last executing test programs: 9.640174855s ago: executing program 2 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000000)=""/206, &(0x7f0000000440)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 9.417117562s ago: executing program 2 (id=3196): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@local, @private=0xa010102, 0x16, 0x17}}) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 9.300225066s ago: executing program 2 (id=3197): r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, 0x0, 0xf26, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xf]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9.265694758s ago: executing program 2 (id=3198): r0 = socket(0x11, 0x800000003, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x138, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x1, 0xfffffffc, 0x80000001, 0x18000000}}}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0xa2, 0x80000000, 0x2, 0x4, 0x3, 0x9}}, {0x16, 0x2, [0x0, 0x81, 0xff, 0x5, 0xf, 0x2, 0x800, 0x6, 0xf6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x88}}, 0x4c094) 8.955305899s ago: executing program 2 (id=3204): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x44) 8.375917529s ago: executing program 2 (id=3210): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x2a, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000d80)={'syztnl0\x00', r9, 0x80, 0x10, 0x4, 0x4, {{0x15, 0x4, 0x0, 0x33, 0x54, 0x66, 0x0, 0xa, 0x29, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1f, 0xef, [@remote, @multicast2, @local, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @empty]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4c2c36718f"}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x6}]}]}}}}}) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0xb, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xa, 0x4, 0x7, 0x4, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000a00)='GPL\x00', 0x5, 0x97, &(0x7f0000000a40)=""/151, 0x41100, 0x31, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x10, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c40)=[{0x5, 0x5, 0xc, 0xb}, {0x1, 0x1, 0x1, 0x9}, {0x4, 0x4, 0xc, 0x7}, {0x4, 0x1, 0x5}, {0x1, 0x2, 0xd, 0xc}, {0x4, 0x3, 0x10, 0x3}], 0x10, 0x1}, 0x94) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) (async, rerun: 32) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a40000002f00010000000000fcdbdf256a9129aa5c9826aa9c7fb0dc59d2dc520540d6a7768eb1ca34129afe93d19b3396e3a9b7aec8618afaa3f877984ed8871024e29a3f645371f5fe2d83d511e7100d422a3c199e09dacf723eea6324ea36561d1c454e4b2af85d5b74d48da3df28ef680ff59ba8d29e82ef3f8e275f78ef8e1f421dc701ee40e1994c9787425e3b021599d15a5000"], 0xa4}, {&(0x7f0000000580)=ANY=[@ANYBLOB="540400002500589d4f000125bd7000fedbdf25395e0768a929e87bd132a0b6c57bbd0b7282ed685dec577fc49e07d94fa805b7d1fa0abb23f3085446a6a170a51ebc755c5b034ef2fcec861eb1f010510c6b6445e03b8dc7f25490f0fb279039319523fc1b0d3102d00625ee648c1b05a0baf00be426475925fdfc2fd621d28eae750ff8f2ef4307b13b3542008504778c514c500c1aa89b2c5dafd7c3427f7bae9bead39a4e0ce298a13ca68ffa1492c09042c66afd5c4b565d6cddfb02ec8008001f00", @ANYRES32=r3, @ANYBLOB="040009800c006400800000000000000014008a002001000000000000000000000000000108007500", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800fd00", @ANYRES32=r4, @ANYBLOB="0800d000ffffffffd7ba3aad3ee9a240f523ad1eeb63dead3408653e46b6f613922a3d947fd6c2c3fb441ab77b9b1e5fb050cefff1c5b76eb83e4ca987c6bcf34fcb2e54f3852370ba2b47e5e9cac8af956db78206f15280741a85aecc9bb9bd6f555c9b1a8490a30e6e3c37b41ad05b405ffe6f520e059064f8b26f35ac25a09b4d18cf08b2a3f054a4a98fdd0000"], 0x454}], 0x2, 0x0, 0x0, 0x1}, 0x0) 3.381376819s ago: executing program 1 (id=3263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x8, &(0x7f0000000000)="649b4248", 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000001b80)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r4, 0x44e9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={r4, 0x5, 0x81, 0x80c, 0x4, 0x6}, &(0x7f00000003c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000400)={0x200, 0x50c, 0xfffa, 0x3}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0xb}, 0x20) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601021c00000000000000070000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000000000000200000008000700"], 0x1c}}, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5460, 0x96b5376b91506d81) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4cb69e19", @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf257600000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000e0000003c0000000c00580018000000000000000c0058001e000000000000000c0058004a00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 3.132107828s ago: executing program 1 (id=3267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c2400e43a0300", @ANYRES16=r1, @ANYBLOB="010000000000000000004900000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c2400e43a0300", @ANYRES16=r1, @ANYBLOB="010000000000000000004900000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmmsg$sock(r2, 0x0, 0x0, 0x48094) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0xfffffffd) (async) accept4(r3, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) 2.976255157s ago: executing