1030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.959751][ T323] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.167922][T23155] x_tables: duplicate underflow at hook 1 [ 551.109661][T23187] delete_channel: no stack [ 551.254601][T23190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.553502][T23208] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 551.639758][T23212] netlink: 'syz.2.4680': attribute type 7 has an invalid length. [ 552.764127][T23272] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 552.835702][T23275] bond6: entered promiscuous mode [ 553.049766][T23286] __nla_validate_parse: 25 callbacks suppressed [ 553.049791][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4697'. [ 553.433424][T14051] net_ratelimit: 32 callbacks suppressed [ 553.433446][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 553.552828][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 553.792825][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 553.904989][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 554.002308][T23328] syzkaller0: entered promiscuous mode [ 554.017612][T23328] syzkaller0: entered allmulticast mode [ 554.020443][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 554.031836][T23334] netlink: 'syz.4.4710': attribute type 2 has an invalid length. [ 554.052943][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 554.060586][T23334] netlink: 'syz.4.4710': attribute type 11 has an invalid length. [ 554.060612][T23334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4710'. [ 554.203244][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 554.295345][T23342] netlink: 'syz.0.4712': attribute type 11 has an invalid length. [ 554.313796][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 554.326007][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'. [ 554.347753][T23342] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4712'. [ 554.353989][T23344] netlink: 'syz.4.4713': attribute type 1 has an invalid length. [ 554.419965][T23349] gre2: entered promiscuous mode [ 554.434694][T23349] gre2: entered allmulticast mode [ 554.469471][T23345] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4713'. [ 554.499692][T23344] bond9: (slave geneve3): making interface the new active one [ 554.508350][T23344] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 554.522483][ T323] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.567816][ T323] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.667880][ T323] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.693707][ T323] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.723658][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 554.840583][T23371] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4719'. [ 554.867321][T23371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4719'. [ 554.876689][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 554.878229][T23370] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4718'. [ 555.063272][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 555.110725][T23378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4722'. [ 555.588523][T23401] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.997209][T23431] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 556.322107][T23441] wireguard0: entered promiscuous mode [ 556.327907][T23441] wireguard0: entered allmulticast mode [ 556.337638][T23441] team0: Device wireguard0 is of different type [ 556.388092][T23452] syzkaller1: entered promiscuous mode [ 556.425022][T23452] syzkaller1: entered allmulticast mode [ 557.411621][T23510] netlink: 'syz.2.4760': attribute type 10 has an invalid length. [ 557.538862][T14059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.557384][T14059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.113227][T23542] __nla_validate_parse: 11 callbacks suppressed [ 558.113247][T23542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4771'. [ 558.162999][T23542] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4771'. [ 558.196943][T23547] netlink: 'syz.1.4772': attribute type 5 has an invalid length. [ 558.201615][T23542] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4771'. [ 558.237294][T23542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4771'. [ 558.473274][ T323] net_ratelimit: 24 callbacks suppressed [ 558.473300][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 558.617861][T23572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4780'. [ 558.683252][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 558.733978][T23577] ipvlan2: entered allmulticast mode [ 558.760316][T23577] batman_adv: batadv0: Adding interface: ipvlan2 [ 558.777681][T23577] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.861960][T23582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4783'. [ 558.875022][T23577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.913775][T23577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.926964][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4783'. [ 558.950961][T23577] batman_adv: batadv0: Interface activated: ipvlan2 [ 558.983375][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 559.101778][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 559.212954][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 559.394247][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 559.513085][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 559.566395][T23613] netlink: 'syz.1.4791': attribute type 1 has an invalid length. [ 559.656441][T23613] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 559.683222][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 559.853280][T14057] bond1: (slave bridge4): failed to get link speed/duplex [ 559.964761][T23635] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 560.088957][T23642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 560.184425][T23646] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4798'. [ 560.230441][T23646] 8021q: VLANs not supported on ip6_vti0 [ 560.434303][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4803'. [ 560.916258][T23681] bond10 (unregistering): Released all slaves [ 562.523837][T23760] bond0: (slave