last executing test programs: 9m41.958077471s ago: executing program 3 (id=1845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket(0x2, 0x3, 0xff) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x4000000, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 9m41.544837542s ago: executing program 3 (id=1851): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x620200, &(0x7f0000000040)={@align=0x8, {0x3ff, 0x3, 0x4, 0x81}}, 0xfff, &(0x7f0000000080), &(0x7f00000000c0)=0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x80000000}, @in6={0xa, 0x4e21, 0x7, @remote, 0xbb}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x25}, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x28a}], 0x70) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xc8, "3ea2961fc5b99b5183600934ebea3301ca193905f0f37ef5e9b17d1cc2b4a5c7500f51599bb1debd24a1f07436b9c42d8904de8e872bc7d199aaa751fe96dd7bc50eae8b7595164cf79ae51213416697620faad6e0297f5c1330098804e728017780f7b0bd15a979d2c32c88854a5b8caf88d979e4eb2d06b303cfe416b312014efc253efab60ce7833afcfa65f701cbcf99bfce96e53f879cda789c76761012973fd898c58eb6b665d6aab4f1956190c1dfd9701fd6bf7e4f0700989dfbea9e699b8edc688a58f0"}, &(0x7f0000000300)=0xd0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x238, 0x178, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@initdev={0xac, 0x1e, 0x6, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x89, 0x3, 0x24}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x7, 0x6, 0x2, 0x4, 0x6], 0x0, 0x1}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x81, 0x8001, 0xc2, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x16, 'x4', 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000006c0)=0x8, 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000700)={0x10, 0x14, 0x8, 0x7, 0x1677}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x1, 0x700, 0xfffffffc, 0xffff9583, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x66, 0x0, 0xb3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@end, @generic={0x89, 0x2}, @timestamp_prespec={0x44, 0x4c, 0xc8, 0x3, 0xa, [{@loopback, 0x800}, {@private=0xa010101, 0xd88}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@empty, 0x7}, {@loopback, 0x1000}, {@broadcast, 0x18000}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x401}]}, @end, @rr={0x7, 0xb, 0x54, [@loopback, @local]}, @timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x1, [{@multicast2}, {@broadcast, 0x7}, {@empty, 0x4}, {@broadcast, 0x10}, {@multicast1, 0x37}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3bf5997c}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000844) bind$alg(r0, &(0x7f00000009c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-serpent-avx2,sha512-ssse3)\x00'}, 0x58) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a40)={r1, 0x9}, &(0x7f0000000a80)=0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000ac0)={0x2000}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000b00)={r0}) r5 = epoll_create(0x6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000c40)={r0, &(0x7f0000000b40)='set\x00', 0x27a081, &(0x7f0000000b80)={@_ha_fsid={[0x3, 0x9]}, {0xfff, 0x9, 0x100, 0x581a7e9d}}, 0xfffffff9, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000c80)={r4, 0x3681}, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x20004010) r8 = accept4$inet6(r6, &(0x7f0000000e00), &(0x7f0000000e40)=0x1c, 0x0) sendmmsg$inet6(r8, &(0x7f0000001580)=[{{&(0x7f0000000e80)={0xa, 0x4e20, 0x4f24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2615}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000ec0)="42e79269d9d9b753f232e6c386fe28b1e6f84c7859b8f258ac8bfdc78c10be3402c45628e985ac4db59fdd0f9f73649d33a44164cd46b77b8225676cebfad7d6", 0x40}, {&(0x7f0000000f00)="cba9d90583128d75ff71184f9180989e05a7290c48b2fbe6341039ad7f3de5c76cb459018fe9e44e2e230a284e162e08a9b19542bac380efc5983663a45e0b958458e1eff0f59d7ff11bea618be1012893e49e4e1df61cb136830d925cbff0d17fbc34708bb32b94ed86db32fd0950387099c0b4354d1452", 0x78}, {&(0x7f0000000f80)="6e69d6f82dced4c818f7d599d0ad852ce7303add5dc282106fba0e51230a299d4457cc8c34c54479e2bf3eb5acd66d847d267e17d56b5c52cefcaa4ef8e65b8c4c13b7976d9d1c1caa5e65f8939bc06df064de30d60d1fea4407de9736af361646cf238a0a4011c4fe64ff750a1b8ab9d39270a548d6e2833e4b054b4b76e73cb85095fc4a9b5b71d65b47beecfc88e5797ec59d27d5aba6bc8dbb2f5d43480dee825665ffbf35514e95003b3eb5195fdf1545bc6d6f4afc6db8d156fcbc11d945781c8a7f7fd7d54c0c74b0debf154ca98eec1a0d030f5793c65eeef9f669e4c094ab63e463b73d65c7d0", 0xeb}, {&(0x7f0000001080)="8dadac4855c3a72c10b4109ba1f65dc8558d7f08983e470241ce24f46eea0fba42c58199a9aaea833c4bde085d", 0x2d}], 0x4, &(0x7f0000001100)=[@dstopts={{0x18, 0x29, 0x37, {0x2e}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x40}}, {{&(0x7f0000001140)={0xa, 0x4e21, 0x3ff00, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffffff81}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001180)="56dcf61ff01cbdc5d9d1d9a12765c0777912c1c783e750e495e171a5e538a9ce5124eba4ede99681d2e06c89e4f6e8d07be087cc6f31e5e7cfa533c8d66e2d49f8412fe6db0b1bcdaf392125bb66580601af62faaebfa1f2e34271", 0x5b}, {&(0x7f0000001200)="a2de597828aafa20fe02cbc6d893e2da9be557f5f6492258af669b307576791c5dee4dc58f51ce32db1cc9baec22abee64e6b7dc15daa554d4ed6a0fb875402c4a688b8dc48518c3b7cd8b663b2de92d1c2f5b861143f980f02581d37ddc9537a0e8f9988489e8755eafa8f1a66adfa43e2e43642c3cd4a6dd90", 0x7a}, {&(0x7f0000001280)="ad546ca67c51512966d427ae7106a2aaa72e7b105be28898c9432af2b5875afafd686ea8d1ed44dc9e3c6c1878acc6b0bf94971805301ef4eef48aed6b4b05b809dc05c282f98a817cd5d40b5b0e3325c971716d6e12cb06aae3a2966cef575d9207fccc542ccdae8477bd29cc425bf247806ddbca6614ec8d4bd39eb68e1c298503ec3c6525ebf46ad846f55129fa8840e15e84e2f01d768ca96f2b198d84996b04872372c8da33424f6da4254dd8e8c60c7567f84abe9beb988d1ed8a4ae336be848153a925e98a296d4b2183677fd3bcca52c099edddb59", 0xd9}, {&(0x7f0000001380)="6de7", 0x2}, {&(0x7f00000013c0)="72a69b8c7a58f3ca15507cac365b18f5f81fb720bfcfe490fe98541ec4f49b3556fab2423e9af8f39bc29fd3fac2986d59b7500a348fb7f1376da2dbffb34ef2fcf2233d6b9799336a3988ba0b15d903", 0x50}], 0x5, &(0x7f00000014c0)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x62, 0xc, 0x1, 0xf1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @empty, @empty, @local, @mcast1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}], 0x90}}], 0x2, 0x8d0) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}]}, 0x1c}}, 0x4000004) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), r6) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r9, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001880)={0x0, 0x9, 0x0, [0xe129, 0x8, 0x4, 0x8, 0x8ecd], [0x8, 0x1, 0x6840000000000, 0x100, 0x5, 0xff, 0x7, 0x100, 0x6, 0x5, 0x7fffffff, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff80000001, 0xc, 0x7fffffffffffffff, 0x3db, 0x7fff, 0x8, 0xffff, 0x80000001, 0x7, 0xffffffffffffffff, 0x9e26, 0x8000, 0x5, 0xffffffff, 0x7, 0x3, 0x9, 0x8, 0x80000001, 0x0, 0x3b99, 0x9, 0x9, 0x6, 0x2, 0x4, 0xff, 0x2, 0x1d00000000000000, 0x40, 0x418d, 0x0, 0x2, 0x8, 0x1, 0xfff, 0x0, 0x100, 0xb152, 0x64, 0x2, 0x7fff, 0x0, 0x9, 0x7, 0x4, 0x8001, 0xc6, 0x8000, 0x0, 0x9, 0x100000000000000, 0x10, 0x4, 0xa8da, 0x5, 0x401, 0x3, 0xb1, 0xd152, 0x9, 0x8, 0x80afc01, 0x6, 0x8, 0x6, 0x7, 0x9, 0xced, 0x0, 0x80000000, 0x1, 0x7ff, 0xf, 0x3, 0x1, 0x800, 0x8, 0xb1, 0xde9, 0x7, 0x8000, 0x0, 0x5, 0x9, 0x3, 0x80, 0x1, 0x6, 0x1, 0xd, 0x6, 0x6, 0x2, 0x3ff, 0x77, 0xe6, 0xf69, 0xc90, 0x736e, 0x0, 0x8, 0x0, 0x0, 0x40, 0x6]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001cc0)={r10, 0x9, 0x0, 0x1}) ioctl$sock_netdev_private(r8, 0x89f5, &(0x7f00000020c0)="0a744cb1b1b71eed4fafda5943c7d88599006a78d6fce55351bcc7508dafcd2a20c576d0e4dec676ef27d9749172bd5cd65d0c1c6105e2bf7edcc06a5131a09e38aab517400b8ff7babed8571dccd0f9856e692e34f4e075d0c1f4df09a54d2bcfc1bf2da38ac4647747c10370e32b089e") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000023c0)={0x0, @local, @initdev}, &(0x7f0000002400)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x28, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc48}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @generic={0x0, 0x3, 0x9, 0x0, 0x2}, @ldst={0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x56}, @jmp={0x5, 0x1, 0xa, 0x2, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002280)='GPL\x00', 0x7ff, 0xef, &(0x7f00000022c0)=""/239, 0x41000, 0x0, '\x00', r11, 0x25, r6, 0x8, &(0x7f0000002440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002480)={0x3, 0x5, 0x1, 0x40}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000024c0)=[r0, r6, r0], &(0x7f0000002500)=[{0x5, 0x1, 0x8, 0x6}, {0x2, 0x4, 0x6, 0x5}, {0x0, 0x4, 0x10, 0xb}, {0x5, 0x4, 0xa, 0x9}, {0x4, 0x2, 0xb, 0xa}, {0x4, 0x1, 0xc, 0xa}, {0x4, 0x5, 0x10}, {0x1, 0x2, 0x6, 0xc}], 0x10, 0x1ce0}, 0x94) 9m41.266383033s ago: executing program 3 (id=1854): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x7, 0x4) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0xe}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 9m40.934782967s ago: executing program 3 (id=1859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 9m40.848443738s ago: executing program 3 (id=1860): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 9m40.566162468s ago: executing program 3 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="f076b492046a4f75ac5688a065800712578e84d3ecce32bde921544c502673e94b5a138f77823eafa9aa204ac5e30a5c717fffa1eace2de7bd7b490cf9ae5e8baf9ef60e091bda56b5341883af", 0x4d}, {&(0x7f0000000080)="8a6ec0e1534b27eb39354c3ed0b38828ac0db8cf7679496e15dcc3a5361d17", 0x1f}, {&(0x7f00000000c0)="f42f5220f210a0cba8ab48521611a95e232964e4c10b68c824f7ceb9202fdc021323f259162279b580794313df3b03f150a6b9c180c4fa101cf75df6db3551ae641c85fa8897a6b722ec76b6f017d8a7c41ebb63bdd218d3df2d71bbe0cabb90ddd429d695a87ebca8b16e785e0c1265f2768daeb77625bce9ab4ca2bb2ea182445c03c6d71786b0104d91490bc606dd31f732bcf6a9689cfa14cb5321fb80140a957fa7fdd3306fa0b1e1bb61391235df8fe6ea51a6c26ab7a2e4c522ca5bb1ec82850d9ca3559a374e4f1d6bab72f8cf915ed317a859de99c6d273ea1af99ee319b1212482427dbe532da5a7", 0xed}, {&(0x7f00000001c0)="a533608ba18e80c98a98de330de21c4ac429bfd9d7a2ced6edaad348428ec59df7d0c053efaebcf319694a0816bc40960a2447fb51beb9cda8fea4440df9cb78fc8c3265a9a89f", 0x47}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="f076b492046a4f75ac5688a065800712578e84d3ecce32bde921544c502673e94b5a138f77823eafa9aa204ac5e30a5c717fffa1eace2de7bd7b490cf9ae5e8baf9ef60e091bda56b5341883af", 0x4d}, {&(0x7f0000000080)="8a6ec0e1534b27eb39354c3ed0b38828ac0db8cf7679496e15dcc3a5361d17", 0x1f}, {&(0x7f00000000c0)="f42f5220f210a0cba8ab48521611a95e232964e4c10b68c824f7ceb9202fdc021323f259162279b580794313df3b03f150a6b9c180c4fa101cf75df6db3551ae641c85fa8897a6b722ec76b6f017d8a7c41ebb63bdd218d3df2d71bbe0cabb90ddd429d695a87ebca8b16e785e0c1265f2768daeb77625bce9ab4ca2bb2ea182445c03c6d71786b0104d91490bc606dd31f732bcf6a9689cfa14cb5321fb80140a957fa7fdd3306fa0b1e1bb61391235df8fe6ea51a6c26ab7a2e4c522ca5bb1ec82850d9ca3559a374e4f1d6bab72f8cf915ed317a859de99c6d273ea1af99ee319b1212482427dbe532da5a7", 0xed}, {&(0x7f00000001c0)="a533608ba18e80c98a98de330de21c4ac429bfd9d7a2ced6edaad348428ec59df7d0c053efaebcf319694a0816bc40960a2447fb51beb9cda8fea4440df9cb78fc8c3265a9a89f", 0x47}], 0x4) (async) 9m25.471699196s ago: executing program 32 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="f076b492046a4f75ac5688a065800712578e84d3ecce32bde921544c502673e94b5a138f77823eafa9aa204ac5e30a5c717fffa1eace2de7bd7b490cf9ae5e8baf9ef60e091bda56b5341883af", 0x4d}, {&(0x7f0000000080)="8a6ec0e1534b27eb39354c3ed0b38828ac0db8cf7679496e15dcc3a5361d17", 0x1f}, {&(0x7f00000000c0)="f42f5220f210a0cba8ab48521611a95e232964e4c10b68c824f7ceb9202fdc021323f259162279b580794313df3b03f150a6b9c180c4fa101cf75df6db3551ae641c85fa8897a6b722ec76b6f017d8a7c41ebb63bdd218d3df2d71bbe0cabb90ddd429d695a87ebca8b16e785e0c1265f2768daeb77625bce9ab4ca2bb2ea182445c03c6d71786b0104d91490bc606dd31f732bcf6a9689cfa14cb5321fb80140a957fa7fdd3306fa0b1e1bb61391235df8fe6ea51a6c26ab7a2e4c522ca5bb1ec82850d9ca3559a374e4f1d6bab72f8cf915ed317a859de99c6d273ea1af99ee319b1212482427dbe532da5a7", 0xed}, {&(0x7f00000001c0)="a533608ba18e80c98a98de330de21c4ac429bfd9d7a2ced6edaad348428ec59df7d0c053efaebcf319694a0816bc40960a2447fb51beb9cda8fea4440df9cb78fc8c3265a9a89f", 0x47}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="f076b492046a4f75ac5688a065800712578e84d3ecce32bde921544c502673e94b5a138f77823eafa9aa204ac5e30a5c717fffa1eace2de7bd7b490cf9ae5e8baf9ef60e091bda56b5341883af", 0x4d}, {&(0x7f0000000080)="8a6ec0e1534b27eb39354c3ed0b38828ac0db8cf7679496e15dcc3a5361d17", 0x1f}, {&(0x7f00000000c0)="f42f5220f210a0cba8ab48521611a95e232964e4c10b68c824f7ceb9202fdc021323f259162279b580794313df3b03f150a6b9c180c4fa101cf75df6db3551ae641c85fa8897a6b722ec76b6f017d8a7c41ebb63bdd218d3df2d71bbe0cabb90ddd429d695a87ebca8b16e785e0c1265f2768daeb77625bce9ab4ca2bb2ea182445c03c6d71786b0104d91490bc606dd31f732bcf6a9689cfa14cb5321fb80140a957fa7fdd3306fa0b1e1bb61391235df8fe6ea51a6c26ab7a2e4c522ca5bb1ec82850d9ca3559a374e4f1d6bab72f8cf915ed317a859de99c6d273ea1af99ee319b1212482427dbe532da5a7", 0xed}, {&(0x7f00000001c0)="a533608ba18e80c98a98de330de21c4ac429bfd9d7a2ced6edaad348428ec59df7d0c053efaebcf319694a0816bc40960a2447fb51beb9cda8fea4440df9cb78fc8c3265a9a89f", 0x47}], 0x4) (async) 5.9847857s ago: executing program 5 (id=7886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000040000002b011003e80004000401"], 0x28}, 0x4004004) (async) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffd}, &(0x7f0000000080)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xfffffffa}, 0x8) 5.830569389s ago: executing program 1 (id=7888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) 5.626382791s ago: executing program 1 (id=7890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x100000000000000, 0x0, 0x0, 0x98ce}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xffffbffffffffffe, 0x9, 0x0, 0x0, 0x100000007fffffff}, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000015c0)=""/128, 0x80}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b0102000000000000000003000001080002400000000208000340000001000f0001007368"], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) 4.980892764s ago: executing program 5 (id=7896): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) (async) close(r3) (async) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r1}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9000480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x140e, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004084) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000efb200030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c00028005000d0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.940327494s ago: executing program 0 (id=7897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x23, 0x6, 0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}], 0x2}, 0x20048b88) poll(&(0x7f0000000600)=[{r3, 0x8}, {r4, 0x21da}], 0x2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = accept4$alg(r3, 0x0, 0x0, 0x400) sendmmsg$alg(r6, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="d6659f60baae2ecb97f488e39f4e29c881645bb8dba994fdadc1e53094df21697c7ece832216738ff030575876ce86da4d6478b2b352e56d9443c93b3a52c5012510315da6de0075f54b31b94ac2d5a10a5fe401a933441708327a0f64b9c6ffa75860f4f1af6af991d5a3d0010c9975baab8a4877c2fea53ad0b065f91802bfdfb238634578a766364da35ddd6a", 0x8e}, {&(0x7f0000000a00)="94a140a7d333dd7838ab140bd72773024669e497b77e9f46f3b5ce33dcadf522114f1993d22985fa11c8002dcfef43a9babc66f4deb6107b11f3d32fb349aa8d1a7c718e54279db577fb2587a58f3261e1677fcd67de43a80864bf83921a5dc9261639acedb8921de5564cbe629318be1df0c52b69f3496fe12a78c85b24fdf5b783541470b27b", 0x87}], 0x2, &(0x7f0000000b00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x38, 0x117, 0x2, 0x1e, "7c3bda140e4db1295b9592f29f7b1e4200e86403687345f79750295269f3"}, @iv={0xd8, 0x117, 0x2, 0xc2, "c196ebcd466c05268b7b5172ebdff0a35a0e15576636b2fdbb56c6e9791061836093b6a5529445941638f5515178c3c5af5b63a8317192fb6a173e4e8a70f671564a6454389a4d67d38fb8070851757440210640b7a31ef32ab778e2412c98b0aaa424d187a12b23d8c25b693bc783a9771c3f010d07e2147baa99f8a72fcceca9f23a3f87c00c3055db6681b9e28e13e7b812eb081d520718587ad893992e5ee2fbf8886b344f9289f460dfe3af291d39ee6714e0019aa25ccd1b89dbc81a935dac"}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xb}, @assoc={0x18, 0x117, 0x4, 0x80000001}], 0x188, 0x1}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="8e8d5d470faab230dfb8e2c136570d8b4aef7edb6bd75569aeafa40f92c8fd002072c422905396aaf4474a265a9207659102e6ce3ed4436ac5ec3600a0b676e52b3dae64802eb7175973326f7e77be2269912896c7bc11c462995b0bc4e169f31d07d1312e0bbff7731ccb9034f804393a9184b71939bf5d99313597087e47c1a6fa6cc81558ad7ed72b60ab275935ca2bb909dd", 0x94}], 0x1, &(0x7f0000000e40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30, 0x8001}, {0x0, 0x0, &(0x7f0000000e80)}], 0x3, 0x8000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6}, 0x94) 4.7206565s ago: executing program 5 (id=7899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async, rerun: 32) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x20, 0x67, 0x0, @dev, @local, {[@fragment={0x67}, @hopopts={0x0, 0x1, '\x00', [@generic={0x0, 0xc, "0ce3c4989ea1a39290312280"}]}]}}}}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async, rerun: 32) r9 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r9, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) 4.70475615s ago: executing program 2 (id=7900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 4.525893996s ago: executing program 2 (id=7901): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair(0x10, 0x80000, 0x54, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x840) (rerun: 32) 4.439700495s ago: executing program 0 (id=7903): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x100, 0x5, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x100, 0x5, 0x6}) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r4}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x9a2, 0x8, 0x8, 0x8, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r8}, 0x14) accept4$tipc(r0, 0x0, &(0x7f0000000400), 0x80000) (async) accept4$tipc(r0, 0x0, &(0x7f0000000400), 0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r10}, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES64=r3], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 4.358883205s ago: executing program 2 (id=7904): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) 3.508641217s ago: executing program 4 (id=7905): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x126, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x5, 0x2, 0x64, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x3fe, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000004300000c0000000c0000000200000000000000000000090300000000000e2b86b47ce71db4d69433f73da1a6145abbe658"], 0x0, 0x26}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000300)={0x5, 0x40, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)}, 0x4048014) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) 1.035242844s ago: executing program 2 (id=7906): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x12, r5, 0x1f}, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x2f, 0x5, 0x1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x8, 0x4, 0x7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) listen(r2, 0x9833) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000610300000000000000dbdf2502000000000000000800010001000000"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x12, r5, 