program 1 (id=3271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x21, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991a8", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000018000100000000000000000002600000000000000000fc00"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) 2.759302286s ago: executing program 1 (id=3275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x5}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a63b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600052fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0x2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff45, 0x1, 0x0, 0xfffffffffffffd80}, &(0x7f0000000380)=0x40) 2.740343427s ago: executing program 3 (id=3276): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x84, 0x20, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) 2.609874546s ago: executing program 0 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r1) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x138, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffd, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x47f1, @mcast2, 0x200}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x364b}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x488491c0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r7, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000019c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000200f00000005002d000100000008000600", @ANYRES32=r8, @ANYBLOB="08000b000400000008000300", @ANYRES32=r6, @ANYBLOB="08003b00fb01000008002c000340001008003b0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4f5b49a05239c6fbef284a619e318744000000f210d3e13e068da2b0e9c83267bc839f8559c3071c2cafb9baf32356304e2efd3d5497e310d0cba8cc1ae0a95122c6606a0b087bf306ec9344760da11bf26868269bb295aab70a7b58de25d9d82ae670ecec42be68f12b411298389467cf9407883e29507316b88e41cd169db30553ddd68186e53de0c357a1754591cafc6b19f43d1fb479cec1f9e2edb0ae0820132b863722f1c83f17c0d49d7403b8577e6e1a8965f9b879a164fc7f4b144e57d20192da504d863cafbd086608ede8e48cfea8978bc7fd9adc2a0787dc13391d7b7d2ff47b16bb9c51862e73cbd874f8b65d8e002aad1612b14cf3c3d045504ebc14800d33c1e5cd3d0677459db0e8959d9505d63bd046978ea8b82c569225c21c6a37b788a655c33d8330b168a89e1697b29cc0e63c3224c6cf7cacf74faf75f30d0d10ae3bf7839c7fcc", @ANYRES16=r5, @ANYBLOB="00042bbd7000fcdbdf250f000000050033000000000008000600", @ANYRES32=r9, @ANYBLOB="08003c00a40000000800390008000000050029000100000008002b0000020000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2f8f90fe", @ANYRES16=r10, @ANYBLOB="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"], 0x11e0}, 0x1, 0x0, 0x0, 0x20040811}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8994, &(0x7f0000000200)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r11 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=0x60) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r13) ioctl$sock_SIOCGSKNS(r12, 0x894c, &(0x7f0000000440)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$cgroup_ro(r2, &(0x7f0000001d00)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002abd7000fedbdf25090000000800030018b2367553489d8ad69a1f9605acbddaf5d7368123a43c30dad995e184c4bab47252c8dd4bca52999db97a73ace5", @ANYRES32=r14, @ANYBLOB='\b\x007\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) 2.467765787s ago: executing program 3 (id=3279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x311000, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0xffffffffffffff9c, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) 2.431364911s ago: executing program 4 (id=3280): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008041}, 0x4081) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000040)="05000000010000", 0x7) (async) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x88f4, 0x12) (async) socket(0x11, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x54, r8, 0x1, 0x20000006, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010000000030000000300000000200000000000000000000030000000004000000030000070000000026ae9fe5154adc9ed6880a0000000000000002010000000700000000008c0bcaa45de5ee0e7c1a8d3291883ac18c78754a69f7824a4f87bec2862f9ab42378053ba10ec3909d7f2fc3031c6eec86f3d318b2b3beba58873fed52989373647606c13f49ca9a3a27a227fce3980c7a0a039657a0aa1c8131ddd87516b8378aa40c0bc7546ba77a024f349f7681f4ba8a67543f18cac05db62dd29e046a4d544b8239115659d13f97c97e1256fa7a14f70e2f6de3d75ca4f8f29195d8096562c70df781d82d1755785088278eebd76efb35d035"], 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r12) (async) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) 2.2801503s ago: executing program 4 (id=3281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f00000001c0)={'virt_wifi0\x00', @random="0100"}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) 1.669479175s ago: executing program 0 (id=3282): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x4, 0x3]}]}, 0x30}}, 0x811) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 858.579952ms ago: executing program 4 (id=3283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) (async) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) (async) listen(r1, 0x0) (async) r4 = accept$inet6(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x60}}, 0x0) 