bridge0): Releasing backup interface [ 563.038813][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 563.225590][T23798] netlink: 'syz.4.4840': attribute type 1 has an invalid length. [ 563.393751][T23806] netlink: 'syz.1.4841': attribute type 1 has an invalid length. [ 563.425326][T23798] 8021q: adding VLAN 0 to HW filter on device bond10 [ 563.460855][T23806] __nla_validate_parse: 10 callbacks suppressed [ 563.460877][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4841'. [ 563.546485][T23800] 8021q: adding VLAN 0 to HW filter on device bond10 [ 563.582558][T23800] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 563.630889][T23800] bond10: (slave vcan1): Error -95 calling set_mac_address [ 563.796819][T14057] net_ratelimit: 21 callbacks suppressed [ 563.796843][T14057] bond1: (slave bridge4): failed to get link speed/duplex [ 563.905278][T23829] netlink: 'syz.2.4846': attribute type 1 has an invalid length. [ 564.083447][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 564.233331][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 564.283262][T23841] netlink: 'syz.3.4850': attribute type 1 has an invalid length. [ 564.314704][T23846] xt_CONNSECMARK: invalid mode: 0 [ 564.344761][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 564.481166][T23857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.552761][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 564.634952][T23865] netlink: 'syz.0.4856': attribute type 10 has an invalid length. [ 564.702802][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 564.763437][T23866] syzkaller1: entered promiscuous mode [ 564.784567][T23866] syzkaller1: entered allmulticast mode [ 564.791292][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4860'. [ 564.808759][T23866] netlink: 'syz.4.4857': attribute type 11 has an invalid length. [ 564.833245][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 564.917791][T23881] netlink: 'syz.1.4862': attribute type 83 has an invalid length. [ 564.929326][T23882] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4861'. [ 564.929914][T23883] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4861'. [ 564.968376][T23881] netlink: 'syz.1.4862': attribute type 21 has an invalid length. [ 564.998078][T23886] tipc: Started in network mode [ 565.003725][T23886] tipc: Node identity 0a385ca2bc98, cluster identity 4711 [ 565.011138][T23886] tipc: Enabled bearer , priority 0 [ 565.120892][T23886] syzkaller0: entered promiscuous mode [ 565.134235][T23886] syzkaller0: entered allmulticast mode [ 565.158705][T23886] tipc: Resetting bearer [ 565.193892][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 565.224025][T23896] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4865'. [ 565.263679][T23896] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4865'. [ 565.320912][T14059] tipc: Resetting bearer [ 565.393696][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 565.456544][T23885] tipc: Resetting bearer [ 567.422976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.491338][T23885] tipc: Disabling bearer [ 567.582824][ T5888] tipc: Node number set to 3063962786 [ 567.682372][T23916] tipc: Started in network mode [ 567.699392][T23916] tipc: Node identity e0000001, cluster identity 4711 [ 567.714624][T23916] tipc: Enabling of bearer rejected, failed to enable media [ 567.756931][T23919] tipc: Enabled bearer , priority 0 [ 567.807104][T23926] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4874'. [ 567.891829][T23919] syzkaller0: entered promiscuous mode [ 567.899062][T23919] syzkaller0: entered allmulticast mode [ 567.906041][T23919] tipc: Resetting bearer [ 567.933525][T23928] syzkaller1: left promiscuous mode [ 567.944041][T23928] syzkaller1: left allmulticast mode [ 567.996365][T23918] tipc: Resetting bearer [ 568.052757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.060877][ C0] lec:lec_tx_timeout: lec0 [ 568.505558][T23958] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4883'. [ 570.077569][ T5936] net_ratelimit: 2 callbacks suppressed [ 570.077590][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.094708][T23918] tipc: Disabling bearer [ 570.104217][T23934] ip6_vti0: entered promiscuous mode [ 570.109694][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4876'. [ 570.215644][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 570.331426][T23970] bond1: (slave lo): Releasing backup interface [ 570.354654][T23970] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 570.373306][T23976] netlink: 436 bytes leftover after parsing attributes in process `syz.3.4888'. [ 570.386060][T23976] openvswitch: netlink: Flow key attr not present in new flow. [ 570.430153][T23970] bridge_slave_0: left allmulticast mode [ 570.449692][T23970] bridge_slave_0: left promiscuous mode [ 570.463981][T23970] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.479154][T23970] bridge_slave_1: left allmulticast mode [ 570.487324][T23970] bridge_slave_1: left promiscuous mode [ 570.493785][T23970] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.502132][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 570.519534][T23983] openvswitch: netlink: Missing key (keys=40, expected=80) [ 570.528046][T23970] bond2: (slave veth0_to_bond): Releasing active interface [ 570.571915][T23970] bond0: (slave bond_slave_0): Releasing backup interface [ 570.587756][T23970] bond0: (slave bond_slave_1): Releasing backup interface [ 570.608831][T23970] team0: Port device team_slave_0 removed [ 570.635079][T23970] team0: Port device team_slave_1 removed [ 570.641933][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.654226][T23970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.663996][T23970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.671431][T23970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.689248][T23970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 570.711592][T23971] team0: Mode changed to "random" [ 570.783909][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 570.817549][ T1030] bond5: (slave vlan3): link status definitely down, disabling slave [ 570.835063][ T1030] bond5: now running without any active interface! [ 570.908946][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4896'. [ 