0x1f}, 0x10) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x2f, 0x5, 0x1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x8, 0x4, 0x7}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) listen(r2, 0x9833) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000610300000000000000dbdf2502000000000000000800010001000000"], 0x20}}, 0x0) (async) 1.024762089s ago: executing program 0 (id=7907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x400c805}, 0x40804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="2d6d656d6f72792067a0db3f5e0805a8c277816ca5aa846cf7696c64388c392cc68271dff243b820b755084446d42f09bc51fba1760884997d2ce1c3f102c156f6f1747421a7f5132dacf55b364aad099832a0cb5077a5f439fd35852f5f9a20019379d407edf46dfe"], 0x8) r12 = socket$kcm(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f0000000300)={r11, &(0x7f0000000200)='[\x00', 0x400, 0x0, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x5}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) sendmsg$sock(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x58, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) sendto$packet(r2, &(0x7f0000000080)="50aa", 0x2, 0xd840, &(0x7f00000000c0)={0x11, 0x8, r10, 0x1, 0x2c, 0x6, @local}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)=ANY=[@ANYBLOB="00d4a6b4", @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'veth0\x00'}) socket(0x10, 0x3, 0x0) 953.908801ms ago: executing program 5 (id=7908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x800, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 949.179963ms ago: executing program 4 (id=7909): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000c, 0x2010, 0xffffffffffffffff, 0x0) 943.722681ms ago: executing program 1 (id=7910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYRES64=r1, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="26947325ae6a8f46f8cb9c9ce3ef449dae19d7b2e044361546af7ddd965d57663ec0bd72c3b4f0f8cbe46e20c2af1fab3b54d261ca8729369760ec77b409ba46b4473ca1264e6cb0ba6a17dd4fa1a4f310821b69bab1d93eb7c079b48aaa89aeec8e241e66909a4ce603fa6b89082b49011ff5", @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x2404c884) 750.314789ms ago: executing program 4 (id=7911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x44044) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) 672.800262ms ago: executing program 5 (id=7912): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) (async) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) (async) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 640.315144ms ago: executing program 2 (id=7913): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000080)={'bridge0\x00', @ifru_ivalue}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmmsg$alg(r3, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x7c}}, 0x0) 626.238948ms ago: executing program 1 (id=7914): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='&+[#/\x00', 0x14000, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x6]}, {0xffff, 0x9851, 0x2, 0x9}}, 0x3ff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x158000}) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4094800) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b666d48bf7fab9662402beb921d3b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 529.044638ms ago: executing program 4 (id=7915): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xb, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{}, {0x0, 0x2, [@TCA_CAKE_OVERHEAD={0x0, 0x6, 0xffffffffffffffec}, @TCA_CAKE_WASH, @TCA_CAKE_FLOW_MODE={0x0, 0x5, 0x5}, @TCA_CAKE_BASE_RATE64={0x0, 0x2, 0x87}]}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x24}, 0x94) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) (async) unshare(0x22020600) (async) write$nci(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffb, 0x9, @empty, 0x2}, 0x80, 0x0}, 0xe07e872424dbe7ca) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r11) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0900000000000000000002000000140001"], 0x28}}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f00000001c0)={0x1}) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) (async) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611553000000000081138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff500ebed507070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3ffffff7f1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308693020000007c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e000000000000000000005154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 528.338944ms ago: executing program 0 (id=7916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0e3f45dc000000000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (rerun: 64) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r10, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x284, r13, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffe}, {0x8, 0x15, 0x200000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2316}, {0x8, 0x15, 0x32541800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1c0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0xc}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff8ea9}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xbf}, {0x6, 0x11, 0x401}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x214}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x10001}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) (async) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r11) 436.061834ms ago: executing program 5 (id=7917): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf251c00000008000300", @ANYRES32=r7, @ANYBLOB="0c00062001e3529fdac900000002290000"], 0x28}, 0x1, 0x0, 0x0, 0x41000}, 0x4) 390.983141ms ago: executing program 1 (id=7918): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe2, "a18f87d1c6b3c962aab9494bfaccd3cb4dfc36f6c7979d903248c8218665a72538daf4e6d980b51f095d1ae4ed7c9da3863a480279f666b3a3933d169ff01c9c5badf867ded0f11630e33f012962c21cc7f4f2077b53878d66b39c08a95d6ffe096602530fdf55e133e8198c1f92d61664508a4e6ba8dc86cc8e26ef0f87d7edf8e706a4659f2460f427b81b9eaaa19d06bb5fb027d039786368b976c0ab958a1159d3d2fd30a2a45ed76e9e28bbfe679e440d41c243f3cdb1225e9bb956c5a3c88fce521f77d13b5a383d747539ae87bd950476549ae146c3e4c343592ff6e34a67"}, &(0x7f00000001c0)=0xea) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x9, 0x1000, 0x7fffffff}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1e, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @alu={0x7, 0x0, 0x6, 0x6, 0x5, 0xffffffffffffffe0, 0x84eb2960c7142d3c}, @generic={0x3c, 0x6, 0xe, 0x1, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x4, 0xe3, &(0x7f0000000500)=""/227, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000600)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x10, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[r0, r2, r0, r0, r0, r3, 0x1, r0], &(0x7f0000000800)=[{0x1, 0x4, 0x10, 0xd}, {0x1, 0x4, 0x2, 0xa}, {0x3, 0x3, 0x8, 0xc}, {0x5, 0x5, 0x7, 0x8}, {0x4, 0x2, 0xf, 0x8}, {0x5, 0x3, 0x9, 0x9}, {0x2, 0x4, 0x7, 0x4}, {0x5, 0x1000, 0xb, 0x4}], 0x10, 0x3}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e20, 0x1ff, @loopback, 0x9}}, 0x5866, 0x5fc, 0x9cfe, 0x3, 0x4, 0x8}, &(0x7f0000000940)=0x9c) 193.452659ms ago: executing program 0 (id=7919): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0xccde, 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) listen(0xffffffffffffffff, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a", 0x5}], 0x1}, 0xc044) 193.246036ms ago: executing program 1 (id=7920): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x28, 0x2d, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='[\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) 193.056462ms ago: executing program 4 (id=7921): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffffc2, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 165.917233ms ago: executing program 2 (id=7922): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0xd88, 0x9, 0x1}, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180)={r4, r5/1000+60000}, 0x10) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000001c0)=0x7, 0x4) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) (rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={r3, 0x7}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={r3, 0x7fffffff}, &(0x7f0000000340)=0x8) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) (rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f00000003c0)) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x1b43, 0x8001, 0x7, 0x7, 0x8000000000000001, 0x100000000}, {0x1, 0x2, 0x7, 0x1ff, 0x9, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000600)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000640)={r2}) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x9f2, 0x40, 0x7fffffff, 0x2, 0x0, 0x0, 0x5}, 0x9c) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r9) (async) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000c80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f00000007c0)={0x448, 0x3f3, 0x2, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0xe, [0x3, 0x5, 0x5, 0x7, 0x3, 0x9, 0x4, 0xe1, 0xd4, 0x8000, 0x200, 0x4, 0x7, 0x3b70dae4, 0x8001, 0x3, 0x6, 0x4, 0x10, 0xf23, 0x5, 0x7f, 0x3, 0x0, 0x9, 0x8, 0x2e6, 0xdd9, 0x2, 0x8, 0x1, 0x38b9960, 0x4, 0x101, 0x3, 0x9, 0x1, 0xb89f, 0x5, 0x0, 0x4, 0x39de, 0xa1, 0x4, 0x4, 0x7, 0xe, 0x400, 0x4, 0x1, 0xf, 0x5, 0x5e7d, 0x3, 0x2, 0x0, 0x4, 0xb2, 0x0, 0x6, 0x8, 0xa4a, 0x36ddfbc9, 0xffff], [0x7, 0x2, 0x8000, 0x4, 0xd, 0x101, 0x9, 0x100, 0x2, 0x1000, 0x800, 0x7ff, 0xe1, 0x4, 0x8, 0x6, 0x5, 0x2, 0xffffff80, 0x8, 0x5, 0x4, 0x0, 0x8, 0x1, 0x6, 0x8, 0x3084, 0x5, 0x2, 0x1, 0x2, 0x7fffffff, 0x2, 0x6c62, 0x1, 0xfe, 0x65, 0x10, 0x1, 0x14f, 0x1c700815, 0x6, 0xef47, 0x3, 0xffffffba, 0xa, 0x3, 0x2, 0x48, 0xc7, 0xfb6f, 0x3ff, 0x2800000, 0x3, 0x0, 0xe5, 0x7, 0x5, 0x9, 0x0, 0xab8c, 0xa9aa, 0x7], [0x5, 0x52eea8cd, 0x58ed6bde, 0x80000000, 0x9, 0x101, 0x1, 0xe, 0x80, 0xf, 0x6, 0x1, 0x5, 0x5, 0x9, 0x2626, 0x4, 0x6, 0x2, 0x9, 0x1, 0x3ff, 0x7, 0x4, 0x9, 0x8, 0x22, 0x6, 0xfffffffe, 0x4, 0x608a, 0xa29, 0x7, 0x7, 0x6, 0x7, 0x3, 0xe336, 0x5, 0x0, 0xe81, 0x8ba2, 0xa, 0x3, 0x4, 0x80000000, 0x9, 0xfb18, 0x7, 0x9, 0x7, 0x9df6, 0x6405, 0x3, 0x8000, 0x80, 0x6, 0xfffffbff, 0x3, 0xb, 0x9e, 0x5c26, 0x3d, 0x8], [0x8, 0x4, 0x8, 0x8, 0x0, 0x0, 0x3, 0x81, 0xf, 0x6, 0x300, 0x6, 0x5, 0x0, 0x7, 0x8001, 0x800, 0x80000001, 0x305, 0x23187986, 0xc2, 0x3, 0x9, 0x4, 0x8d42, 0xfff, 0x7fffffff, 0x2, 0x8001, 0x5, 0x6, 0x4, 0x16b, 0x80000000, 0x81, 0x2, 0xe, 0x7f, 0x7fffffff, 0x4, 0xac3, 0xe5, 0xd, 0x3, 0x4, 0x9, 0xf610, 0x5, 0x401, 0x3d2, 0x8b754ab, 0xdb2, 0x5, 0x3, 0x3, 0x5, 0x6, 0x7fffffff, 0x800, 0xf1, 0x3, 0x80, 0x2, 0x6], 0x25, [',\xe1:-\x00', '\'\x00', '\x00', '\x00', '${$]\x00', 'devices.list\x00', 'gtp\x00', '\x00', '(&}\'\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000dc0)=0xe8) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000e00)="b5ecbcc2bd3e9e3c3e26e1a2bed80cc14a4412a64d0f04bac0f8e78989676d09a61112c772a9e240ef1b89242735e0dad5d3b6dd07219601746de64e295687df8c8ecb8ba6b817e9da76be77a3cecb69efd2d8e06a8d5d5ed3f496788a9c435953d5ba8b7610646b39a505ce00411a47debe750de7803b48ad1269af62a0bafe693c317a86862fcc9f9da03cd67e6184179af382736a27f71ed8f32ea8fad94bbc21d5a7217f8e804294f9c3ec635847e0c5709ce0f3639224be29f1a5a1b67f5a5a4f0a7bd6ba82109054aac5b6603c", 0xd0, 0x10, &(0x7f0000000f00)={0xa, 0x4e24, 0xa, @mcast2, 0x5}, 0x1c) (async, rerun: 32) sendto$inet6(r10, &(0x7f0000000f40)="4ae4bd55a65858ab1bed5103220e054d25cf6d866b2742c6439fe9876773da5c", 0x20, 0x44, &(0x7f0000000f80)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000fc0)={r10}) (async) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000001000)=0xfffffc00, 0x4) (async, rerun: 64) socket(0x18, 0x6, 0x7fffffff) (async, rerun: 64) nanosleep(&(0x7f0000001040)={0x77359400}, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001080)={r7, 0x3}, &(0x7f00000010c0)=0xc) (rerun: 32) 1.633025ms ago: executing program 4 (id=7923): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 0 (id=7924): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000480)) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000140)) (async) sendfile(r4, r1, 0x0, 0xf03a0005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500400061000000950b000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r1}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c0001007061796c6f6164001c000280e500044000000000080003400000000008000240000000040900010073797a30000000000900020073797a3200000000140000001100010000fcffffffffffffff00000a"], 0x84}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x203, 0xd83, 0x1000}, 0x10) (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xa0000000, 0xc42, 0x3, 0x7, 0x5, 0x4]}, &(0x7f0000000080)=0x78) (async) sendto$inet6(r0, &(0x7f0000000280)='0', 0x1, 0x4000050, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) kernel console output (not intermixed with test programs): g attributes in process `syz.1.6105'. [ 609.437767][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 609.571880][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 609.627821][T28232] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6107'. [ 609.779975][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 609.991254][T28250] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6111'. [ 610.001910][T28251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6113'. [ 611.042503][T28286] syzkaller1: entered promiscuous mode [ 611.063208][T28286] syzkaller1: entered allmulticast mode [ 611.084929][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.102032][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.112375][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.123376][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.139552][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.142747][T28287] wg0 speed is unknown, defaulting to 1000 [ 612.370722][T28334] netlink: 'syz.1.6132': attribute type 1 has an invalid length. [ 612.599554][T28346] geneve3: entered promiscuous mode [ 612.607020][T28346] geneve3: entered allmulticast mode [ 612.637663][T22960] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 612.661983][T22960] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 612.704804][T22960] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 613.227671][T28287] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.240785][T28287] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.250044][ T5618] Bluetooth: hci3: command tx timeout [ 613.261216][T28287] bridge_slave_0: entered allmulticast mode [ 613.272211][T28287] bridge_slave_0: entered promiscuous mode [ 613.285827][T28287] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.293910][T28287] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.302537][T28287] bridge_slave_1: entered allmulticast mode [ 613.313325][T28287] bridge_slave_1: entered promiscuous mode [ 613.388483][T28287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.407824][T28287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.496347][T28287] team0: Port device team_slave_0 added [ 613.521477][T28287] team0: Port device team_slave_1 added [ 613.666164][T28287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.705734][T28287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.762883][T28287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.775239][T22967] net_ratelimit: 23 callbacks suppressed [ 613.775255][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 613.822230][T28287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.838110][T28287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.888596][T28287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.028788][T28408] __nla_validate_parse: 5 callbacks suppressed [ 614.028805][T28408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6151'. [ 614.055282][T28394] macvlan0: entered promiscuous mode [ 614.101186][T28287] hsr_slave_0: entered promiscuous mode [ 614.129695][T28287] hsr_slave_1: entered promiscuous mode [ 614.136960][T28412] netlink: 'syz.0.6152': attribute type 1 has an invalid length. [ 614.147202][T28287] debugfs: 'hsr0' already exists in 'hsr' [ 614.163870][T28287] Cannot create hsr debugfs directory [ 614.181371][T28399] syzkaller1: entered promiscuous mode [ 614.187637][T28399] syzkaller1: entered allmulticast mode [ 614.336964][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 614.452470][T28424] netlink: 'syz.0.6154': attribute type 8 has an invalid length. [ 614.634798][T28424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.714382][T28424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6154'. [ 614.796904][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 615.122794][T28287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.136481][T28287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.327376][ T5618] Bluetooth: hci3: command tx timeout [ 615.509222][T28287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.530112][T28470] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6167'. [ 615.541032][T28287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.576160][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 615.706889][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 615.710665][T28477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6170'. [ 615.767836][T28287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.778931][T28287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.836856][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 615.966035][T28489] x_tables: duplicate underflow at hook 2 [ 616.005813][T28495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6176'. [ 616.014928][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 616.151961][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 616.196235][T28505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6178'. [ 616.240877][T28513] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 616.285588][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 616.356179][T28517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6180'. [ 616.420783][T28519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6181'. [ 617.405839][ T5618] Bluetooth: hci3: command tx timeout [ 618.692783][T28474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.779398][T28287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 618.812996][T28287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.842248][T28287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 618.940542][T28533] net_ratelimit: 24 callbacks suppressed [ 618.940560][T28533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.961875][T28287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.979659][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6187'. [ 618.990337][T28537] netlink: 'syz.0.6184': attribute type 1 has an invalid length. [ 619.001039][T28287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.033857][T28287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.101801][T28537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.112571][T28287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 619.150306][T28287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.167198][T28547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6188'. [ 