783.966646ms ago: executing program 0 (id=3284): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="6ba7356bfca0", @ANYBLOB="3207cb2a328bd7c2d8bdf332b5a7ddfb20a7e65f8a7864b6c83308171ea57f41e35be8da6ec8d229ea52cd2e1ebb4565208ecb128573576c5fd0758106436f4997c28ba3ecd2e1e42fe2d930712fc17ac34f359cc606f68ae88f6f0879b54b137d2a72350cf1b69b01806bc9c8c96e73df6f363935", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r8, r7, 0x0, 0xe25) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 783.503482ms ago: executing program 1 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) read(r1, &(0x7f0000000300)=""/165, 0xa5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0xc1) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000a40), &(0x7f0000000a80)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x302) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'bond0\x00', @broadcast}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r4}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 719.707882ms ago: executing program 3 (id=3286): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 635.241271ms ago: executing program 4 (id=3287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) connect(r2, &(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x0, @mcast2, 0x4e2}}}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x700, 0x8, 0x3, 0x0, {{0x1f, 0x4, 0x0, 0x2b, 0x7c, 0x64, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@end, @end, @generic={0x89, 0x5, "ca5efd"}, @ra={0x94, 0x4}, @cipso={0x86, 0x5d, 0x7, [{0x0, 0x5, "c88298"}, {0x1, 0xd, "ee0101c75df66412659d4e"}, {0x0, 0xf, "d4183ec38cb5916d2f5dd3b842"}, {0x6, 0x6, "cc38de34"}, {0x1, 0x12, "50f0abc6021b5d3d5cee26f0bcb02c9b"}, {0x2, 0x2}, {0x7, 0xd, "b14f84dc99749af1630418"}, {0x2, 0x6, "da28f60e"}, {0x5, 0x9, "086deca2370c9d"}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@broadcast, @empty, 0x0}, &(0x7f0000000940)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x2, 0x1, {{0x10, 0x4, 0x3, 0x14, 0x40, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x8, 0xd5, 0x0, 0x8, [0x0]}, @rr={0x7, 0x1f, 0x13, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @local, @rand_addr=0x64010101, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x7, 0x10, 0xe25, 0x14, {{0x1f, 0x4, 0x0, 0x3, 0x7c, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x12, "f9278cd21926b81da7ee4864a9701439"}, @ssrr={0x89, 0xb, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xa4, 0x0, 0x2, [0x6b48, 0x4, 0x6fd]}, @rr={0x7, 0x13, 0x4c, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x39}, @empty]}, @noop, @timestamp_addr={0x44, 0x24, 0x42, 0x1, 0x9, [{@multicast2, 0x6}, {@empty, 0xfe01}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x128, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004080}, 0x4008014) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r13, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f00000007c0)=""/70, 0x46}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) r15 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d616300"/40], 0x40}}, 0x0) 535.316464ms ago: executing program 0 (id=3288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x244, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1fc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1e4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x138, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x109, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x78, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x25, 0x6, "df76640d30b6ba21699aad3d084f7f7fa20bd027b7de9f27132e342ff43eb10f6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 435.523924ms ago: executing program 0 (id=3289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r5, &(0x7f0000000080)=""/22, 0x16) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffecc, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 428.342261ms ago: executing program 3 (id=3290): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 296.243823ms ago: executing program 4 (id=3291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet6(0xa, 0x1, 0x4000ffa) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 276.178046ms ago: executing program 0 (id=3292): r0 = socket(0xa, 0x3, 0x9) (async, rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @multicast, @void, {@canfd={0xd, {{}, 0x3e, 0x1, 0x0, 0x0, "f338a56ca8ce7fc7f089d900e022fb629f0e61c04433650c689c4b4502fcf8353307d781ff138294785d67bb375bbf538cd6db9df00399a3c9fd2195062d7a3e"}}}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+%$+(%&\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2c000040) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20044040) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x3}, 0x8) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) (rerun: 32) write$tun(r6, &(0x7f0000000100)={@val={0x0, 0x22f0}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast1}}, 0x38) (async) getsockopt$nfc_llcp(r0, 0x29, 0x24, 0x0, 0x2000005d) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000500)={0xff}, 0x1) 260.675159ms ago: executing program 3 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c0000de69755234d95cbc4d9cdf26c8e82500000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 