570.922782][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 570.940915][T23999] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4897'. [ 571.030502][T24008] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 571.045240][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 571.067018][T24008] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 571.108074][T24008] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 571.138781][T24008] netlink: 'syz.0.4896': attribute type 2 has an invalid length. [ 571.161043][T14058] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 571.190041][T24008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4896'. [ 571.216584][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 571.344830][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 571.653551][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4908'. [ 571.682134][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4908'. [ 571.706596][T24038] syzkaller0: entered promiscuous mode [ 571.792506][T24012] lec:lec_atm_close: lec0: Shut down! [ 572.230707][T24067] vlan3: entered allmulticast mode [ 572.249717][T24067] bond0: entered allmulticast mode [ 572.256435][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4916'. [ 572.263495][T24067] bond_slave_0: entered allmulticast mode [ 572.283562][T24067] bond_slave_1: entered allmulticast mode [ 572.325393][T24070] bond8: (slave gretap0): Device is not bonding slave [ 572.332314][T24070] bond8: option active_slave: invalid value (gretap0) [ 572.404761][T24070] bond8 (unregistering): Released all slaves [ 572.520478][T24073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.536300][T24073] bond_slave_0: left allmulticast mode [ 572.565107][T24073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.583689][T24073] bond_slave_1: left allmulticast mode [ 572.610506][T24073] bond0 (unregistering): Released all slaves [ 572.830607][T24090] delete_channel: no stack [ 573.010419][T24103] macsec2: entered promiscuous mode [ 573.162413][T24114] gtp2: entered promiscuous mode [ 573.168464][T24114] gtp2: entered allmulticast mode [ 573.783987][T24157] __nla_validate_parse: 6 callbacks suppressed [ 573.784008][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4939'. [ 573.871212][T24163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4939'. [ 574.177046][T24184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.339215][T24191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4950'. [ 574.511032][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4949'. [ 574.696529][T24214] netlink: 'syz.1.4955': attribute type 1 has an invalid length. [ 574.969222][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4962'. [ 575.052180][T24236] netlink: 'syz.2.4963': attribute type 10 has an invalid length. [ 575.083163][T14059] net_ratelimit: 24 callbacks suppressed [ 575.083188][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 575.212859][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 575.227640][T24244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4966'. [ 575.322912][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 575.385729][T24255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4968'. [ 575.442822][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 575.547470][T24257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4969'. [ 575.572949][T24257] wg2: entered allmulticast mode [ 575.683752][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 575.836002][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4975'. [ 575.863942][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 575.881568][T24286] netlink: 'syz.4.4976': attribute type 10 has an invalid length. [ 575.993951][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 576.099303][T24296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4980'. [ 576.109568][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 576.229953][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 576.364036][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 576.917406][T24347] netlink: 'syz.0.4994': attribute type 1 has an invalid length. [ 577.023997][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 577.032072][ C0] lec:lec_tx_timeout: lec0 [ 577.037463][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 577.179657][T24354] sctp: [Deprecated]: syz.2.4996 (pid 24354) Use of int in maxseg socket option. [ 577.179657][T24354] Use struct sctp_assoc_value instead [ 577.375683][T24366] syzkaller0: entered promiscuous mode [ 577.381226][T24366] syzkaller0: entered allmulticast mode [ 579.638375][T24403] __nla_validate_parse: 4 callbacks suppressed [ 579.638397][T24403] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5011'. [ 579.663678][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5010'. [ 579.687510][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5010'. [ 579.741707][T24401] gretap0: entered promiscuous mode [ 579.757618][T24401] gretap0: left promiscuous mode [ 579.970695][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5017'. [ 579.992174][T24421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5017'. [ 580.005104][T24428] netlink: 'syz.1.5018': attribute type 4 has an invalid length. [ 580.012997][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5017'. [ 580.013223][T24421] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5017'. [ 580.013240][T24421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5017'. [ 580.051235][T24428] netlink: 'syz.1.5018': attribute type 3 has an invalid length. [ 580.059801][T24428] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5018'. [ 580.097328][T14051] net_ratelimit: 18 callbacks suppressed [ 580.097351][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 580.224111][T24438] x_tables: duplicate entry at hook 3 [ 580.233071][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 580.382949][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 580.503200][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 580.607935][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5033'. [ 580.617530][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 580.627253][T24465] netlink: 