619.222223][T28547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.303241][T28551] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 619.382358][T28564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6191'. [ 619.485966][ T5618] Bluetooth: hci3: command tx timeout [ 619.576662][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 619.701867][T28287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.740572][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 619.808684][T28572] bond2: option mode: invalid value (10) [ 619.823990][T28572] bond2 (unregistering): Released all slaves [ 619.876464][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 620.022490][T28578] netlink: 'syz.0.6193': attribute type 2 has an invalid length. [ 620.084033][T28287] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.132078][T22965] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.139320][T22965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.166493][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 620.201491][T22962] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.209499][T22962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.438042][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 620.509456][T28593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6196'. [ 620.579589][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 620.635041][ T24] IPVS: starting estimator thread 0... [ 620.693863][T28599] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6198'. [ 620.726786][T28600] IPVS: using max 33 ests per chain, 79200 per kthread [ 620.766342][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6199'. [ 620.846685][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 621.092349][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 621.278097][T28629] netlink: 'syz.0.6205': attribute type 2 has an invalid length. [ 621.553883][T28634] IPVS: persistence engine module ip_vs_pe_À not found [ 621.802384][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6212'. [ 621.828384][T28654] netlink: 'syz.5.6212': attribute type 10 has an invalid length. [ 621.859485][T28287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.873369][T28654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6212'. [ 621.990184][T28287] veth0_vlan: entered promiscuous mode [ 622.009226][T28287] veth1_vlan: entered promiscuous mode [ 622.241912][T28671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6217'. [ 623.134712][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f011c00: rx timeout, send abort [ 623.157803][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f011c00: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 623.173140][ C1] vcan0: j1939_tp_rxtimer: 0xffff888089dec000: rx timeout, send abort [ 623.681959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888089dec000: abort rx timeout. Force session deactivation [ 625.006036][T22962] net_ratelimit: 8 callbacks suppressed [ 625.006066][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 625.096280][T28287] veth0_macvtap: entered promiscuous mode [ 625.144832][T28287] veth1_macvtap: entered promiscuous mode [ 625.268064][T28695] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6224'. [ 625.279289][T28698] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6225'. [ 625.652008][T28287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.699005][T28704] gretap0: entered promiscuous mode [ 625.718685][T28704] vlan2: entered promiscuous mode [ 625.790857][T28287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.817855][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 625.899148][T22967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.960454][T22963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.996609][T22963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.059653][T22962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.496711][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 626.620869][T22953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.631453][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 626.667566][T22953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.831548][T28746] netlink: 'syz.0.6236': attribute type 1 has an invalid length. [ 626.840190][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 626.847833][T22963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.867074][T22963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.951686][T28746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.054257][T28751] vlan5: entered promiscuous mode [ 627.068908][T28751] bond2: entered promiscuous mode [ 627.082271][T28751] vlan5: entered allmulticast mode [ 627.105034][T28751] bond2: entered allmulticast mode [ 627.137284][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 627.268570][T28746] bond2: (slave bridge2): making interface the new active one [ 627.300665][T28746] bridge2: entered promiscuous mode [ 627.312627][T28746] bridge2: entered allmulticast mode [ 627.333756][T28746] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 627.383975][T28761] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.401330][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6122'. [ 627.452748][T28765] netlink: 'syz.2.6122': attribute type 3 has an invalid length. [ 627.511113][T28765] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6122'. [ 627.556473][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 627.699050][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 627.722254][T28778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6244'. [ 627.731748][T28780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6245'. [ 627.744417][T28778] netlink: 'syz.2.6244': attribute type 30 has an invalid length. [ 627.766680][T28780] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6245'. [ 627.783606][T28780] nbd: illegal input index 16908260 [ 627.808462][T22963] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.836163][T22963] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.863462][T22963] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.891393][T22963] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.931071][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 628.051404][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 628.192889][T28805] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6252'. [ 628.262980][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 628.312102][T28809] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6253'. [ 628.317927][T28808] IPv6: sit1: Disabled Multicast RS [ 628.445036][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 628.462951][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 628.474570][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.489744][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.499038][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 628.800401][T28818] vlan2: entered allmulticast mode [ 629.197043][T28830] netlink: 'syz.5.6258': attribute type 3 has an invalid length. [ 629.230066][T17133] syz_tun (unregistering): left allmulticast mode [ 629.242584][T17133] syz_tun (unregistering): left promiscuous mode [ 629.260505][T17133] bridge0: port 3(syz_tun) entered disabled state [ 629.982767][T28810] wg0 speed is unknown, defaulting to 1000 [ 630.116228][T28878] net_ratelimit: 11 callbacks suppressed [ 630.116245][T28878] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 630.406005][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 630.545398][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 630.607994][ T5618] Bluetooth: hci2: command tx timeout [ 630.673583][T28891] __nla_validate_parse: 130 callbacks suppressed [ 630.673605][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 630.696406][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'. [ 630.723699][T28895] netlink: 'syz.1.6275': attribute type 29 has an invalid length. [ 630.746496][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'. [ 630.770154][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'. [ 630.791424][T28895] netlink: 'syz.1.6275': attribute type 29 has an invalid length. [ 630.820215][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'. [ 630.841808][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 630.873451][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 630.978506][T28891] team0: Port device team_slave_1 removed [ 631.146529][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 631.189051][T28810] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.199436][T28810] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.226309][T28810] bridge_slave_0: entered allmulticast mode [ 631.237446][T28810] bridge_slave_0: entered promiscuous mode [ 631.249139][T28810] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.257658][T28810] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.266920][T28810] bridge_slave_1: entered allmulticast mode [ 631.288894][T28810] bridge_slave_1: entered promiscuous mode [ 631.392895][T28927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 631.459792][T28810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.521360][T28810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.680808][T28945] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6284'. [ 631.760243][T28810] team0: Port device team_slave_0 added [ 631.770037][T28810] team0: Port device team_slave_1 added [ 631.833448][T28950] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 631.937673][T28810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.967743][T28810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.050781][T28810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.053385][T28958] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20000 [ 632.073563][T28810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.082025][T28810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.161381][T28810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.330639][T28810] hsr_slave_0: entered promiscuous mode [ 632.350321][T28810] hsr_slave_1: entered promiscuous mode [ 632.386893][T28810] debugfs: 'hsr0' already exists in 'hsr' [ 632.405672][T28810] Cannot create hsr debugfs directory [ 632.459834][T28974] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 632.478230][T28976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6296'. [ 632.494624][T28978] openvswitch: netlink: ct_state flags ffffffff unsupported [ 632.504434][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 632.515079][T28977] netlink: 'syz.1.6296': attribute type 9 has an invalid length. [ 632.689324][ T5618] Bluetooth: hci2: command tx timeout [ 632.814599][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6299'. [ 633.386690][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 633.992515][T28810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.010053][T28810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.021200][T28810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 634.105641][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 634.241470][T28810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.305429][T28810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.349355][T28810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 634.451182][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 634.487727][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 634.510104][T29057] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 634.640321][T28810] : (slave netdevsim1): Releasing backup interface [ 634.666618][T28810] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 634.684792][T28810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.699493][T28810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.711996][T28810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 634.714369][T29073] netlink: 'syz.0.6318': attribute type 1 has an invalid length. [ 634.766764][ T5618] Bluetooth: hci2: command tx timeout [ 634.776710][T29065] bridge1: entered promiscuous mode [ 634.783000][T29065] bridge1: entered allmulticast mode [ 634.790631][ T5274] veth1_vlan: left promiscuous mode [ 635.134144][T29088] netlink: 'syz.5.6322': attribute type 2 has an invalid length. [ 635.194445][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 635.251170][T29091] netlink: 'syz.1.6324': attribute type 14 has an invalid length. [ 635.337701][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 635.485985][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 635.895779][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.025306][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.157021][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.286515][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.369605][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 636.378992][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 636.425430][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.473399][T29122] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 636.486467][T29122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.555548][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 636.574584][T29124] netlink: 'syz.0.6329': attribute type 15 has an invalid length. [ 636.589228][T29124] __nla_validate_parse: 10 callbacks suppressed [ 636.589246][T29124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6329'. [ 636.827393][T29137] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 636.845561][ T5619] Bluetooth: hci2: command tx timeout [ 636.903942][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6335'. [ 638.511954][T29101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.552138][T28810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.618211][T28810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.639583][T28810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.689505][T28810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.713610][T28810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.744831][T28810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.781093][T28810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.793204][T29150] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6337'. [ 638.812040][T28810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.881143][T29150] bond2 (unregistering): Released all slaves [ 638.930154][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 639.306532][T28810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.370327][T28810] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.394349][T22960] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.401590][T22960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.405056][T29185] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6348'. [ 639.467890][T29185] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6348'. [ 639.501907][T22960] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.509179][T22960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.606829][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6350'. [ 639.637329][T29190] netlink: 'syz.5.6350': attribute type 12 has an invalid length. [ 639.757985][T29200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6352'. [ 640.223561][T22960] net_ratelimit: 28 callbacks suppressed [ 640.223580][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.256407][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.376868][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.496343][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.550628][T29222] team0: Device gtp0 is of different type [ 640.608398][T29225] macvlan2: entered promiscuous mode [ 640.613825][T29225] macvlan2: entered allmulticast mode [ 640.624323][T29225] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 640.683294][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6360'. [ 640.685950][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.698637][T29228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6360'. [ 640.757375][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 640.877701][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 641.006751][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 641.074001][T29250] netlink: 'syz.5.6365': attribute type 21 has an invalid length. [ 641.128293][ T10] IPVS: starting estimator thread 0... [ 641.139156][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 641.160678][T22959] nci: nci_ntf_packet: unknown ntf opcode 0xb11 [ 641.162723][T29250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6365'. [ 641.220325][T28810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.266708][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 641.274431][T29259] IPVS: using max 29 ests per chain, 69600 per kthread [ 641.338309][T29266] netlink: 'syz.2.6366': attribute type 1 has an invalid length. [ 641.422593][T29266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.466754][T29270] bond1: (slave ip6erspan0): making interface the new active one [ 641.479918][T29270] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 641.674520][T28810] veth0_vlan: entered promiscuous mode [ 641.692627][T28810] veth1_vlan: entered promiscuous mode [ 641.734815][T28810] veth0_macvtap: entered promiscuous mode [ 641.749334][T28810] veth1_macvtap: entered promiscuous mode [ 641.769786][T28810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.798675][T28810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.836754][T22962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.846784][T22962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.949189][T22967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.005353][T22953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.013890][T29281] __nla_validate_parse: 1 callbacks suppressed [ 642.013907][T29281] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6368'. [ 644.025479][T29249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.265555][T22960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.300041][T22960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.454814][T22961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.466513][T22961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.629886][T29305] netlink: 'syz.1.6376': attribute type 2 has an invalid length. [ 644.649927][T29305] netlink: 'syz.1.6376': attribute type 2 has an invalid length. [ 645.044900][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6381'. [ 645.236432][T22963] net_ratelimit: 41 callbacks suppressed [ 645.236467][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 645.269933][T29329] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 645.501737][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 645.544109][T29352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6386'. [ 645.646975][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 645.755939][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 645.875368][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 645.889527][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.995969][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 646.138981][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 646.258816][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 646.371137][T29399] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6396'. [ 646.386079][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 