120.142822ms ago: executing program 3 (id=3294): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 33.440286ms ago: executing program 4 (id=3295): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x33) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480), 0x3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbff, 0x4040}, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x1}}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @fwd={0xb}]}, {0x0, [0x5f]}}, &(0x7f0000000040)=""/6, 0x5b, 0x6, 0x1}, 0x28) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x110000, 'syz0\x00', @null, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x101, 0x0, r4, 0x7fff, '\x00', 0x0, r6, 0x1, 0x4}, 0x50) 0s ago: executing program 1 (id=3296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000006000000000008005800000000000e0001006e657464657673696d00efff0f0002646e657464657673698cf50000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): [ 267.735622][T13117] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 267.815508][T13127] openvswitch: netlink: IP tunnel dst address not specified [ 267.877294][T13130] xt_CONNSECMARK: invalid mode: 0 [ 268.005981][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.026187][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 268.127932][T13145] x_tables: duplicate entry at hook 3 [ 268.134558][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 268.164941][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.255853][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 268.294755][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.343948][T13162] __nla_validate_parse: 11 callbacks suppressed [ 268.343970][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 268.357536][T13164] tipc: Resetting bearer [ 268.395742][T13163] tipc: Resetting bearer [ 268.425610][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 268.438668][T13168] batadv1: entered allmulticast mode [ 268.468316][T13166] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.493745][T13171] batadv1: entered allmulticast mode [ 268.528043][T13174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2068'. [ 268.605220][T13181] tipc: Resetting bearer [ 268.701789][T13183] tipc: Resetting bearer [ 269.715369][ T7082] tipc: Resetting bearer [ 272.714871][ T36] net_ratelimit: 77 callbacks suppressed [ 272.714892][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 272.734455][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 272.834376][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 272.844274][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 272.944380][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 272.954276][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 273.054278][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 273.064211][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 273.164267][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 273.174270][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 277.794336][ T7082] net_ratelimit: 82 callbacks suppressed [ 277.794356][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 277.824247][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 277.914489][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 277.934398][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 278.025292][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 278.044296][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 278.134526][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 278.154457][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 278.244451][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 278.264294][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 282.864397][ T7087] net_ratelimit: 82 callbacks suppressed [ 282.864418][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 282.894389][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 282.984430][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 283.004421][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 283.094423][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 283.114374][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 283.204517][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 283.224772][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 283.316014][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 283.334569][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 287.954414][ T7084] net_ratelimit: 82 callbacks suppressed [ 287.954436][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 287.984226][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 288.074447][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 288.094325][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 288.184322][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 288.204298][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 288.294307][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 288.314546][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 288.404454][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 288.424264][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.044480][ T36] net_ratelimit: 82 callbacks suppressed [ 