'syz.3.5031': attribute type 25 has an invalid length. [ 580.635746][T24466] tap0: tun_chr_ioctl cmd 1074025676 [ 580.649545][T24466] tap0: owner set to 0 [ 580.734195][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 580.873767][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 581.011109][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 581.122897][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 581.234443][T14051] bond1: (slave bridge4): failed to get link speed/duplex [ 581.431782][T24520] netlink: 'syz.3.5050': attribute type 10 has an invalid length. [ 581.492314][T24520] team0 (unregistering): Port device team_slave_0 removed [ 581.511539][T24520] team0 (unregistering): Port device team_slave_1 removed [ 581.924982][T24544] bond0: entered promiscuous mode [ 581.938930][T24544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.052697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 582.060821][ C0] lec:lec_tx_timeout: lec0 [ 582.159056][T24563] syzkaller1: entered promiscuous mode [ 582.169448][T24563] syzkaller1: entered allmulticast mode [ 582.404648][T24580] netlink: 'syz.4.5068': attribute type 1 has an invalid length. [ 583.162346][ T5825] block nbd3: Receive control failed (result -107) [ 583.194285][T24632] nbd3: detected capacity change from 0 to 127 [ 583.221752][T24642] block nbd3: Dead connection, failed to find a fallback [ 583.233701][T24642] block nbd3: shutting down sockets [ 583.239668][T24642] blk_print_req_error: 286 callbacks suppressed [ 583.239686][T24642] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.259217][T24642] buffer_io_error: 286 callbacks suppressed [ 583.259235][T24642] Buffer I/O error on dev nbd3, logical block 0, async page read [ 583.274995][T24642] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.285217][T24642] Buffer I/O error on dev nbd3, logical block 1, async page read [ 583.294251][T24642] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.304894][T24642] Buffer I/O error on dev nbd3, logical block 2, async page read [ 583.314313][T24642] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.392882][T24642] Buffer I/O error on dev nbd3, logical block 3, async page read [ 583.401308][T24642] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.451085][T24642] Buffer I/O error on dev nbd3, logical block 0, async page read [ 583.477154][T24642] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.501515][T24642] Buffer I/O error on dev nbd3, logical block 1, async page read [ 583.541680][T24642] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.590368][T24642] Buffer I/O error on dev nbd3, logical block 2, async page read [ 583.626978][T24642] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.684570][T24642] Buffer I/O error on dev nbd3, logical block 3, async page read [ 583.729793][T24642] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.807534][T24642] Buffer I/O error on dev nbd3, logical block 0, async page read [ 583.829943][T24642] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 583.850550][T24642] Buffer I/O error on dev nbd3, logical block 1, async page read [ 583.876015][T24680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 583.885084][T24642] ldm_validate_partition_table(): Disk read failed. [ 583.905065][T24642] Dev nbd3: unable to read RDB block 0 [ 583.920797][T24642] nbd3: unable to read partition table [ 583.965198][T24642] ldm_validate_partition_table(): Disk read failed. [ 583.990398][T24642] Dev nbd3: unable to read RDB block 0 [ 584.015249][T24642] nbd3: unable to read partition table [ 584.305499][T24695] syzkaller0: entered promiscuous mode [ 584.311059][T24695] syzkaller0: entered allmulticast mode [ 584.397710][T24706] netlink: 'syz.2.5106': attribute type 1 has an invalid length. [ 584.552316][T24708] lo speed is unknown, defaulting to 1000 [ 584.563430][T24712] nbd: must specify an index to disconnect [ 584.950787][T24727] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 584.951825][T24726] __nla_validate_parse: 10 callbacks suppressed [ 584.951841][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5112'. [ 584.972911][T24727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5113'. [ 585.063091][T24726] 8021q: adding VLAN 0 to HW filter on device bond11 [ 585.243054][ T323] net_ratelimit: 35 callbacks suppressed [ 585.243077][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 585.374309][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 585.504556][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 585.582399][T24758] netlink: 'syz.0.5121': attribute type 10 has an invalid length. [ 585.623012][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 585.642313][T24752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.726201][T24752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.774087][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 585.903493][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 585.942550][T24768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.988146][T24772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.031913][T24772] netlink: 'syz.0.5125': attribute type 1 has an invalid length. [ 586.033800][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 586.091278][T24772] bond8: entered promiscuous mode [ 586.096913][T24772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.216023][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 586.394718][T24788] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5131'. [ 586.686184][T24803] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5135'. [ 586.700856][T24804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5135'. [ 586.707122][T24803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5135'. [ 586.733364][T24806] syzkaller1: entered promiscuous mode [ 586.739605][T24806] syzkaller1: entered allmulticast mode [ 586.761385][T24804] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 586.805354][T24803] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 586.850217][T24810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5137'. [ 586.982436][T24815] geneve3: entered promiscuous mode [ 586.988487][T24815] geneve3: entered allmulticast mode [ 