646.395604][T29398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6396'. [ 646.620406][T29413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6399'. [ 646.700731][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6401'. [ 648.344224][T29343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.704979][T29431] syzkaller0: entered promiscuous mode [ 648.726003][T29431] syzkaller0: entered allmulticast mode [ 648.763254][T29431] netlink: 'syz.4.6405': attribute type 4 has an invalid length. [ 648.931945][T29443] macvlan0: entered promiscuous mode [ 649.001251][T29444] tipc: Started in network mode [ 649.001571][T29456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6410'. [ 649.035006][T29444] tipc: Node identity 6eaaaadced53, cluster identity 4711 [ 649.083911][T29444] tipc: Enabled bearer , priority 0 [ 649.220908][T29429] tipc: Resetting bearer [ 649.274290][T29429] tipc: Disabling bearer [ 649.323806][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6409'. [ 649.362472][T29474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6413'. [ 649.453247][T29474] netlink: 'syz.5.6413': attribute type 11 has an invalid length. [ 649.488468][T29474] netlink: 'syz.5.6413': attribute type 11 has an invalid length. [ 649.499965][T29481] x_tables: duplicate underflow at hook 2 [ 649.506825][T29474] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6413'. [ 649.596363][T29484] vcan0: entered allmulticast mode [ 650.003715][T29497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.038871][T29497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.081277][T29497] bond0 (unregistering): Released all slaves [ 650.240870][T22959] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.311851][T22959] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.357808][T22961] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.404491][T29516] net_ratelimit: 33 callbacks suppressed [ 650.404509][T29516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.415772][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 650.440516][T29516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.461431][T29516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.486080][T29520] netlink: 'syz.5.6425': attribute type 1 has an invalid length. [ 650.487189][T22959] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.497805][T29520] netlink: 'syz.5.6425': attribute type 3 has an invalid length. [ 650.516743][T29520] netlink: 'syz.5.6425': attribute type 7 has an invalid length. [ 650.524691][T29520] netlink: 'syz.5.6425': attribute type 8 has an invalid length. [ 650.539831][T29523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.551853][T29520] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6425'. [ 650.566948][T29523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.584832][T29520] NCSI netlink: No device for ifindex 131092 [ 650.595816][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 650.602459][T29516] sctp: [Deprecated]: syz.1.6424 (pid 29516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.602459][T29516] Use struct sctp_sack_info instead [ 650.795366][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 650.807093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.818060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.940548][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6429'. [ 650.979066][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6429'. [ 651.150158][T29537] xt_CT: No such helper "snmp" [ 651.347252][T29565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6437'. [ 651.568683][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6438'. [ 651.819151][T29582] xt_hashlimit: size too large, truncated to 1048576 [ 651.912923][T29585] Bluetooth: MGMT ver 1.23 [ 651.961707][T29592] netlink: 'syz.0.6442': attribute type 9 has an invalid length. [ 652.009254][T29593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'. [ 652.090836][T29593] vlan0: entered promiscuous mode [ 652.188091][T29597] netlink: 'syz.0.6445': attribute type 4 has an invalid length. [ 652.419766][T29599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.724020][T29627] x_tables: unsorted underflow at hook 2 [ 653.021329][T29643] syzkaller1: entered promiscuous mode [ 653.048362][T29643] syzkaller1: entered allmulticast mode [ 653.092559][T29641] pimreg: left allmulticast mode [ 653.266248][T29649] team0 (unregistering): Port device team_slave_0 removed [ 653.317158][T29649] team0 (unregistering): Port device team_slave_1 removed [ 653.369347][T29649] team0 (unregistering): Port device vlan0 removed [ 653.489040][T29637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.642952][T29670] netlink: 'syz.0.6460': attribute type 4 has an invalid length. [ 654.031808][T29689] x_tables: duplicate underflow at hook 1 [ 654.364921][T29707] __nla_validate_parse: 4 callbacks suppressed [ 654.364936][T29707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6469'. [ 654.440029][T29707] netlink: 'syz.1.6469': attribute type 7 has an invalid length. [ 654.477754][T29707] netlink: 'syz.1.6469': attribute type 8 has an invalid length. [ 654.486142][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6470'. [ 654.504215][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6469'. [ 654.806940][T29732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6474'. [ 654.911921][T29718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6471'. [ 655.574479][ T5613] net_ratelimit: 40 callbacks suppressed [ 655.574498][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.376888][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.410846][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.131936][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.350008][T22964] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 658.446269][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.568381][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 658.642375][T29765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6480'. [ 658.957269][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 659.087676][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 659.130257][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6484'. [ 659.163334][T29788] xt_hashlimit: size too large, truncated to 1048576 [ 659.202582][T29785] geneve3: entered promiscuous mode [ 659.221865][T29785] geneve3: entered allmulticast mode [ 659.241494][T29782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.277736][T29782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.375418][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 659.558472][T29802] xt_hashlimit: size too large, truncated to 1048576 [ 659.826302][T29823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6495'. [ 659.983208][T29830] netlink: 'syz.2.6497': attribute type 4 has an invalid length. [ 659.999609][T29829] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6496'. [ 660.162570][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6498'. [ 660.171569][T29838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6500'. [ 660.172771][T29838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 660.212879][T29835] bridge: RTM_NEWNEIGH with invalid ether address [ 660.284911][T29841] netlink: 'syz.1.6501': attribute type 1 has an invalid length. [ 660.312791][T29841] 8021q: VLANs not supported on ip6gre0 [ 660.353801][T29843] veth0: entered promiscuous mode [ 660.376119][T29843] veth0: left promiscuous mode [ 660.483183][T29847] netlink: 'syz.1.6503': attribute type 1 has an invalid length. [ 660.501523][T29847] netlink: 'syz.1.6503': attribute type 3 has an invalid length. [ 660.524853][T29850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'. [ 660.534427][T29847] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6503'. [ 660.534467][T29847] NCSI netlink: No device for ifindex 813332851 [ 660.543893][T29851] xt_hashlimit: size too large, truncated to 1048576 [ 660.645718][T22962] net_ratelimit: 9 callbacks suppressed [ 660.645736][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 660.817999][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 660.871989][T29864] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 660.954641][T29864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.074916][T29870] bond1: (slave gretap1): making interface the new active one [ 661.156492][T29870] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 661.170660][T29883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6515'. [ 661.184664][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.277250][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6517'. [ 661.333842][T29888] netlink: 61 bytes leftover after parsing attributes in process `syz.1.6517'. [ 661.359065][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.370720][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 661.411548][T29887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.422314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.464882][T29893] xt_hashlimit: size too large, truncated to 1048576 [ 661.495407][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 661.565700][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.625718][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 661.859697][T29907] netlink: 'syz.0.6524': attribute type 83 has an invalid length. [ 661.930908][T29907] netlink: 'syz.0.6524': attribute type 2 has an invalid length. [ 661.971223][T29907] netlink: 'syz.0.6524': attribute type 2 has an invalid length. [ 662.500345][T29929] block nbd4: Unsupported socket: should be TCP or UNIX. [ 662.876142][T29949] netlink: 'syz.4.6535': attribute type 1 has an invalid length. [ 663.184167][T29965] tipc: Enabling of bearer rejected, failed to enable media [ 663.618864][T29983] sctp: [Deprecated]: syz.4.6542 (pid 29983) Use of int in max_burst socket option deprecated. [ 663.618864][T29983] Use struct sctp_assoc_value instead [ 663.710688][T29992] netlink: 'syz.0.6545': attribute type 3 has an invalid length. [ 663.950696][T29998] veth1_vlan: entered promiscuous mode [ 663.968619][T29998] macvtap1: entered promiscuous mode [ 663.983832][T29998] macvtap1: entered allmulticast mode [ 663.992662][T29998] veth1_vlan: entered allmulticast mode [ 664.631244][T30046] xt_hashlimit: size too large, truncated to 1048576 [ 665.301006][T30063] __nla_validate_parse: 3 callbacks suppressed [ 665.301041][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6564'. [ 665.600865][T30080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6566'. [ 665.612186][T30080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.633488][T30080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.715449][T22960] net_ratelimit: 38 callbacks suppressed [ 665.715469][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 665.734552][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.835908][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 665.945509][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.056135][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.165851][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.275943][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.385842][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.446177][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.453448][ C0] bridge0: topology change detected, propagating [ 666.460282][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.467716][ C0] bridge0: topology change detected, propagating [ 666.496766][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.606464][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 666.829248][T29999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.894075][T30090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6568'. [ 667.099700][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6569'. [ 667.730846][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6580'. [ 667.778866][T30133] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6580'. [ 667.810220][T30133] netlink: 'syz.5.6580': attribute type 1 has an invalid length. [ 667.831444][T30133] netlink: 200 bytes leftover after parsing attributes in process `syz.5.6580'. [ 668.142943][T30149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6584'. [ 668.159560][T30149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6584'. [ 668.918790][T30190] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 668.949759][T30189] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6596'. [ 669.127603][T30200] smc: net device lo applied user defined pnetid SYZ0 [ 669.135419][T30200] smc: smcd device lo applied user defined pnetid SYZ0 [ 670.391548][T30255] team0: Device ipvlan0 failed to register rx_handler [ 670.432373][T30257] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 670.562957][T30275] __nla_validate_parse: 42 callbacks suppressed [ 670.562976][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6620'. [ 670.767379][T22962] net_ratelimit: 1193 callbacks suppressed [ 670.767398][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 670.937788][T30293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6626'. [ 671.002477][T30298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6626'. [ 671.038172][T30300] : renamed from bond0 (while UP) [ 671.065856][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 671.169285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.200821][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 671.250544][T30306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6631'. [ 671.267213][T30306] macvlan0: left promiscuous mode [ 671.278951][T30306] netlink: 'syz.2.6631': attribute type 1 has an invalid length. [ 671.294781][T30306] netlink: 'syz.2.6631': attribute type 2 has an invalid length. [ 671.310466][T30312] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 671.339511][T30312] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 671.410112][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.435984][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 671.539791][T30317] netlink: 81 bytes leftover after parsing attributes in process `syz.4.6635'. [ 671.622371][T30326] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 671.659072][T30319] wg0 speed is unknown, defaulting to 1000 [ 671.680595][T30328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6639'. [ 671.691684][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 672.036484][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 672.076019][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6645'. [ 672.161563][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6645'. [ 672.173162][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6645'. [ 672.184741][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6645'. [ 672.208576][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.396954][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 673.143390][T30390] macvtap0: entered allmulticast mode [ 673.153190][T30390] veth0_macvtap: entered allmulticast mode [ 673.244676][T30395] veth0_to_bridge: entered promiscuous mode [ 673.304305][T30394] veth0_to_bridge: left promiscuous mode [ 673.545896][T30408] netlink: 'syz.4.6666': attribute type 1 has an invalid length. [ 673.620352][T30408] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 673.623580][T30411] xt_nfacct: accounting object `' does not exist [ 673.849714][T30423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 673.857735][T30423] IPv6: NLM_F_CREATE should be set when creating new route [ 673.867491][T30423] IPv6: NLM_F_CREATE should be set when creating new route [ 674.007537][T30423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.061074][T30434] netlink: 'syz.1.6672': attribute type 3 has an invalid length. [ 674.098573][T30434] netlink: 'syz.1.6672': attribute type 3 has an invalid length. [ 674.636375][T30456] xt_hashlimit: size too large, truncated to 1048576 [ 674.698085][T30456] xt_l2tp: missing protocol rule (udp|l2tpip) [ 674.864414][T30462] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 675.184955][T30480] bridge_slave_1: left allmulticast mode [ 675.252033][T30480] bridge_slave_1: left promiscuous mode [ 675.307521][T30480] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.364957][T30480] bridge_slave_0: left allmulticast mode [ 675.394304][T30480] bridge_slave_0: left promiscuous mode [ 675.433808][T30480] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.516934][T30497] netlink: 'syz.0.6690': attribute type 1 has an invalid length. [ 675.699605][T30497] bond3: entered promiscuous mode [ 675.728500][T30497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 675.757299][T30504] __nla_validate_parse: 38 callbacks suppressed [ 675.757350][T30504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6692'. [ 675.783915][T30510] gre0: left promiscuous mode [ 675.860285][T30510] net_ratelimit: 38 callbacks suppressed [ 675.860303][T30510] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 675.905429][T22964] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 676.036316][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 676.163155][T30527] xt_hashlimit: size too large, truncated to 1048576 [ 676.189009][T30530] bond2: option resend_igmp: invalid value (32767) [ 676.196839][T30530] bond2: option resend_igmp: allowed values 0 - 255 [ 676.207571][T30530] bond2 (unregistering): Released all slaves [ 676.319349][T30535] sctp: [Deprecated]: syz.1.6701 (pid 30535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.319349][T30535] Use struct sctp_sack_info instead [ 676.337369][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 676.366523][T30539] syzkaller0: entered promiscuous mode [ 676.383532][T30539] syzkaller0: entered allmulticast mode [ 676.421605][ T5619] block nbd4: Receive control failed (result -32) [ 676.447241][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.447293][T30545] bond0: (slave bond_slave_1): Device is not bonding slave [ 676.464501][T30545] bond0: option active_slave: invalid value (bond_slave_1) [ 676.480293][T30545] bond0 (unregistering): Released all slaves [ 676.681887][T30550] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 676.752928][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6708'. [ 676.763733][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 676.778196][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6708'. [ 676.824704][T30555] netlink: 'syz.1.6707': attribute type 33 has an invalid length. [ 676.896766][T30555] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 676.914182][T30555] bond0 (unregistering): Released all slaves [ 677.026321][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 677.156377][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 677.221209][T30586] xt_hashlimit: size too large, truncated to 1048576 [ 677.286865][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 677.328245][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.549540][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6719'. [ 677.609849][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6719'. [ 678.056168][T30634] sctp: [Deprecated]: syz.1.6729 (pid 30634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.056168][T30634] Use struct sctp_sack_info instead [ 678.245779][T30645] "syz.4.6731" (30645) uses obsolete ecb(arc4) skcipher [ 678.333502][T30645] netlink: 'syz.4.6731': attribute type 10 has an invalid