293.044520][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.064208][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 293.164450][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.174354][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 293.274298][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.284304][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 293.384310][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.394319][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 293.494268][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 293.504322][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 294.496657][T13213] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 294.547580][T13213] bond6 (unregistering): Released all slaves [ 294.661948][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 294.800193][T13239] netem: change failed [ 294.816174][T12895] lo speed is unknown, defaulting to 1000 [ 294.995829][T13248] validate_nla: 1 callbacks suppressed [ 294.995848][T13248] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 295.051403][T13248] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 295.137835][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 295.173774][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 295.257773][T13263] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2095'. [ 295.867919][T13306] netlink: 'syz.2.2105': attribute type 11 has an invalid length. [ 295.880007][T13304] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 295.890121][T13306] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.2105'. [ 296.120101][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'. [ 296.184429][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 296.239361][T13325] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2111'. [ 296.313484][T13330] tipc: Enabled bearer , priority 0 [ 296.354988][T13330] syzkaller0: entered allmulticast mode [ 296.366317][T13330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.409379][T13330] tipc: Resetting bearer [ 296.451013][T13329] tipc: Disabling bearer [ 296.507886][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 296.604438][T13350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2117'. [ 296.894922][T13372] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 296.925114][T13375] x_tables: duplicate underflow at hook 1 [ 296.977015][T13372] bond6: entered promiscuous mode [ 296.983171][T13372] bond6: entered allmulticast mode [ 296.992378][T13372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.048487][T13383] syzkaller0: refused to change device tx_queue_len [ 297.128201][T13381] macvlan3: entered promiscuous mode [ 297.133549][T13381] macvlan3: entered allmulticast mode [ 297.178684][T13393] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 297.188397][T13381] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 297.389404][T13396] delete_channel: no stack [ 297.703577][T13391] netlink: 'syz.0.2128': attribute type 1 has an invalid length. [ 297.713330][T13391] NCSI netlink: No device for ifindex 0 [ 297.937883][T13429] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 298.030484][T13429] bond6: entered promiscuous mode [ 298.041328][T13438] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 298.062476][T13429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.122796][T13437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.130043][T13437] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 298.140662][T13437] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 298.155602][T13437] bond6: (slave gre1): making interface the new active one [ 298.169254][T13437] gre1: entered promiscuous mode [ 298.176770][T13437] bond6: (slave gre1): Enslaving as an active interface with an up link [ 298.191812][T13440] vlan2: entered allmulticast mode [ 298.197552][T13440] bridge_slave_0: entered allmulticast mode [ 298.230843][T13438] bridge6: entered promiscuous mode [ 298.237422][T13438] bridge6: entered allmulticast mode [ 298.304367][ T3492] net_ratelimit: 135 callbacks suppressed [ 298.304386][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.365751][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 298.454259][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.494567][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 298.564189][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.624188][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 298.716415][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.734552][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 298.842168][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.895086][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 298.907979][T13506] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 298.919602][T13506] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 299.193143][T13520] delete_channel: no stack [ 299.351663][T13545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.394650][T13544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.401783][T13544] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.413612][T13544] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 299.559375][T13562] sctp: [Deprecated]: syz.3.2180 (pid 