587.017398][T14058] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 587.045923][T14058] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 587.056341][T14058] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 587.083991][T14058] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 587.109784][T24823] syzkaller1: entered promiscuous mode [ 587.119585][T24823] syzkaller1: entered allmulticast mode [ 587.132243][T24828] netlink: 'syz.0.5140': attribute type 12 has an invalid length. [ 587.140866][T24828] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5140'. [ 587.151231][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5143'. [ 587.267934][T24838] netlink: 'syz.1.5146': attribute type 1 has an invalid length. [ 587.309155][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5147'. [ 587.669194][T24860] netlink: 'syz.1.5152': attribute type 2 has an invalid length. [ 587.710203][T24860] 9: entered promiscuous mode [ 587.807960][T24876] netlink: 'syz.2.5156': attribute type 4 has an invalid length. [ 587.857502][T24879] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 587.924874][T24882] veth0: entered promiscuous mode [ 587.949396][T24881] veth0: left promiscuous mode [ 588.519238][T24918] netlink: 'syz.0.5170': attribute type 1 has an invalid length. [ 588.665025][T24918] bond9: entered promiscuous mode [ 588.671678][T24918] 8021q: adding VLAN 0 to HW filter on device bond9 [ 588.905849][T24934] netlink: 'syz.3.5175': attribute type 4 has an invalid length. [ 589.146086][T24949] netlink: 'syz.4.5181': attribute type 1 has an invalid length. [ 589.159987][T24950] sctp: [Deprecated]: syz.2.5179 (pid 24950) Use of int in max_burst socket option. [ 589.159987][T24950] Use struct sctp_assoc_value instead [ 589.264194][T24949] 8021q: adding VLAN 0 to HW filter on device bond12 [ 589.449201][T24949] bond12: (slave veth7): Enslaving as an active interface with a down link [ 589.956434][T24993] __nla_validate_parse: 11 callbacks suppressed [ 589.956456][T24993] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5194'. [ 590.304520][T14058] net_ratelimit: 32 callbacks suppressed [ 590.304544][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 590.400443][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5206'. [ 590.423499][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 590.464822][T25029] netlink: 'syz.2.5207': attribute type 3 has an invalid length. [ 590.488811][T25029] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5207'. [ 590.550780][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 590.577464][T25036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5208'. [ 590.763066][T25042] netlink: 'syz.3.5210': attribute type 9 has an invalid length. [ 590.781431][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 590.926285][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 591.042895][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 591.150476][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5215'. [ 591.192938][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 591.195408][T25058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5212'. [ 591.251042][T25065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5217'. [ 591.272352][T25064] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 591.312910][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 591.370721][T25068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5212'. [ 591.431912][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 591.585225][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 591.617662][T25075] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.5218'. [ 591.690804][T25083] netlink: 'syz.1.5223': attribute type 11 has an invalid length. [ 591.912509][T25098] netlink: 'syz.0.5226': attribute type 1 has an invalid length. [ 592.014119][T25104] netlink: 'syz.1.5227': attribute type 2 has an invalid length. [ 592.024251][T25104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5227'. [ 593.195986][T17770] [ 593.198489][T17770] ====================================================== [ 593.200200][T25050] syz.4.5212 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 593.205521][T17770] WARNING: possible circular locking dependency detected [ 593.205533][T17770] syzkaller #0 Not tainted [ 593.205543][T17770] ------------------------------------------------------ [ 593.205551][T17770] syz-executor/17770 is trying to acquire lock: [ 593.205561][T17770] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 593.205617][T17770] [ 593.205617][T17770] but task is already holding lock: [ 593.205624][T17770] ffff888054b298b0 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x97c/0x1320 [ 593.205677][T17770] [ 593.205677][T17770] which lock already depends on the new lock. [ 593.205677][T17770] [ 593.205685][T17770] [ 593.205685][T17770] the existing dependency chain (in reverse order) is: [ 593.205692][T17770] [ 593.205692][T17770] -> #9 (mapping.invalidate_lock#2){++++}-{4:4}: [ 593.205727][T17770] down_read+0x47/0x2e0 [ 593.205751][T17770] filemap_fault+0x5ff/0x1320 [ 593.205770][T17770] __do_fault+0x138/0x390 [ 593.205788][T17770] do_pte_missing+0x5c4/0x3490 [ 593.205807][T17770] handle_mm_fault+0x1bec/0x3310 [ 593.205833][T17770] do_user_addr_fault+0xa73/0x1340 [ 593.205857][T17770] exc_page_fault+0x6a/0xc0 [ 593.205877][T17770] asm_exc_page_fault+0x26/0x30 [ 593.205894][T17770] [ 593.205894][T17770] -> #8 [ 593.229026][T25050] CPU: 1 UID: 0 PID: 25050 Comm: syz.4.5212 Not tainted syzkaller #0 PREEMPT(full) [ 593.229054][T25050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.229065][T25050] Call Trace: [ 593.229072][T25050] [ 593.229079][T25050] dump_stack_lvl+0xe8/0x150 [ 593.229107][T25050] dump_header+0xd3/0x4c0 [ 593.229127][T25050] oom_kill_process+0x3ab/0x970 [ 593.229149][T25050] out_of_memory+0x106c/0x1410 [ 593.229176][T25050] ? percpu_ref_put+0x19/0x180 [ 593.229199][T25050] ? __pfx___mutex_lock+0x10/0x10 [ 593.229224][T25050] ? __pfx_out_of_memory+0x10/0x10 [ 593.229240][T25050] ? do_raw_spin_unlock+0xf5/0x210 [ 593.229263][T25050] try_charge_memcg+0xc53/0x1560 [ 593.229285][T25050] ? __lock_acquire+0x6b5/0x2cf0 [ 593.229312][T25050] ? __pfx_try_charge_memcg+0x10/0x10 [ 593.229338][T25050] ? xa_load+0x60/0x210 [ 593.229362][T25050] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 593.229383][T25050] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 593.229404][T25050] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 593.229425][T25050] __swap_cache_prepare_and_add+0x52a/0x700 [ 593.229459][T25050] swap_cache_alloc_folio+0xf1/0x240 [ 593.229486][T25050] swap_cluster_readahead+0x369/0x690 [ 593.229515][T25050] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 593.229546][T25050] ? get_vma_policy+0x27b/0x3c0 [ 593.229569][T25050] swapin_readahead+0x196/0xc50 [ 593.229599][T25050] ? __pfx_swapin_readahead+0x10/0x10 [ 593.229625][T25050] ? swap_table_get+0x1e/0x260 [ 593.229647][T25050] ? swap_table_get+0x1e/0x260 [ 593.229669][T25050] ? swap_table_get+0x1e/0x260 [ 593.229691][T25050] ? swap_table_get+0x216/0x260 [ 593.229715][T25050] ? swap_cache_get_folio+0x513/0x520 [ 593.229742][T25050] do_swap_page+0x56f/0x5a20 [ 593.229774][T25050] ? do_swap_page+0x127/0x5a20 [ 593.229796][T25050] ? __pfx_do_swap_page+0x10/0x10 [ 593.229818][T25050] ? __pte_offset_map+0x1ae/0x240 [ 593.229835][T25050] ? pte_offset_map_rw_nolock+0xea/0x160 [ 593.229852][T25050] handle_mm_fault+0x12d2/0x3310 [ 593.229883][T25050] ? handle_mm_fault+0xee/0x3310 [ 593.229911][T25050] ? __pfx_handle_mm_fault+0x10/0x10 [ 593.229935][T25050] ? lock_vma_under_rcu+0x45a/0x500 [ 593.229963][T25050] do_user_addr_fault+0xa73/0x1340 [ 593.229988][T25050] ? rcu_is_watching+0x15/0xb0 [ 593.230012][T25050] ? trace_page_fault_user+0x84/0x210 [ 593.230035][T25050] exc_page_fault+0x6a/0xc0 [ 593.230054][T25050] asm_exc_page_fault+0x26/0x30 [ 593.230072][T25050] RIP: 0033:0x7f22126659d0 [ 593.230088][T25050] Code: 00 00 45 31 d2 48 83 b8 88 00 00 00 ff 41 b9 03 00 00 00 ba 01 00 00 00 0f 85 59 ff ff ff eb ca 66 2e 0f 1f 84 00 00 00 00 00 <80> 3d 0e fd ed 00 00 74 40 80 3d f3 fc ed 00 00 74 2e 80 3d f6 fc [ 593.230104][T25050] RSP: 002b:00007fff60d0df58 EFLAGS: 00010246 [ 593.230120][T25050] RAX: 0000000000000000 RBX: 00007f2212a17da0 RCX: 00007f221279c799 [ 593.230133][T25050] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 593.230144][T25050] RBP: 00007f2212a17da0 R08: 0000000000000006 R09: 0000000000000000 [ 593.230155][T25050] R10: 00007f2212a17cb0 R11: 0000000000000246 R12: 000000000009076f [ 593.230181][T25050] R13: 00007f2212a1627c R14: 0000000000090612 R15: 00007f2212a16270 [ 593.230202][T25050] [ 593.230209][T25050] memory: usage 307200kB, limit 307200kB, failcnt 389 [ 593.235735][T17770] (vm_lock){++++}-{0:0}: [ 593.235764][T17770] __vma_start_exclude_readers+0x28a/0x940 [ 593.235786][T17770] __vma_start_write+0xdc/0x290 [ 593.235803][T17770] mprotect_fixup+0x5ee/0xa80 [ 593.235823][T17770] setup_arg_pages+0x565/0xac0 [ 593.235840][T17770] load_elf_binary+0xc5e/0x2980 [ 593.235862][T17770] bprm_execve+0x93d/0x1460 [ 593.235879][T17770] kernel_execve+0x844/0x930 [ 593.235897][T17770] try_to_run_init_process+0x13/0x60 [ 593.244375][T25050] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 593.251230][T17770] kernel_init+0xad/0x1d0 [ 593.251267][T17770] ret_from_fork+0x51e/0xb90 [ 593.251289][T17770] ret_from_fork_asm+0x1a/0x30 [ 593.251315][T17770] [ 593.251315][T17770] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 593.251348][T17770] __might_fault+0xcb/0x130 [ 593.251366][T17770] _copy_from_iter+0x100/0x1670 [ 593.251394][T17770] tcp_sendmsg_locked+0x2151/0x5490 [ 593.258963][T25050] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 593.268742][T17770] tcp_sendmsg+0x2f/0x50 [ 593.268769][T17770] sock_write_iter+0x406/0x4f0 [ 593.268793][T17770] vfs_write+0x61d/0xb90 [ 593.268811][T17770] ksys_write+0x150/0x270 [ 593.268830][T17770] do_syscall_64+0x14d/0xf80 [ 593.268851][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.268869][T17770] [ 593.268869][T17770] -> #6 (sk_lock-AF_INET){+.+.}-{0:0} [ 593.281020][T25050] Memory cgroup stats for [ 593.288413][T17770] : [ 593.288425][T17770] lock_sock_nested+0x48/0x100 [ 593.288460][T17770] inet_shutdown+0x6a/0x390 [ 593.288482][T17770] nbd_mark_nsock_dead+0x2e9/0x560 [ 593.288502][T17770] recv_work+0x1c7f/0x1d90 [ 593.288522][T17770] process_scheduled_works+0xb6e/0x18c0 [ 593.288544][T17770] worker_thread+0xa53/0xfc0 [ 593.288566][T17770] kthread+0x388/0x470 [ 593.288581][T17770] ret_from_fork+0x51e/0xb90 [ 593.288613][T17770] ret_from_fork_asm+0x1a/0x30 [ 593.288639][T17770] [ 593.288639][T17770] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 593.863971][T17770] __mutex_lock+0x19f/0x1300 [ 593.869194][T17770] nbd_queue_rq+0x37b/0x1100 [ 593.874402][T17770] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 593.880484][T17770] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 593.887352][T17770] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 593.893958][T17770] blk_mq_run_hw_queue+0x348/0x4f0 [ 593.899597][T17770] blk_mq_dispatch_list+0xd16/0xe10 [ 593.905335][T17770] blk_mq_flush_plug_list+0x48d/0x570 [ 593.911240][T17770] __blk_flush_plug+0x3ed/0x4d0 [ 593.916706][T17770] __submit_bio+0x28d/0x580 [ 593.921736][T17770] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 593.928159][T17770] block_read_full_folio+0x599/0x830 [ 593.933983][T17770] filemap_read_folio+0x137/0x3b0 [ 593.939628][T17770] do_read_cache_folio+0x358/0x590 [ 593.945280][T17770] read_part_sector+0xb6/0x2b0 [ 593.950829][T17770] adfspart_check_ICS+0xa5/0xa40 [ 593.956293][T17770] bdev_disk_changed+0x7ba/0x1550 [ 593.961855][T17770] blkdev_get_whole+0x380/0x510 [ 593.967227][T17770] bdev_open+0x31e/0xd30 [ 593.972468][T17770] blkdev_open+0x470/0x610 [ 593.977537][T17770] do_dentry_open+0x785/0x14e0 [ 593.982858][T17770] vfs_open+0x3b/0x340 [ 593.987482][T17770] path_openat+0x2e08/0x3860 [ 593.992603][T17770] do_file_open+0x23e/0x4a0 [ 593.997722][T17770] do_sys_openat2+0x113/0x200 [ 594.002946][T17770] __x64_sys_openat+0x138/0x170 [ 594.008341][T17770] do_syscall_64+0x14d/0xf80 [ 594.013469][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.019887][T17770] [ 594.019887][T17770] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 594.027195][T17770] __mutex_lock+0x19f/0x1300 [ 594.032323][T17770] nbd_queue_rq+0xc6/0x1100 [ 