length. [ 678.343354][T30645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6731'. [ 678.385599][T30645] team0: entered allmulticast mode [ 678.392185][T30645] team_slave_0: entered allmulticast mode [ 678.399907][T30645] team_slave_1: entered allmulticast mode [ 678.407393][T30645] bridge0: port 3(team0) entered blocking state [ 678.414770][T30645] bridge0: port 3(team0) entered disabled state [ 678.431583][T30645] team0: entered promiscuous mode [ 678.438244][T30645] team_slave_0: entered promiscuous mode [ 678.446798][T30645] team_slave_1: entered promiscuous mode [ 678.454133][T30645] bridge0: port 3(team0) entered blocking state [ 678.461312][T30645] bridge0: port 3(team0) entered forwarding state [ 678.471437][T30654] netlink: 'syz.1.6735': attribute type 2 has an invalid length. [ 678.717827][T30662] sctp: [Deprecated]: syz.4.6737 (pid 30662) Use of int in max_burst socket option deprecated. [ 678.717827][T30662] Use struct sctp_assoc_value instead [ 679.418602][T30694] netlink: 'syz.5.6746': attribute type 13 has an invalid length. [ 679.468996][T30694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6746'. [ 679.589538][T30708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6750'. [ 680.163515][T30735] bond2: option resend_igmp: invalid value (32767) [ 680.212708][T30735] bond2: option resend_igmp: allowed values 0 - 255 [ 680.260187][T30735] bond2 (unregistering): Released all slaves [ 680.781339][T30780] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6766'. [ 680.946795][T22959] net_ratelimit: 33 callbacks suppressed [ 680.946815][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.087101][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.101032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.236290][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.366394][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.451473][T30807] netlink: 'syz.4.6774': attribute type 1 has an invalid length. [ 681.584462][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 681.694684][T30817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6774'. [ 681.699126][T30813] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 681.838695][T30817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.871531][T22960] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.897484][T30805] sit0: entered promiscuous mode [ 681.936844][T30805] netlink: 'syz.5.6775': attribute type 1 has an invalid length. [ 681.962084][T30805] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6775'. [ 682.025342][T22962] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 682.035918][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 682.081411][T30838] xt_hashlimit: size too large, truncated to 1048576 [ 682.103146][T30838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6783'. [ 682.125982][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.296610][T30841] netlink: 'syz.5.6784': attribute type 1 has an invalid length. [ 682.306812][T30841] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6784'. [ 682.335793][T30841] netlink: 'syz.5.6784': attribute type 1 has an invalid length. [ 682.344922][T30843] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6784'. [ 682.404180][T30850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6786'. [ 682.415512][T30850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6786'. [ 682.760885][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6792'. [ 682.775768][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6792'. [ 682.787552][T30867] netlink: 'syz.4.6793': attribute type 1 has an invalid length. [ 682.938503][T30867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.432664][T30898] bridge0: port 3(veth0) entered blocking state [ 683.448331][T30898] bridge0: port 3(veth0) entered disabled state [ 683.467586][T30898] veth0: entered allmulticast mode [ 683.511822][T30898] veth0: entered promiscuous mode [ 683.542693][T30898] bridge0: port 3(veth0) entered blocking state [ 683.549800][T30898] bridge0: port 3(veth0) entered forwarding state [ 683.629766][T30909] netlink: 'syz.4.6801': attribute type 30 has an invalid length. [ 684.009716][T30927] xt_ecn: cannot match TCP bits for non-tcp packets [ 684.251279][T30940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.411006][T30947] netlink: 'syz.0.6812': attribute type 11 has an invalid length. [ 684.936176][T30969] netlink: 'syz.1.6819': attribute type 4 has an invalid length. [ 685.012289][T30970] netlink: 'syz.1.6819': attribute type 4 has an invalid length. [ 685.802170][T31011] syzkaller0: entered promiscuous mode [ 685.820762][T31011] syzkaller0: entered allmulticast mode [ 685.830984][T31013] xt_l2tp: invalid flags combination: 8 [ 685.873722][T31020] __nla_validate_parse: 16 callbacks suppressed [ 685.873742][T31020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6836'. [ 685.922192][T31022] netlink: 'syz.4.6837': attribute type 1 has an invalid length. [ 686.129670][T31028] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 686.235974][T31022] bridge1: entered promiscuous mode [ 686.253692][T31022] bond5: (slave bridge1): making interface the new active one [ 686.262885][T31022] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 686.286694][ T5732] net_ratelimit: 31 callbacks suppressed [ 686.286711][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.289447][T31025] bridge2: entered promiscuous mode [ 686.311352][T31025] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 686.337156][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 686.466983][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 686.607192][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.835553][T22964] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 686.848051][T31044] 8021q: VLANs not supported on syzkaller1 [ 686.859563][T31065] bridge_slave_1: left allmulticast mode [ 686.887966][T31065] bridge_slave_1: left promiscuous mode [ 686.909630][T31065] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.924876][T31065] bridge_slave_0: left promiscuous mode [ 686.939182][T31065] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.004112][T31072] xt_hashlimit: size too large, truncated to 1048576 [ 687.058172][T31079] xt_hashlimit: size too large, truncated to 1048576 [ 687.111399][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 687.277268][T22964] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 687.330435][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.436082][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 687.570569][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.727369][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 687.830517][T31101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6855'. [ 687.884761][T31105] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6857'. [ 687.991162][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6859'. [ 689.134787][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'. [ 689.204953][T31166] netlink: 'syz.4.6874': attribute type 6 has an invalid length. [ 689.774832][T31199] netlink: 'syz.0.6882': attribute type 1 has an invalid length. [ 689.799762][T31198] netlink: 'syz.0.6882': attribute type 1 has an invalid length. [ 689.858509][T31208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6885'. [ 689.861478][T31201] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 689.868842][T31208] netlink: 'syz.2.6885': attribute type 7 has an invalid length. [ 689.889808][T31208] netlink: 'syz.2.6885': attribute type 8 has an invalid length. [ 689.900982][T31208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'. [ 689.939773][T31201] bond7 (unregistering): Released all slaves [ 690.078595][T31199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.317444][T31230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6890'. [ 690.361070][T31230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6890'. [ 690.508049][T31234] bond0: (slave bond_slave_0): Releasing backup interface [ 690.568166][T31234] bond0: (slave bond_slave_1): Releasing backup interface [ 690.694717][T31234] team0: Port device team_slave_0 removed [ 690.701774][T31249] sctp: [Deprecated]: syz.4.6895 (pid 31249) Use of int in max_burst socket option. [ 690.701774][T31249] Use struct sctp_assoc_value instead [ 690.709520][T31234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.731193][T31234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.746882][ T29] audit: type=1800 audit(1786708414.317:19): pid=31233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6891" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=885 res=0 errno=0 [ 690.794925][T31234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.816768][T31234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.932967][T31242] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 690.954670][T31242] bond2 (unregistering): Released all slaves [ 691.156579][T31263] tap0: tun_chr_ioctl cmd 2148553947 [ 691.180534][T31269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6900'. [ 691.199864][T31269] netlink: 'syz.1.6900': attribute type 30 has an invalid length. [ 691.214585][T31263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6899'. [ 691.246657][T22960] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.326768][T22962] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.354818][T22962] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.393918][T22962] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.447028][T22960] net_ratelimit: 29 callbacks suppressed [ 691.447045][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 691.486045][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.635822][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 691.815628][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 691.871484][T31314] openvswitch: netlink: Duplicate or invalid key (type 0). [ 691.911868][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6909'. [ 691.943652][T31315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6909'. [ 691.971495][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 692.105432][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 692.225057][T31321] syzkaller0: entered promiscuous mode [ 692.244055][T31321] syzkaller0: entered allmulticast mode [ 692.288973][T31329] openvswitch: netlink: Key type 170 is out of range max 32 [ 692.397759][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 692.527694][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.892279][T31352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.211322][T31371] syzkaller1: entered promiscuous mode [ 693.267793][T31371] syzkaller1: entered allmulticast mode [ 693.350354][T31383] netlink: 'syz.5.6932': attribute type 1 has an invalid length. [ 693.449090][T31383] bond0: entered promiscuous mode [ 693.460004][T31383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.522457][T31393] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 693.537420][T31393] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 693.551023][T31393] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 693.667987][T31383] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 693.700319][T31383] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 693.801597][T31409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6939'. [ 693.852894][T31409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6939'. [ 694.028582][T31420] xt_hashlimit: size too large, truncated to 1048576 [ 694.074648][T31411] syzkaller1: entered promiscuous mode [ 694.102581][T31411] syzkaller1: entered allmulticast mode [ 694.748038][T31442] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 694.759116][T31442] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 695.320010][T31460] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6949'. [ 695.330936][T31460] 8021q: VLANs not supported on sit0 [ 695.432338][T31465] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 695.440182][T31465] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 696.456185][T22963] net_ratelimit: 45 callbacks suppressed [ 696.456207][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 696.576040][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 696.685506][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 696.686396][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.744247][T31407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.796106][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 696.963526][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 697.168060][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.186612][T31484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6954'. [ 697.227601][T31476] bond7 (unregistering): Released all slaves [ 697.339481][T31494] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 697.490181][T31480] wg0 speed is unknown, defaulting to 1000 [ 697.496947][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 697.594960][T31502] vcan0: left allmulticast mode [ 697.706992][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 697.721076][T31506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6965'. [ 697.729509][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.784260][T31516] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6966'. [ 698.142285][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6969'. [ 698.813619][T31540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6973'. [ 699.645475][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 700.385477][T22953] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.397325][T22953] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.407062][T22953] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.417414][T22953] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.430352][T22953] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.441017][T22953] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.461629][T22953] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.472394][T22953] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.583222][T31506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.880410][T31581] xt_hashlimit: size too large, truncated to 1048576 [ 701.062463][T31590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6985'. [ 701.083620][T31596] netlink: 416 bytes leftover after parsing attributes in process `syz.4.6986'. [ 701.167032][T31602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6986'. [ 701.299254][T31611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6989'. [ 701.518083][T22966] net_ratelimit: 25 callbacks suppressed [ 701.518102][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.678317][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.699528][T31617] SET target dimension over the limit! [ 701.713428][T31622] netlink: 'syz.2.6994': attribute type 21 has an invalid length. [ 701.747838][T31617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 701.842462][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.879912][T31624] netlink: 'syz.5.6993': attribute type 83 has an invalid length. [ 701.886050][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.892176][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 702.055456][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 702.093294][T31639] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 702.191697][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 702.349744][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 702.389500][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7002'. [ 702.469249][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7001'. [ 702.485903][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.565394][T22954] net_ratelimit: 41 callbacks suppressed [ 706.565417][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.685999][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.767554][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.796538][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.905320][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 707.015668][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 707.086258][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.125412][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 707.235715][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 707.346144][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.636073][T22966] net_ratelimit: 44 callbacks suppressed [ 711.636095][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.756107][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.865432][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.975366][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 712.086307][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 712.195713][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 712.285888][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.305633][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 712.416032][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 712.528368][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.715490][T22953] net_ratelimit: 44 callbacks suppressed [ 716.715511][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.835618][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.945958][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.055339][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.165364][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.276192][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.385646][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.485519][T31558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.495517][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 717.605998][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.786151][T22959] net_ratelimit: 45 callbacks suppressed [ 721.786173][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.906142][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.015350][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.125842][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.236119][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.345432][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.446467][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.465470][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.575315][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 722.685714][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.845501][ T24] net_ratelimit: 44 callbacks suppressed [ 726.845516][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.866273][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 726.975388][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.086573][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.196194][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.305468][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.416172][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.525714][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.635351][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 727.746080][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 728.686829][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 728.901906][T31662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7005'. [ 728.911369][T31662] bond0: ARP target 8.4.0.0 is already present [ 728.918648][T31662] bond0: option arp_ip_target: invalid value (1032) [ 728.939267][T31662] xt_hashlimit: size too large, truncated to 1048576 [ 729.025815][T31667] syzkaller1: entered promiscuous mode [ 729.034335][T31667] syzkaller1: entered allmulticast mode [ 729.051994][T31666] tipc: Started in network mode [ 729.079560][T31666] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 729.091383][T31666] tipc: Enabled bearer , priority 10 [ 729.123194][T31670] syzkaller0: entered promiscuous mode [ 729.129512][T31670] syzkaller0: entered allmulticast mode [ 729.378407][T31676] syzkaller1: entered promiscuous mode [ 729.386683][T31676] syzkaller1: entered allmulticast mode [ 729.604038][T31696] netlink: 'syz.4.7015': attribute type 1 has an invalid length. [ 729.629734][T31696] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7015'. [ 729.679457][T31701] netlink: 'syz.4.7015': attribute type 1 has an invalid length. [ 729.696252][T31701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7015'. [ 729.779928][T31708] netlink: 'syz.4.7019': attribute type 11 has an invalid length. [ 729.789169][T31708] netlink: 'syz.4.7019': attribute type 4 has an invalid length. [ 729.801255][T31708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7019'. [ 730.000922][T31725] netlink: 'syz.1.7021': attribute type 1 has an invalid length. [ 730.189445][T31725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7021'. [ 730.260000][T31732] bond2: (slave gretap2): making interface the new active one [ 730.297059][T31732] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 730.319086][T31747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7028'. [ 730.404145][T31730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 730.414923][T31730] bond2: (slave bond3): Enslaving as a backup interface with an up link [ 730.425008][ T5746] tipc: Node number set to 10136234 [ 730.440173][T31725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.459287][T31748] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7021'. [ 730.488237][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7032'. [ 730.528632][T31762] netlink: 'syz.2.7034': attribute type 83 has an invalid length. [ 730.815752][T31776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7038'. [ 730.830126][T31775] veth1_macvtap: left promiscuous mode [ 730.836580][T31776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7038'. [ 730.888780][T31776] netlink: 'syz.1.7038': attribute type 1 has an invalid length. [ 730.900809][T31782] wg0: entered allmulticast mode [ 730.909053][T31782] wg0: left allmulticast mode [ 730.962832][T31776] bond4: entered promiscuous mode [ 730.969454][T31776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.058973][T31776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.078394][T31776] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 731.092261][T31776] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 731.131275][T31776] bond4: (slave ip6gre2): making interface the new active one [ 731.148336][T31776] ip6gre2: entered promiscuous mode [ 731.178893][T31776] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 731.582273][T31814] nbd: must specify at least one socket [ 731.630078][T31818] netlink: 'syz.1.7050': attribute type 32 has an invalid length. [ 731.731821][T31818] bond5: option coupled_control: invalid value (64) [ 731.759177][T31818] bond5 (unregistering): Released all slaves [ 731.873419][T31833] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 731.944725][T22954] net_ratelimit: 47 callbacks suppressed [ 731.944745][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 731.954347][T31818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.984304][T31818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.046272][T31558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.131239][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 732.255987][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 732.428641][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 732.454039][T31863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.519830][T31863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.601723][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 732.697358][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.737755][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 733.237580][T31899] syzkaller1: entered promiscuous mode [ 733.268138][T31899] syzkaller1: entered allmulticast mode [ 733.309881][T31899] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 733.368024][T31899] syzkaller1: Linktype set failed because interface is up [ 733.668292][T31920] netlink: 'syz.5.7077': attribute type 30 has an invalid length. [ 733.805458][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 734.076722][T31939] netlink: 'syz.2.7080': attribute type 1 has an invalid length. [ 734.098320][T31944] 8021q: VLANs not supported on vcan0 [ 734.133948][T31940] __nla_validate_parse: 9 callbacks suppressed [ 734.133964][T31940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7084'. [ 734.184465][T31939] erspan2: entered allmulticast mode [ 734.215469][ T5746] IPVS: starting estimator thread 0... [ 734.315510][T31949] IPVS: using max 37 ests per chain, 88800 per kthread [ 734.443316][T31958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7087'. [ 734.590242][T31958] bridge0: port 3(team0) entered disabled state [ 734.878050][T31973] xt_CT: No such helper "snmp" [ 736.352486][T32015] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7096'. [ 736.387573][T32015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7096'. [ 736.610092][T32029] netlink: 'syz.0.7099': attribute type 10 has an invalid length. [ 736.664889][T32029] veth1_macvtap: left promiscuous mode [ 736.705080][T32029] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 736.981090][T32050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7104'. [ 737.019330][T32054] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7106'. [ 737.060258][T32054] netlink: 'syz.5.7106': attribute type 2 has an invalid length. [ 737.066796][T32055] netlink: 512 bytes leftover after parsing attributes in process `syz.4.7105'. [ 737.125977][T22962] net_ratelimit: 27 callbacks suppressed [ 737.125996][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.247504][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.292735][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.446898][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.459446][T32069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 737.484543][T32077] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7108'. [ 737.617112][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.719182][T32085] sctp: [Deprecated]: syz.1.7112 (pid 32085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.719182][T32085] Use struct sctp_sack_info instead [ 737.758950][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.857695][T22966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.891658][T32094] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.7115'. [ 737.908102][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 737.978716][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.105625][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 738.871612][T32138] netlink: 'syz.5.7126': attribute type 1 has an invalid length. [ 739.302491][T32180] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 739.670370][T32200] __nla_validate_parse: 5 callbacks suppressed [ 739.670388][T32200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7141'. [ 739.702392][T32193] netlink: 'syz.5.7139': attribute type 10 has an invalid length. [ 739.738808][T32201] bridge0: port 3(veth0) entered blocking state [ 739.752468][T32203] netlink: 'syz.5.7139': attribute type 10 has an invalid length. [ 739.763572][T32201] bridge0: port 3(veth0) entered disabled state [ 739.779163][T32201] veth0: entered allmulticast mode [ 739.791011][T32201] veth0: entered promiscuous mode [ 739.802017][T32201] bridge0: port 3(veth0) entered blocking state [ 739.810976][T32201] bridge0: port 3(veth0) entered listening state [ 739.914337][T32211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7143'. [ 739.959202][T32193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7139'. [ 740.279705][T32230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7146'. [ 740.443775][T22960] tipc: Subscription rejected, illegal request [ 740.498146][T32230] hsr_slave_1 (unregistering): left promiscuous mode [ 740.680267][T32248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7152'. [ 740.715551][T32250] netlink: 'syz.1.7153': attribute type 83 has an invalid length. [ 740.962166][T32263] bond3: entered allmulticast mode [ 741.080206][T32261] bond3: left allmulticast mode [ 741.174207][T32272] netlink: 'syz.2.7160': attribute type 2 has an invalid length. [ 741.384746][T32284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7164'. [ 741.427540][T32284] wg0 speed is unknown, defaulting to 1000 [ 742.239363][T22953] net_ratelimit: 53 callbacks suppressed [ 742.239383][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 742.311764][T32335] netlink: 'syz.4.7180': attribute type 5 has an invalid length. [ 742.338357][T22966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.361256][T32335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.372607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.387790][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 742.419736][T32339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7182'. [ 742.435995][T32340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7178'. [ 742.445294][T32339] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7182'. [ 742.445351][T32339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7182'. [ 742.466863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.686249][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 742.815773][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 742.949565][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 743.085507][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 743.869142][T32406] geneve2: entered promiscuous mode [ 744.870313][T32460] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 744.897602][T32460] bond2 (unregistering): Released all slaves [ 744.952760][T32472] hsr0: entered allmulticast mode [ 745.000774][T32472] hsr_slave_0: entered allmulticast mode [ 745.007573][T32472] hsr_slave_1: entered allmulticast mode [ 745.242493][T32484] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 745.313955][T32490] __nla_validate_parse: 3 callbacks suppressed [ 745.313972][T32490] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7222'. [ 745.369541][T32491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7222'. [ 745.494809][T32495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7224'. [ 745.552846][T32498] netlink: 'syz.5.7225': attribute type 11 has an invalid length. [ 745.589296][T32497] netlink: 'syz.5.7225': attribute type 3 has an invalid length. [ 745.816369][T32513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7231'. [ 745.821127][T32514] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7230'. [ 745.843102][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'. [ 745.875624][T32513] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7231'. [ 746.042800][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7233'. [ 746.053487][T32522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7233'. [ 746.094294][T32516] bond7 (unregistering): Released all slaves [ 746.711175][T32557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.736578][T32559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7247'. [ 746.948253][T32565] tipc: Enabling of bearer rejected, already enabled [ 747.067559][T32573] sctp: [Deprecated]: syz.4.7253 (pid 32573) Use of int in max_burst socket option. [ 747.067559][T32573] Use struct sctp_assoc_value instead [ 747.295729][T32583] netlink: 'syz.2.7257': attribute type 1 has an invalid length. [ 747.325780][T31558] net_ratelimit: 68 callbacks suppressed [ 747.325811][T31558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.368198][T22953] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 747.439780][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 747.489310][T32599] netlink: 'syz.4.7261': attribute type 29 has an invalid length. [ 747.549954][T32599] netlink: 'syz.4.7261': attribute type 29 has an invalid length. [ 747.568731][T22967] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 747.626506][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 747.649414][T31558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.717970][T22959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 747.728632][T31561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.766298][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 747.866911][T22959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 747.994910][T32620] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 748.063821][T32628] xt_ipcomp: unknown flags 1D [ 748.088299][T32628] IPVS: ip_vs_edit_dest(): server weight less than zero [ 748.454724][T32642] block nbd0: Unsupported socket: should be TCP or UNIX. [ 748.592449][T32648] netlink: 'syz.4.7276': attribute type 3 has an invalid length. [ 748.709911][T32650] syzkaller1: entered promiscuous mode [ 748.737083][T32650] syzkaller1: entered allmulticast mode [ 748.961236][T32668] netlink: 'syz.5.7282': attribute type 14 has an invalid length. [ 748.973904][T32668] netlink: 'syz.5.7282': attribute type 14 has an invalid length. [ 749.011193][T32670] netlink: 'syz.5.7282': attribute type 14 has an invalid length. [ 749.043756][T32670] netlink: 'syz.5.7282': attribute type 14 has an invalid length. [ 749.537289][T32694] netlink: 'syz.4.7291': attribute type 4 has an invalid length. [ 749.688904][T32701] netlink: 'syz.5.7294': attribute type 8 has an invalid length. [ 749.752142][T32706] netlink: 'syz.5.7294': attribute type 1 has an invalid length. [ 749.766417][T32701] bridge0: port 3(veth0) entered disabled state [ 749.778805][T32701] bridge0: port 2(ªªªªª+) entered disabled state [ 749.787882][T32701] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.858295][T32705] tipc: Enabling of bearer rejected, failed to enable media [ 751.517715][ T328] __nla_validate_parse: 15 callbacks suppressed [ 751.517733][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7320'. [ 751.559271][ T328] vlan1: entered allmulticast mode [ 751.583012][ T328] veth0_vlan: entered allmulticast mode [ 751.864049][ T350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7326'. [ 752.458098][T22959] net_ratelimit: 92 callbacks suppressed [ 752.458136][T22959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 752.531839][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.532419][T22959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.556056][T31558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.616553][T22966] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 752.669861][ T387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7338'. [ 752.715493][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.790464][ T393] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7340'. [ 752.856440][T22959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 752.895408][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.897780][ T401] validate_nla: 1 callbacks suppressed [ 752.897814][ T401] netlink: 'syz.5.7341': attribute type 1 has an invalid length. [ 752.964920][ T401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7341'. [ 752.984591][T22960] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.036291][T22960] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 753.076022][ T404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7343'. [ 753.132732][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'. [ 753.160109][ T410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7344'. [ 753.192498][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'. [ 753.214448][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7344'. [ 753.236686][T22967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.295501][T22960] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.348655][T22960] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.371089][ T420] netlink: 'syz.0.7348': attribute type 12 has an invalid length. [ 753.379723][T22960] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.501472][ T431] IPVS: length: 190 != 8 [ 753.608948][ T436] netlink: 'syz.4.7353': attribute type 5 has an invalid length. [ 753.668046][ T438] gretap0: entered promiscuous mode [ 753.693133][ T438] 0ªî{X¹¦: renamed from gretap0 [ 753.730328][ T443] ip6t_srh: unknown srh invflags 4000 [ 753.734964][ T438] 0ªî{X¹¦: left promiscuous mode [ 753.767579][ T438] 0ªî{X¹¦: entered allmulticast mode [ 753.856805][ T443] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 753.862825][ T443] syzkaller1: Refused to change device type [ 753.929788][ T459] syzkaller1: entered promiscuous mode [ 753.935455][ T459] syzkaller1: entered allmulticast mode [ 754.108521][ T465] macvlan4: entered promiscuous mode [ 754.124082][ T465] macvlan4: entered allmulticast mode [ 754.136848][ T465] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 754.217569][ T473] bond2: (slave bond_slave_1): Device is not bonding slave [ 754.228850][ T473] bond2: option active_slave: invalid value (bond_slave_1) [ 754.239467][ T473] bond2 (unregistering): Released all slaves [ 754.352215][ T469] tap0: tun_chr_ioctl cmd 1074025673 [ 754.563601][ T479] syzkaller0: entered promiscuous mode [ 754.593641][ T479] syzkaller0: entered allmulticast mode [ 754.911696][ T521] netlink: 'syz.2.7372': attribute type 1 has an invalid length. [ 754.932283][ T520] netlink: 'syz.0.7374': attribute type 1 has an invalid length. [ 754.974170][ T520] netlink: 'syz.0.7374': attribute type 2 has an invalid length. [ 755.008687][ T522] netlink: 'syz.0.7374': attribute type 1 has an invalid length. [ 755.037684][ T522] netlink: 'syz.0.7374': attribute type 2 has an invalid length. [ 755.154396][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.162149][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.558649][ T490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.602292][ T490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.710865][ T490] hsr0: left allmulticast mode [ 755.724676][ T490] hsr_slave_0: left allmulticast mode [ 755.731409][ T490] hsr_slave_1: left allmulticast mode [ 755.917253][ T490] veth0_macvtap: left allmulticast mode [ 755.930687][ T490] macvtap0: left allmulticast mode [ 756.000205][ T490] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 756.051916][ T490] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 756.110870][ T490] bridge1: left promiscuous mode [ 756.130930][ T490] bridge2: left promiscuous mode [ 756.173612][ T490] syzkaller0: left promiscuous mode [ 756.179289][ T490] syzkaller0: left allmulticast mode [ 756.260537][T22961] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.284914][T22961] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.311897][T22961] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.346995][T22961] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.375340][T22961] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.390106][T22961] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.442084][ T550] nbd: nbd64 already in use [ 756.477605][T22963] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.505548][T22963] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.674538][T31660] udevd[31660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 756.680173][ T561] __nla_validate_parse: 11 callbacks suppressed [ 756.680189][ T561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7383'. [ 757.038732][ T581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7390'. [ 757.099177][ T579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.284511][ T598] netlink: 'syz.0.7395': attribute type 11 has an invalid length. [ 757.477585][T22963] net_ratelimit: 26 callbacks suppressed [ 757.477603][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 757.638064][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 757.766095][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 757.924161][ T631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 757.968174][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.061341][ T633] netlink: 120 bytes leftover after parsing attributes in process `syz.5.7405'. [ 758.106345][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.228511][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.366940][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.378028][ T660] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7413'. [ 758.408520][ T663] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7414'. [ 758.499104][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.626409][T22953] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 759.229105][ T716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7427'. [ 759.387500][ T716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 759.624903][ T735] wg0 speed is unknown, defaulting to 1000 [ 759.964290][ T753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7438'. [ 760.120841][ T761] netlink: 'syz.2.7440': attribute type 1 has an invalid length. [ 760.150753][ T761] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7440'. [ 760.443982][ T779] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7443'. [ 760.616220][ T783] netlink: 'syz.2.7444': attribute type 1 has an invalid length. [ 760.684131][ T786] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 760.702582][ T786] bond5 (unregistering): Released all slaves [ 761.304240][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7457'. [ 761.453978][ T824] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 761.517324][ T828] netlink: 'syz.4.7460': attribute type 3 has an invalid length. [ 761.518422][ T827] xt_hashlimit: size too large, truncated to 1048576 [ 761.586548][ T824] netlink: 'syz.1.7458': attribute type 1 has an invalid length. [ 761.979760][ T847] netlink: 'syz.0.7463': attribute type 29 has an invalid length. [ 762.007640][ T847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7463'. [ 762.030687][ T846] Bluetooth: MGMT ver 1.23 [ 762.087986][ T854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 762.408463][ T859] veth5: entered allmulticast mode [ 762.480467][ T877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7475'. [ 762.481029][ T874] team0: entered promiscuous mode [ 762.530716][ T874] team_slave_0: entered promiscuous mode [ 762.554884][ T874] team_slave_1: entered promiscuous mode [ 762.638316][T22962] net_ratelimit: 24 callbacks suppressed [ 762.638362][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 762.830449][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.016022][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.042606][ T897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7478'. [ 763.264161][ T905] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 763.375708][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.527849][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.634473][ T922] netlink: 'syz.5.7484': attribute type 4 has an invalid length. [ 763.659488][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.693765][ T925] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7484'. [ 763.825982][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 763.873983][ T933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7487'. [ 763.977825][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.045512][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 764.046264][ T5618] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 764.127807][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.267204][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.423445][ T970] netlink: 'syz.1.7496': attribute type 1 has an invalid length. [ 764.477793][ T973] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7496'. [ 764.590585][ T970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 764.634803][ T980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7498'. [ 764.671378][ T984] netlink: 'syz.5.7499': attribute type 2 has an invalid length. [ 764.695711][ T984] netlink: 'syz.5.7499': attribute type 1 has an invalid length. [ 764.703720][ T980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7498'. [ 764.729421][ T986] netlink: 'syz.0.7500': attribute type 12 has an invalid length. [ 764.762853][ T986] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7500'. [ 765.448722][ T1021] gre0: entered promiscuous mode [ 765.480583][ T1021] gre0: entered allmulticast mode [ 765.491889][ T1027] IPVS: set_ctl: invalid protocol: 94 172.20.20.23:20001 [ 765.775336][ T1042] sctp: [Deprecated]: syz.2.7516 (pid 1042) Use of int in max_burst socket option. [ 765.775336][ T1042] Use struct sctp_assoc_value instead [ 766.030343][ T1045] bond7 (unregistering): Released all slaves [ 766.618404][ T1086] 8021q: VLANs not supported on sit0 [ 767.145811][ T1111] __nla_validate_parse: 2 callbacks suppressed [ 767.145830][ T1111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7533'. [ 767.183181][ T1111] validate_nla: 1 callbacks suppressed [ 767.183200][ T1111] netlink: 'syz.1.7533': attribute type 7 has an invalid length. [ 767.199841][ T1111] netlink: 'syz.1.7533': attribute type 8 has an invalid length. [ 767.208272][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7533'. [ 767.214124][ T1115] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 767.417846][ T1119] atomic_op ffff888093c9d198 conn xmit_atomic 0000000000000000 [ 767.458004][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 767.703320][ T1142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7540'. [ 767.736922][ T1142] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7540'. [ 767.755876][ T1142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7540'. [ 767.800992][T22966] net_ratelimit: 20 callbacks suppressed [ 767.801012][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 767.916528][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 767.973308][ T1161] openvswitch: netlink: Message has 4124 unknown bytes. [ 767.996963][ T1162] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 768.040460][ T1167] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7544'. [ 768.052224][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.092278][ T1162] netlink: 'syz.4.7547': attribute type 64 has an invalid length. [ 768.124944][ T1162] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7547'. [ 768.130052][ T1165] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7544'. [ 768.207575][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.324653][ T1179] netlink: 'syz.1.7549': attribute type 10 has an invalid length. [ 768.326322][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.369320][ T1178] netlink: 'syz.4.7550': attribute type 21 has an invalid length. [ 768.382726][ T1181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7551'. [ 768.393217][ T1179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.400895][ T1183] x_tables: duplicate underflow at hook 4 [ 768.407411][ T1179] : (slave batadv0): Enslaving as an active interface with an up link [ 768.446675][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.577321][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.735346][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 768.953750][ T1210] netlink: 'syz.5.7559': attribute type 4 has an invalid length. [ 769.084014][ T1214] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 769.097891][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 769.132845][ T1213] team0: left allmulticast mode [ 769.140676][ T1213] team_slave_0: left allmulticast mode [ 769.151108][ T1213] team_slave_1: left allmulticast mode [ 769.164897][ T1213] team0: left promiscuous mode [ 769.184507][ T1213] team_slave_0: left promiscuous mode [ 769.201771][ T1213] team_slave_1: left promiscuous mode [ 769.209405][ T1213] bridge0: port 3(team0) entered disabled state [ 769.218954][ T1213] bridge_slave_1: left allmulticast mode [ 769.224665][ T1213] bridge_slave_1: left promiscuous mode [ 769.231474][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.243640][ T1213] bridge_slave_0: left allmulticast mode [ 769.252964][ T1213] bridge_slave_0: left promiscuous mode [ 769.259259][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.681468][ T1247] x_tables: unsorted entry at hook 3 [ 769.755080][ T1247] syzkaller0: entered promiscuous mode [ 769.777219][ T1247] syzkaller0: entered allmulticast mode [ 770.125332][ C1] bridge0: port 3(veth0) entered learning state [ 770.461752][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.470977][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.495863][ T1280] : (slave batadv0): Releasing backup interface [ 770.566916][ T1290] bond6 (unregistering): Released all slaves [ 771.528078][ T1334] netlink: 'syz.0.7597': attribute type 5 has an invalid length. [ 772.284284][ T1378] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 772.284284][ T1378] Please contact the netfilter-devel mailing list or update your nftables rules. [ 772.404992][ T1388] netlink: 'syz.4.7614': attribute type 2 has an invalid length. [ 772.491822][ T1393] tipc: Enabling of bearer rejected, already enabled [ 772.566234][ T1398] __nla_validate_parse: 13 callbacks suppressed [ 772.566246][ T1398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7618'. [ 772.659074][ T1402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7618'. [ 772.693449][ T1402] nbd: illegal input index -8454144 [ 772.720287][ T1402] ip6erspan0: entered allmulticast mode [ 772.847635][T22959] net_ratelimit: 43 callbacks suppressed [ 772.847655][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 772.913747][ T1414] netlink: 'syz.1.7623': attribute type 11 has an invalid length. [ 772.980181][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.013313][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7624'. [ 773.025437][ T1422] wg0 speed is unknown, defaulting to 1000 [ 773.042386][ T1425] netlink: zone id is out of range [ 773.095664][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.171035][ T1150] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 773.205799][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.321081][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.447441][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.571373][ T1439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.586170][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 773.695356][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 775.775093][ T1408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.055719][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.224389][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.421312][ T1464] erspan0: entered promiscuous mode [ 776.476206][ T1464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7630'. [ 776.798396][ T1476] netlink: 'syz.5.7636': attribute type 83 has an invalid length. [ 777.048506][ T1482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7638'. [ 777.256729][ T1491] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 777.264240][ T1493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7642'. [ 777.886243][T22967] net_ratelimit: 28 callbacks suppressed [ 777.886260][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.012248][ T1527] ip_tables: iptables: counters copy to user failed while replacing table [ 778.097015][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.250593][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.386747][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.515457][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.646240][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.788859][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 778.803953][ T1578] netlink: 'syz.0.7665': attribute type 1 has an invalid length. [ 779.023013][ T1591] netlink: 'syz.4.7666': attribute type 1 has an invalid length. [ 779.052411][ T1578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 779.069323][ T1595] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7667'. [ 779.180042][ T1591] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.218637][ T1584] bond6: (slave geneve4): making interface the new active one [ 779.228356][ T1584] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 779.301203][ T1602] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 779.316922][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 779.456198][ T1613] netlink: 'syz.1.7672': attribute type 1 has an invalid length. [ 779.464358][ T1613] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7672'. [ 779.480854][ T1608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7671'. [ 779.492338][ T1608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7671'. [ 779.535782][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 779.672052][ T1620] x_tables: duplicate underflow at hook 2 [ 779.798556][ T1633] sctp: [Deprecated]: syz.2.7677 (pid 1633) Use of int in max_burst socket option deprecated. [ 779.798556][ T1633] Use struct sctp_assoc_value instead [ 779.816031][ T1626] IPv6: sit1: Disabled Multicast RS [ 779.858338][ T5618] Bluetooth: hci2: link tx timeout [ 779.864316][ T5618] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 779.902039][ T1635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7676'. [ 779.918783][ T1626] syzkaller1: entered promiscuous mode [ 779.950811][ T1626] syzkaller1: entered allmulticast mode [ 779.979904][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7676'. [ 780.548315][ T1675] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7685'. [ 780.587152][ T1669] netlink: 'syz.5.7685': attribute type 3 has an invalid length. [ 780.641546][ T1671] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 780.843005][ T1694] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7690'. [ 781.177225][ T1710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7691'. [ 781.200679][ T1714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.234773][ T1714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.341746][ T1722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7697'. [ 781.434703][ T1722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.535008][ T1730] dvmrp8: entered allmulticast mode [ 781.600166][ T1722] bond2: (slave batadv1): Opening slave failed [ 781.616974][ T1733] netlink: 'syz.4.7700': attribute type 3 has an invalid length. [ 781.886586][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 782.119898][ T1759] netlink: 'syz.2.7707': attribute type 4 has an invalid length. [ 782.230418][ T1763] netlink: 'syz.0.7708': attribute type 1 has an invalid length. [ 782.519990][ T1763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.549426][ T1783] netlink: 'syz.4.7711': attribute type 1 has an invalid length. [ 782.634845][ T1779] bond7: (slave gretap1): making interface the new active one [ 782.668251][ T1779] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 782.797101][ T1783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 782.921455][ T1791] bond8: (slave geneve3): making interface the new active one [ 782.982149][ T1791] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 783.090173][ T1807] vlan0: entered promiscuous mode [ 783.130094][ T1807] team0: Port device vlan0 added [ 783.167190][T22954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.266462][T22962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.364559][ T1818] bond0: left promiscuous mode [ 783.416906][T22961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.451187][T22961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.488064][T22954] net_ratelimit: 21 callbacks suppressed [ 783.488084][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 783.667291][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 783.797435][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 783.930950][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 784.068944][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 784.198345][ T1858] bridge0: port 3(veth0) entered blocking state [ 784.204810][ T1858] bridge0: port 3(veth0) entered forwarding state [ 784.211661][ T1858] bridge0: port 2(ªªªªª+) entered blocking state [ 784.218207][ T1858] bridge0: port 2(ªªªªª+) entered forwarding state [ 784.225016][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.232264][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.280521][ T1858] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 784.311164][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 784.350230][ T1860] bridge3: entered promiscuous mode [ 784.355909][ T1860] bridge3: entered allmulticast mode [ 784.364794][ T1860] team0: Port device bridge3 added [ 784.392490][ T1866] bridge0: port 1(team0) entered blocking state [ 784.404292][ T1866] bridge0: port 1(team0) entered disabled state [ 784.416283][ T1866] team0: entered allmulticast mode [ 784.423091][ T1866] team_slave_0: entered allmulticast mode [ 784.434892][ T1866] team_slave_1: entered allmulticast mode [ 784.461728][ T1866] team0: entered promiscuous mode [ 784.470338][ T1866] team_slave_0: entered promiscuous mode [ 784.480293][ T1866] team_slave_1: entered promiscuous mode [ 784.567016][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 784.736087][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 784.794146][ T1887] netlink: 'syz.5.7736': attribute type 12 has an invalid length. [ 784.895569][ T1887] bond3: option primary_reselect: invalid value (255) [ 784.948300][ T1887] bond3 (unregistering): Released all slaves [ 785.142952][ T1898] veth0: entered promiscuous mode [ 785.175374][T22961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 785.194972][ T1898] veth0: left promiscuous mode [ 785.247940][ T5618] Bluetooth: hci2: command 0x0405 tx timeout [ 785.463295][ T1914] netlink: 'syz.5.7745': attribute type 83 has an invalid length. [ 785.882067][ T1933] __nla_validate_parse: 6 callbacks suppressed [ 785.882085][ T1933] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7752'. [ 785.931490][ T1937] netlink: 'syz.4.7754': attribute type 28 has an invalid length. [ 786.099804][ T1942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7758'. [ 786.254011][ T1952] netlink: 'syz.1.7760': attribute type 23 has an invalid length. [ 786.306508][ T1956] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7761'. [ 786.496722][ T1969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7768'. [ 786.532961][ T1969] macsec1: entered promiscuous mode [ 786.548048][ T1969] bridge0: entered promiscuous mode [ 786.553647][ T1969] macsec1: entered allmulticast mode [ 786.562593][ T1969] bridge0: entered allmulticast mode [ 786.574745][ T1969] bridge0: port 1(macsec1) entered blocking state [ 786.582201][ T1969] bridge0: port 1(macsec1) entered disabled state [ 786.623645][ T1969] bridge0: left allmulticast mode [ 786.636549][ T1969] bridge0: left promiscuous mode [ 787.042745][ T1988] SET target dimension over the limit! [ 787.394460][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7783'. [ 787.689140][ T2030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7788'. [ 787.760340][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7787'. [ 787.909838][ T2040] syzkaller0: entered promiscuous mode [ 787.922847][ T2040] syzkaller0: entered allmulticast mode [ 788.336990][ T2061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7797'. [ 788.564746][ T2061] netlink: 'syz.0.7797': attribute type 10 has an invalid length. [ 788.587095][T22959] net_ratelimit: 23 callbacks suppressed [ 788.587131][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 788.642907][ T2080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7800'. [ 788.713649][ T2061] veth0_to_bond: entered allmulticast mode [ 788.728559][ T2061] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 788.770139][ T2085] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7804'. [ 788.770393][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 788.937054][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.086500][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.227818][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.355974][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.486896][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.614307][ T2131] Cannot find map_set index 135 as target [ 789.651376][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 789.708612][ T2133] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 789.808882][T22954] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 790.031256][ T2159] netlink: 'syz.1.7824': attribute type 1 has an invalid length. [ 790.044862][ T2159] netlink: 'syz.1.7824': attribute type 1 has an invalid length. [ 790.116430][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 790.225262][ T2167] netlink: 'syz.4.7825': attribute type 21 has an invalid length. [ 790.259905][ T2167] netlink: 'syz.4.7825': attribute type 6 has an invalid length. [ 790.299098][ T2161] wg0 speed is unknown, defaulting to 1000 [ 791.364143][ T2227] __nla_validate_parse: 7 callbacks suppressed [ 791.364160][ T2227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7840'. [ 791.609139][ T2241] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:0 [ 791.637367][ T2241] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 791.678229][ T2241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7845'. [ 791.714584][ T2245] netlink: 'syz.2.7846': attribute type 1 has an invalid length. [ 791.719188][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 791.945756][ T2255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7850'. [ 792.062263][ T2263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7852'. [ 792.337482][ T2283] x_tables: duplicate underflow at hook 3 [ 792.347703][ T2283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7857'. [ 792.407563][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7855'. [ 792.454316][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7855'. [ 792.754713][ T2299] netlink: 'syz.1.7862': attribute type 153 has an invalid length. [ 792.794306][ T2299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7862'. [ 792.804484][ T2301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7863'. [ 793.169409][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 793.403662][ T2331] tc_dump_action: action bad kind [ 793.547907][ T2336] netlink: 'syz.2.7874': attribute type 3 has an invalid length. [ 793.649187][T22963] net_ratelimit: 27 callbacks suppressed [ 793.649206][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 793.786553][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 793.929748][ T2361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 793.944476][ T2361] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 793.964150][ T2361] gretap1: entered promiscuous mode [ 793.972950][ T2361] gretap1: entered allmulticast mode [ 794.006671][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.088354][ T2371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.129905][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.307289][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.442224][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.607340][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.746100][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.905806][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 794.940637][ T2416] netlink: 'syz.4.7892': attribute type 21 has an invalid length. [ 795.283875][ T2436] netlink: 'syz.2.7894': attribute type 29 has an invalid length. [ 795.451209][ T2436] netlink: 'syz.2.7894': attribute type 29 has an invalid length. [ 795.920042][ T2482] netlink: 'syz.2.7901': attribute type 1 has an invalid length. [ 799.295708][T22967] net_ratelimit: 3 callbacks suppressed [ 799.295744][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 799.442007][ T2503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.466986][T22967] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 799.531133][ T2510] geneve3: entered promiscuous mode [ 799.538692][ T2515] __nla_validate_parse: 22 callbacks suppressed [ 799.538723][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7907'. [ 799.666333][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 799.786773][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 799.831357][ T2534] netlink: 'syz.1.7914': attribute type 49 has an invalid length. [ 799.911523][ T2532] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 799.942528][ T2532] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 799.978319][ T2532] 0ªî{X¹¦: entered promiscuous mode [ 799.994943][ T2546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.007701][T22966] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 800.019079][ T2545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7915'. [ 800.130205][T22959] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 800.206222][ C1] bridge0: port 3(veth0) entered forwarding state [ 800.213266][ C1] bridge0: topology change detected, propagating [ 800.267726][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 800.326951][ T2559] [ 800.329313][ T2559] ====================================================== [ 800.336358][ T2559] WARNING: possible circular locking dependency detected [ 800.343546][ T2559] syzkaller #0 Not tainted [ 800.347970][ T2559] ------------------------------------------------------ [ 800.355063][ T2559] syz.5.7917/2559 is trying to acquire lock: [ 800.361042][ T2559] ffff888027151828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 800.370599][ T2559] [ 800.370599][ T2559] but task is already holding lock: [ 800.377967][ T2559] ffff888027151300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 800.388197][ T2559] [ 800.388197][ T2559] which lock already depends on the new lock. [ 800.388197][ T2559] [ 800.398781][ T2559] [ 800.398781][ T2559] the existing dependency chain (in reverse order) is: [ 800.407892][ T2559] [ 800.407892][ T2559] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 800.416607][ T2559] blk_alloc_queue+0x544/0x690 [ 800.421994][ T2559] __blk_mq_alloc_disk+0x194/0x390 [ 800.427902][ T2559] nbd_dev_add+0x494/0xb60 [ 800.432965][ T2559] nbd_init+0x15f/0x1e0 [ 800.437757][ T2559] do_one_initcall+0x250/0x870 [ 800.443059][ T2559] do_initcall_level+0x10a/0x1a0 [ 800.448623][ T2559] do_initcalls+0x59/0xa0 [ 800.453493][ T2559] kernel_init_freeable+0x29d/0x3e0 [ 800.459231][ T2559] kernel_init+0x1d/0x1d0 [ 800.464169][ T2559] ret_from_fork+0x514/0xb70 [ 800.469354][ T2559] ret_from_fork_asm+0x1a/0x30 [ 800.474659][ T2559] [ 800.474659][ T2559] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 800.481881][ T2559] fs_reclaim_acquire+0x71/0x100 [ 800.487355][ T2559] __kmalloc_cache_node_noprof+0x66/0x630 [ 800.493699][ T2559] create_worker+0x112/0x7b0 [ 800.498858][ T2559] workqueue_prepare_cpu+0xe4/0x170 [ 800.504586][ T2559] cpuhp_invoke_callback+0x434/0x810 [ 800.510400][ T2559] _cpu_up+0x2ce/0x5b0 [ 800.515260][ T2559] cpu_up+0x1d2/0x220 [ 800.519762][ T2559] cpuhp_bringup_mask+0xb2/0x1a0 [ 800.525294][ T2559] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 800.531978][ T2559] bringup_nonboot_cpus+0x17/0x30 [ 800.537533][ T2559] smp_init+0x32/0x110 [ 800.542226][ T2559] kernel_init_freeable+0x27f/0x3e0 [ 800.547949][ T2559] kernel_init+0x1d/0x1d0 [ 800.552803][ T2559] ret_from_fork+0x514/0xb70 [ 800.557918][ T2559] ret_from_fork_asm+0x1a/0x30 [ 800.563213][ T2559] [ 800.563213][ T2559] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 800.570951][ T2559] cpus_read_lock+0x42/0x160 [ 800.576067][ T2559] static_key_slow_inc+0x12/0x30 [ 800.581561][ T2559] nbd_genl_reconfigure+0x1301/0x1e80 [ 800.587459][ T2559] genl_family_rcv_msg_doit+0x233/0x340 [ 800.593533][ T2559] genl_rcv_msg+0x614/0x7a0 [ 800.598564][ T2559] netlink_rcv_skb+0x226/0x4a0 [ 800.603849][ T2559] genl_rcv+0x28/0x40 [ 800.608361][ T2559] netlink_unicast+0x7bb/0x940 [ 800.613650][ T2559] netlink_sendmsg+0x813/0xb40 [ 800.618936][ T2559] sock_sendmsg_nosec+0x13a/0x180 [ 800.624491][ T2559] ____sys_sendmsg+0x54e/0x850 [ 800.629776][ T2559] ___sys_sendmsg+0x2a5/0x360 [ 800.634982][ T2559] __x64_sys_sendmsg+0x1b1/0x290 [ 800.640452][ T2559] do_syscall_64+0x174/0x580 [ 800.645592][ T2559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.652041][ T2559] [ 800.652041][ T2559] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 800.659695][ T2559] __mutex_lock+0x19d/0x1550 [ 800.664820][ T2559] nbd_queue_rq+0x373/0x1150 [ 800.670006][ T2559] blk_mq_dispatch_rq_list+0x499/0x1990 [ 800.676084][ T2559] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.683023][ T2559] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.689622][ T2559] blk_mq_run_work_fn+0x16c/0x300 [ 800.695184][ T2559] process_scheduled_works+0xa8e/0x14e0 [ 800.701363][ T2559] worker_thread+0xa47/0xfb0 [ 800.706482][ T2559] kthread+0x388/0x470 [ 800.711080][ T2559] ret_from_fork+0x514/0xb70 [ 800.716199][ T2559] ret_from_fork_asm+0x1a/0x30 [ 800.721521][ T2559] [ 800.721521][ T2559] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 800.728748][ T2559] __mutex_lock+0x19d/0x1550 [ 800.733912][ T2559] nbd_queue_rq+0xc1/0x1150 [ 800.738944][ T2559] blk_mq_dispatch_rq_list+0x499/0x1990 [ 800.745033][ T2559] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.751895][ T2559] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.758536][ T2559] blk_mq_run_work_fn+0x16c/0x300 [ 800.764095][ T2559] process_scheduled_works+0xa8e/0x14e0 [ 800.770171][ T2559] worker_thread+0xa47/0xfb0 [ 800.775295][ T2559] kthread+0x388/0x470 [ 800.779895][ T2559] ret_from_fork+0x514/0xb70 [ 800.785209][ T2559] ret_from_fork_asm+0x1a/0x30 [ 800.790503][ T2559] [ 800.790503][ T2559] -> #1 (set->srcu){.+.+}-{0:0}: [ 800.797633][ T2559] __synchronize_srcu+0xc9/0x2f0 [ 800.803220][ T2559] elevator_switch+0x1e8/0x7b0 [ 800.808632][ T2559] elevator_change+0x2fa/0x480 [ 800.814032][ T2559] elevator_set_default+0x375/0x440 [ 800.819779][ T2559] blk_register_queue+0x3f3/0x4e0 [ 800.825411][ T2559] __add_disk+0x6cb/0xe30 [ 800.830357][ T2559] add_disk_fwnode+0x100/0x3a0 [ 800.835766][ T2559] nbd_dev_add+0x733/0xb60 [ 800.840715][ T2559] nbd_init+0x15f/0x1e0 [ 800.845391][ T2559] do_one_initcall+0x250/0x870 [ 800.850700][ T2559] do_initcall_level+0x10a/0x1a0 [ 800.856270][ T2559] do_initcalls+0x59/0xa0 [ 800.861125][ T2559] kernel_init_freeable+0x29d/0x3e0 [ 800.866940][ T2559] kernel_init+0x1d/0x1d0 [ 800.871833][ T2559] ret_from_fork+0x514/0xb70 [ 800.876952][ T2559] ret_from_fork_asm+0x1a/0x30 [ 800.882332][ T2559] [ 800.882332][ T2559] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 800.890172][ T2559] __lock_acquire+0x1520/0x2cf0 [ 800.895557][ T2559] lock_acquire+0x106/0x350 [ 800.900588][ T2559] __mutex_lock+0x19d/0x1550 [ 800.905708][ T2559] elevator_change+0x1af/0x480 [ 800.910999][ T2559] elevator_set_none+0xb5/0x140 [ 800.916553][ T2559] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 800.922897][ T2559] nbd_start_device+0x189/0xb30 [ 800.928278][ T2559] nbd_genl_connect+0x1597/0x1c10 [ 800.933849][ T2559] genl_family_rcv_msg_doit+0x233/0x340 [ 800.939938][ T2559] genl_rcv_msg+0x614/0x7a0 [ 800.945170][ T2559] netlink_rcv_skb+0x226/0x4a0 [ 800.950743][ T2559] genl_rcv+0x28/0x40 [ 800.955455][ T2559] netlink_unicast+0x7bb/0x940 [ 800.961537][ T2559] netlink_sendmsg+0x813/0xb40 [ 800.966844][ T2559] sock_sendmsg_nosec+0x13a/0x180 [ 800.972588][ T2559] ____sys_sendmsg+0x54e/0x850 [ 800.978068][ T2559] ___sys_sendmsg+0x2a5/0x360 [ 800.983285][ T2559] __x64_sys_sendmsg+0x1b1/0x290 [ 800.988810][ T2559] do_syscall_64+0x174/0x580 [ 800.993943][ T2559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.000411][ T2559] [ 801.000411][ T2559] other info that might help us debug this: [ 801.000411][ T2559] [ 801.011192][ T2559] Chain exists of: [ 801.011192][ T2559] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 801.011192][ T2559] [ 801.025504][ T2559] Possible unsafe locking scenario: [ 801.025504][ T2559] [ 801.033133][ T2559] CPU0 CPU1 [ 801.038749][ T2559] ---- ---- [ 801.044125][ T2559] lock(&q->q_usage_counter(io)#54); [ 801.049534][ T2559] lock(fs_reclaim); [ 801.056043][ T2559] lock(&q->q_usage_counter(io)#54); [ 801.064036][ T2559] lock(&q->elevator_lock); [ 801.068641][ T2559] [ 801.068641][ T2559] *** DEADLOCK *** [ 801.068641][ T2559] [ 801.076789][ T2559] 6 locks held by syz.5.7917/2559: [ 801.081905][ T2559] #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.090261][ T2559] #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 801.099263][ T2559] #2: ffff88802728f9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 801.110692][ T2559] #3: ffff88802728f8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 801.121778][ T2559] #4: ffff888027151300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 801.132598][ T2559] #5: ffff888027151338 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 801.143536][ T2559] [ 801.143536][ T2559] stack backtrace: [ 801.149524][ T2559] CPU: 0 UID: 0 PID: 2559 Comm: syz.5.7917 Not tainted syzkaller #0 PREEMPT(full) [ 801.149547][ T2559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 801.149557][ T2559] Call Trace: [ 801.149565][ T2559] [ 801.149573][ T2559] dump_stack_lvl+0xe8/0x150 [ 801.149601][ T2559] print_circular_bug+0x2e1/0x300 [ 801.149627][ T2559] check_noncircular+0x12e/0x150 [ 801.149652][ T2559] __lock_acquire+0x1520/0x2cf0 [ 801.149680][ T2559] ? elevator_change+0x1af/0x480 [ 801.149699][ T2559] lock_acquire+0x106/0x350 [ 801.149718][ T2559] ? elevator_change+0x1af/0x480 [ 801.149741][ T2559] __mutex_lock+0x19d/0x1550 [ 801.149762][ T2559] ? elevator_change+0x1af/0x480 [ 801.149781][ T2559] ? rcu_is_watching+0x15/0xb0 [ 801.149805][ T2559] ? elevator_change+0x1af/0x480 [ 801.149824][ T2559] ? __pfx___mutex_lock+0x10/0x10 [ 801.149842][ T2559] ? enable_work+0x17f/0x230 [ 801.149862][ T2559] ? lockdep_hardirqs_on+0x7a/0x110 [ 801.149884][ T2559] ? __cancel_work_sync+0xf7/0x110 [ 801.149903][ T2559] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 801.149925][ T2559] elevator_change+0x1af/0x480 [ 801.149946][ T2559] elevator_set_none+0xb5/0x140 [ 801.149965][ T2559] ? __pfx_elevator_set_none+0x10/0x10 [ 801.149985][ T2559] ? xa_load+0x1db/0x210 [ 801.150079][ T2559] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 801.150102][ T2559] ? kernfs_add_one+0x480/0x5e0 [ 801.150150][ T2559] ? nbd_start_device+0x17d/0xb30 [ 801.150167][ T2559] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 801.150194][ T2559] ? sysfs_add_file_mode_ns+0x258/0x300 [ 801.150216][ T2559] nbd_start_device+0x189/0xb30 [ 801.150233][ T2559] ? device_create_file+0xf4/0x1b0 [ 801.150283][ T2559] nbd_genl_connect+0x1597/0x1c10 [ 801.150310][ T2559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.150332][ T2559] ? rcu_is_watching+0x15/0xb0 [ 801.150353][ T2559] ? trace_kmalloc+0x2a/0xf0 [ 801.150372][ T2559] ? __kmalloc_noprof+0x396/0x720 [ 801.150399][ T2559] ? __nla_parse+0x40/0x60 [ 801.150420][ T2559] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 801.150443][ T2559] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 801.150467][ T2559] genl_family_rcv_msg_doit+0x233/0x340 [ 801.150490][ T2559] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.150515][ T2559] ? __pfx_clockevents_program_event+0x10/0x10 [ 801.150548][ T2559] genl_rcv_msg+0x614/0x7a0 [ 801.150570][ T2559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.150589][ T2559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 801.150613][ T2559] netlink_rcv_skb+0x226/0x4a0 [ 801.150630][ T2559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.150650][ T2559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.150672][ T2559] ? down_read+0x2be/0x330 [ 801.150696][ T2559] genl_rcv+0x28/0x40 [ 801.150715][ T2559] netlink_unicast+0x7bb/0x940 [ 801.150735][ T2559] netlink_sendmsg+0x813/0xb40 [ 801.150755][ T2559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.150775][ T2559] ? aa_sock_msg_perm+0xf1/0x1b0 [ 801.150793][ T2559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.150810][ T2559] sock_sendmsg_nosec+0x13a/0x180 [ 801.150831][ T2559] ____sys_sendmsg+0x54e/0x850 [ 801.150850][ T2559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.150870][ T2559] ? import_iovec+0x73/0xa0 [ 801.150892][ T2559] ___sys_sendmsg+0x2a5/0x360 [ 801.150908][ T2559] ? __lock_acquire+0x683/0x2cf0 [ 801.150929][ T2559] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.150947][ T2559] ? futex_wait+0x2a2/0x390 [ 801.150988][ T2559] ? __fget_files+0x2a/0x420 [ 801.151007][ T2559] ? __fget_files+0x3a2/0x420 [ 801.151029][ T2559] __x64_sys_sendmsg+0x1b1/0x290 [ 801.151048][ T2559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.151072][ T2559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.151089][ T2559] do_syscall_64+0x174/0x580 [ 801.151110][ T2559] ? trace_irq_disable+0x3b/0x140 [ 801.151129][ T2559] ? clear_bhb_loop+0x70/0xc0 [ 801.151146][ T2559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.151162][ T2559] RIP: 0033:0x7fa99839e0d9 [ 801.151180][ T2559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.151194][ T2559] RSP: 002b:00007fa99934c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.151212][ T2559] RAX: ffffffffffffffda RBX: 00007fa998625fa0 RCX: 00007fa99839e0d9 [ 801.151225][ T2559] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 801.151236][ T2559] RBP: 00007fa998435024 R08: 0000000000000000 R09: 0000000000000000 [ 801.151246][ T2559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.151256][ T2559] R13: 00007fa998626038 R14: 00007fa998625fa0 R15: 00007ffc3fe66a48 [ 801.151275][ T2559] [ 801.602884][T22963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 801.727923][T22962] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 801.763021][ T5618] block nbd5: Receive control failed (result -32) [ 801.769896][ T5619] block nbd5: Receive control failed (result -32)