594.037437][T17770] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 594.043507][T17770] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 594.050360][T17770] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 594.056864][T17770] blk_mq_run_hw_queue+0x348/0x4f0 [ 594.062502][T17770] blk_mq_dispatch_list+0xd16/0xe10 [ 594.068224][T17770] blk_mq_flush_plug_list+0x48d/0x570 [ 594.074116][T17770] __blk_flush_plug+0x3ed/0x4d0 [ 594.079495][T17770] __submit_bio+0x28d/0x580 [ 594.084528][T17770] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 594.090684][T17770] block_read_full_folio+0x599/0x830 [ 594.096499][T17770] filemap_read_folio+0x137/0x3b0 [ 594.102062][T17770] do_read_cache_folio+0x358/0x590 [ 594.107697][T17770] read_part_sector+0xb6/0x2b0 [ 594.112995][T17770] adfspart_check_ICS+0xa5/0xa40 [ 594.119246][T17770] bdev_disk_changed+0x7ba/0x1550 [ 594.124796][T17770] blkdev_get_whole+0x380/0x510 [ 594.130260][T17770] bdev_open+0x31e/0xd30 [ 594.135023][T17770] blkdev_open+0x470/0x610 [ 594.139965][T17770] do_dentry_open+0x785/0x14e0 [ 594.145259][T17770] vfs_open+0x3b/0x340 [ 594.149855][T17770] path_openat+0x2e08/0x3860 [ 594.154965][T17770] do_file_open+0x23e/0x4a0 [ 594.160018][T17770] do_sys_openat2+0x113/0x200 [ 594.165225][T17770] __x64_sys_openat+0x138/0x170 [ 594.170966][T17770] do_syscall_64+0x14d/0xf80 [ 594.176103][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.182546][T17770] [ 594.182546][T17770] -> #3 (set->srcu){.+.+}-{0:0}: [ 594.189768][T17770] __synchronize_srcu+0xca/0x300 [ 594.195340][T17770] elevator_switch+0x1e8/0x7a0 [ 594.200643][T17770] elevator_change+0x2cc/0x450 [ 594.205934][T17770] elevator_set_default+0x36c/0x430 [ 594.211697][T17770] blk_register_queue+0x366/0x430 [ 594.217451][T17770] __add_disk+0x677/0xd50 [ 594.222341][T17770] add_disk_fwnode+0xfb/0x480 [ 594.228003][T17770] nbd_dev_add+0x72c/0xb50 [ 594.232976][T17770] nbd_init+0x168/0x1f0 [ 594.237691][T17770] do_one_initcall+0x250/0x8d0 [ 594.243013][T17770] do_initcall_level+0x104/0x190 [ 594.248478][T17770] do_initcalls+0x59/0xa0 [ 594.253335][T17770] kernel_init_freeable+0x2a6/0x3e0 [ 594.259143][T17770] kernel_init+0x1d/0x1d0 [ 594.263998][T17770] ret_from_fork+0x51e/0xb90 [ 594.269125][T17770] ret_from_fork_asm+0x1a/0x30 [ 594.274420][T17770] [ 594.274420][T17770] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 594.282446][T17770] __mutex_lock+0x19f/0x1300 [ 594.287600][T17770] elevator_change+0x1b3/0x450 [ 594.293083][T17770] elevator_set_none+0xb5/0x140 [ 594.298482][T17770] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 594.304921][T17770] nbd_start_device+0x17f/0xb10 [ 594.310302][T17770] nbd_genl_connect+0x165b/0x1cf0 [ 594.315851][T17770] genl_family_rcv_msg_doit+0x22a/0x330 [ 594.321925][T17770] genl_rcv_msg+0x61c/0x7a0 [ 594.326971][T17770] netlink_rcv_skb+0x232/0x4b0 [ 594.332289][T17770] genl_rcv+0x28/0x40 [ 594.336805][T17770] netlink_unicast+0x80f/0x9b0 [ 594.342185][T17770] netlink_sendmsg+0x813/0xb40 [ 594.347469][T17770] ____sys_sendmsg+0x972/0x9f0 [ 594.352762][T17770] ___sys_sendmsg+0x2a5/0x360 [ 594.358062][T17770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 594.363529][T17770] do_syscall_64+0x14d/0xf80 [ 594.368824][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.375503][T17770] [ 594.375503][T17770] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 594.384123][T17770] blk_alloc_queue+0x546/0x680 [ 594.389473][T17770] __blk_mq_alloc_disk+0x197/0x390 [ 594.395119][T17770] nbd_dev_add+0x499/0xb50 [ 594.400066][T17770] nbd_init+0x168/0x1f0 [ 594.404846][T17770] do_one_initcall+0x250/0x8d0 [ 594.410144][T17770] do_initcall_level+0x104/0x190 [ 594.416307][T17770] do_initcalls+0x59/0xa0 [ 594.421360][T17770] kernel_init_freeable+0x2a6/0x3e0 [ 594.427106][T17770] kernel_init+0x1d/0x1d0 [ 594.431976][T17770] ret_from_fork+0x51e/0xb90 [ 594.437092][T17770] ret_from_fork_asm+0x1a/0x30 [ 594.442474][T17770] [ 594.442474][T17770] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 594.449868][T17770] __lock_acquire+0x15a5/0x2cf0 [ 594.455343][T17770] lock_acquire+0xf0/0x2e0 [ 594.460289][T17770] fs_reclaim_acquire+0x71/0x100 [ 594.465752][T17770] prepare_alloc_pages+0x152/0x650 [ 594.471505][T17770] __alloc_frozen_pages_noprof+0x12f/0x380 [ 594.477855][T17770] alloc_pages_mpol+0x232/0x4a0 [ 594.483283][T17770] alloc_pages_noprof+0xa8/0x190 [ 594.488747][T17770] folio_alloc_noprof+0x1e/0x30 [ 594.494212][T17770] filemap_alloc_folio_noprof+0x111/0x470 [ 594.500478][T17770] __filemap_get_folio_mpol+0x3fc/0xb00 [ 594.506554][T17770] filemap_fault+0x9ac/0x1320 [ 594.511768][T17770] __do_fault+0x138/0x390 [ 594.516626][T17770] do_pte_missing+0x228f/0x3490 [ 594.522006][T17770] handle_mm_fault+0x1bec/0x3310 [ 594.527932][T17770] do_user_addr_fault+0xa73/0x1340 [ 594.533574][T17770] exc_page_fault+0x6a/0xc0 [ 594.538702][T17770] asm_exc_page_fault+0x26/0x30 [ 594.544185][T17770] [ 594.544185][T17770] other info that might help us debug this: [ 594.544185][T17770] [ 594.554598][T17770] Chain exists of: [ 594.554598][T17770] fs_reclaim --> vm_lock --> mapping.invalidate_lock#2 [ 594.554598][T17770] [ 594.567481][T17770] Possible unsafe locking scenario: [ 594.567481][T17770] [ 594.574951][T17770] CPU0 CPU1 [ 594.580315][T17770] ---- ---- [ 594.585856][T17770] rlock(mapping.invalidate_lock#2); [ 594.591239][T17770] lock(vm_lock); [ 594.597553][T17770] lock(mapping.invalidate_lock#2); [ 594.605378][T17770] lock(fs_reclaim); [ 594.609473][T17770] [ 594.609473][T17770] *** DEADLOCK *** [ 594.609473][T17770] [ 594.618151][T17770] 1 lock held by syz-executor/17770: [ 594.623436][T17770] #0: ffff888054b298b0 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x97c/0x1320 [ 594.633990][T17770] [ 594.633990][T17770] stack backtrace: [ 594.639882][T17770] CPU: 0 UID: 0 PID: 17770 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 594.639903][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.639913][T17770] Call Trace: [ 594.639919][T17770] [ 594.639927][T17770] dump_stack_lvl+0xe8/0x150 [ 594.639952][T17770] print_circular_bug+0x2e1/0x300 [ 594.639978][T17770] check_noncircular+0x12e/0x150 [ 594.640004][T17770] __lock_acquire+0x15a5/0x2cf0 [ 594.640032][T17770] lock_acquire+0xf0/0x2e0 [ 594.640049][T17770] ? prepare_alloc_pages+0x152/0x650 [ 594.640072][T17770] fs_reclaim_acquire+0x71/0x100 [ 594.640089][T17770] ? prepare_alloc_pages+0x152/0x650 [ 594.640106][T17770] prepare_alloc_pages+0x152/0x650 [ 594.640127][T17770] __alloc_frozen_pages_noprof+0x12f/0x380 [ 594.640148][T17770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.640168][T17770] ? __pfx_policy_nodemask+0x10/0x10 [ 594.640192][T17770] alloc_pages_mpol+0x232/0x4a0 [ 594.640213][T17770] alloc_pages_noprof+0xa8/0x190 [ 594.640233][T17770] folio_alloc_noprof+0x1e/0x30 [ 594.640252][T17770] filemap_alloc_folio_noprof+0x111/0x470 [ 594.640270][T17770] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 594.640289][T17770] __filemap_get_folio_mpol+0x3fc/0xb00 [ 594.640315][T17770] filemap_fault+0x9ac/0x1320 [ 594.640336][T17770] ? __pfx_filemap_fault+0x10/0x10 [ 594.640354][T17770] ? __pfx_filemap_map_pages+0x10/0x10 [ 594.640376][T17770] __do_fault+0x138/0x390 [ 594.640394][T17770] do_pte_missing+0x228f/0x3490 [ 594.640411][T17770] ? do_pte_missing+0x130a/0x3490 [ 594.640430][T17770] ? handle_mm_fault+0xee/0x3310 [ 594.640454][T17770] handle_mm_fault+0x1bec/0x3310 [ 594.640481][T17770] ? handle_mm_fault+0xee/0x3310 [ 594.640506][T17770] ? __pfx_handle_mm_fault+0x10/0x10 [ 594.640528][T17770] ? lock_vma_under_rcu+0x45a/0x500 [ 594.640553][T17770] do_user_addr_fault+0xa73/0x1340 [ 594.640576][T17770] ? rcu_is_watching+0x15/0xb0 [ 594.640597][T17770] ? trace_page_fault_user+0x84/0x210 [ 594.640617][T17770] exc_page_fault+0x6a/0xc0 [ 594.640636][T17770] asm_exc_page_fault+0x26/0x30 [ 594.640652][T17770] RIP: 0033:0x7f221266a7b4 [ 594.640667][T17770] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 [ 594.640681][T17770] RSP: 002b:00007fff60d0e160 EFLAGS: 00010202 [ 594.640695][T17770] RAX: 0000001b32624000 RBX: 00000000000004cb RCX: 0000000000090c68 [ 594.640707][T17770] RDX: 0000000001c5833e RSI: 00007fff60d0e1f0 RDI: 0000000006c20377 [ 594.640717][T17770] RBP: 00007fff60d0e19c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 594.640728][T17770] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 594.640739][T17770] R13: 00000000000927c0 R14: 000000000009077a R15: 00007fff60d0e1f0 [ 594.640756][T17770] [ 594.917835][T25050] /syz4: [ 594.917958][T25050] cache 0 [ 594.925671][T25050] rss 0 [ 594.928610][T25050] rss_huge 0 [ 594.931826][T25050] shmem 0 [ 594.934938][T25050] mapped_file 0 [ 594.938444][T25050] dirty 0 [ 594.941398][T25050] writeback 0 [ 594.945041][T25050] workingset_refault_anon 12 [ 594.949767][T25050] workingset_refault_file 2 [ 594.955382][T25050] swap 184320 [ 594.958695][T25050] swapcached 225280 [ 594.962521][T25050] pgpgin 93480 [ 594.966027][T25050] pgpgout 93470 [ 594.969524][T25050] pgfault 178405 [ 594.973244][T25050] pgmajfault 6 [ 594.976642][T25050] inactive_anon 8192 [ 594.980643][T25050] active_anon 32768 [ 594.985211][T25050] inactive_file 0 [ 594.988963][T25050] active_file 0 [ 594.992542][T25050] unevictable 0 [ 595.004261][T25050] hierarchical_memory_limit 314572800 [ 595.010038][T25050] hierarchical_memsw_limit 9223372036854771712 [ 595.023811][T25050] total_cache 0 [ 595.039847][T25050] total_rss 0 [ 595.061237][T25161] netlink: 'syz.3.5246': attribute type 1 has an invalid length. [ 595.069213][T25161] netlink: 'syz.3.5246': attribute type 11 has an invalid length. [ 595.086869][T25050] total_rss_huge 0 [ 595.090685][T25050] total_shmem 0 [ 595.093034][T25161] __nla_validate_parse: 4 callbacks suppressed [ 595.093048][T25161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5246'. [ 595.109426][T25050] total_mapped_file 0 [ 595.109442][T25050] total_dirty 0 [ 595.109450][T25050] total_writeback 0 [ 595.109458][T25050] total_workingset_refault_anon 12 [ 595.109466][T25050] total_workingset_refault_file 2 [ 595.109475][T25050] total_swap 184320 [ 595.109482][T25050] total_swapcached 225280 [ 595.109491][T25050] total_pgpgin 93481 [ 595.109498][T25050] total_pgpgout 93471 [ 595.149401][T25050] total_pgfault 178412 [ 595.154136][T25050] total_pgmajfault 6 [ 595.158160][T25050] total_inactive_anon 8192 [ 595.162590][T25050] total_active_anon 32768 [ 595.167459][T25050] total_inactive_file 0 [ 595.171631][T25050] total_active_file 0 [ 595.175691][T25050] total_unevictable 0 [ 595.179775][T25050] anon_cost 0 [ 595.183355][T25050] file_cost 0 [ 595.186655][T25050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5212,pid=25050,uid=0 [ 595.201644][T25050] Memory cgroup out of memory: Killed process 25050 (syz.4.5212) total-vm:106656kB, anon-rss:1240kB, file-rss:27200kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 595.383078][ T48] net_ratelimit: 19 callbacks suppressed [ 595.383102][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 595.502758][T14058] bond1: (slave bridge4): failed to get link speed/duplex [ 595.612739][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 595.722830][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 595.832741][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 595.952926][T14059] bond1: (slave bridge4): failed to get link speed/duplex [ 596.093223][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 596.202842][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 596.312793][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 596.422817][ T48] bond1: (slave bridge4): failed to get link speed/duplex [ 600.462823][ T36] net_ratelimit: 39 callbacks suppressed [ 600.462847][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 600.583029][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 600.692818][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 600.802934][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 600.912918][ T323] bond1: (slave bridge4): failed to get link speed/duplex [ 601.022828][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 601.133317][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 601.242783][ T1030] bond1: (slave bridge4): failed to get link speed/duplex [ 601.352775][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 601.472864][ T36] bond1: (slave bridge4): failed to get link speed/duplex [ 602.084056][ T1030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)