13562) Use of int in maxseg socket option. [ 299.559375][T13562] Use struct sctp_assoc_value instead [ 299.610949][T13549] bond0 (unregistering): left promiscuous mode [ 299.619107][T13549] bond_slave_0: left promiscuous mode [ 299.625056][T13549] bond_slave_1: left promiscuous mode [ 299.630728][T13549] bond1: left promiscuous mode [ 299.637429][T13549] geneve1: left promiscuous mode [ 299.646843][T13549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.660956][T13549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.678668][T13549] bond0 (unregistering): (slave bond1): Releasing backup interface [ 299.693576][T13549] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 299.709065][T13549] bond0 (unregistering): Released all slaves [ 299.727584][T13546] tun0: tun_chr_ioctl cmd 1074025675 [ 299.733129][T13546] tun0: persist disabled [ 300.091320][T13589] __nla_validate_parse: 10 callbacks suppressed [ 300.091338][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 300.151342][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 300.178419][T13595] syzkaller0: entered promiscuous mode [ 300.184128][T13595] syzkaller0: entered allmulticast mode [ 300.229520][T13598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2190'. [ 300.249774][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2191'. [ 300.481310][T13610] netlink: 'syz.1.2194': attribute type 8 has an invalid length. [ 300.523978][T13613] delete_channel: no stack [ 301.078762][T13655] syzkaller0: entered promiscuous mode [ 301.099345][T13655] syzkaller0: entered allmulticast mode [ 301.222279][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 301.259672][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 301.269581][T13664] netlink: 'syz.0.2211': attribute type 1 has an invalid length. [ 301.424881][T13685] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 301.499272][T13690] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 301.510084][T13690] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 301.522306][T13690] bond7: (slave xfrm1): making interface the new active one [ 301.531354][T13690] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 301.540178][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.560468][T13685] bond7 (unregistering): (slave xfrm1): Releasing backup interface [ 301.589412][T13685] bond7 (unregistering): Released all slaves [ 301.739514][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2222'. [ 301.851364][T13709] raw_sendmsg: syz.4.2225 forgot to set AF_INET. Fix it! [ 301.866674][T13714] netlink: 'syz.3.2224': attribute type 12 has an invalid length. [ 301.962880][T13714] bond7: option primary_reselect: invalid value (255) [ 301.974829][T13721] netlink: 'syz.1.2227': attribute type 13 has an invalid length. [ 302.000883][T13714] bond7 (unregistering): Released all slaves [ 302.031164][T13721] veth0_macvtap: left promiscuous mode [ 302.037796][T13725] netlink: 'syz.1.2227': attribute type 4 has an invalid length. [ 302.058005][T13721] macvtap0: entered allmulticast mode [ 302.088968][T13721] macvtap0: refused to change device tx_queue_len [ 302.189161][T13729] IPVS: length: 38 != 24 [ 302.205326][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 302.306626][T13743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 302.675291][T13779] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 302.713645][T13773] tipc: Enabling of bearer rejected, already enabled [ 303.305121][T13829] wg1 speed is unknown, defaulting to 1000 [ 303.316537][T13829] lo speed is unknown, defaulting to 1000 [ 303.355615][ T3492] net_ratelimit: 63 callbacks suppressed [ 303.355634][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.384313][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 303.486291][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.505765][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 303.604361][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 303.705606][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 303.845257][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 304.084337][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.092478][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 304.214195][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.280302][T13873] dvmrp0: entered allmulticast mode [ 304.288995][T13873] dvmrp0: left allmulticast mode [ 304.314596][T13873] syz_tun: left allmulticast mode [ 304.992983][T13917] netlink: 'syz.1.2281': attribute type 11 has an invalid length. [ 305.176652][T13934] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 305.196833][T13934] __nla_validate_parse: 16 callbacks suppressed [ 305.196850][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 305.272526][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 305.283456][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2286'. [ 305.299277][T13936] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.497697][T13960] netlink: 'syz.1.2290': attribute type 17 has an invalid length. [ 305.670879][T13960] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.889838][T13984] erspan0: entered promiscuous mode [ 305.903480][T13984] erspan0: entered allmulticast mode [ 305.963571][T13986] veth0: entered promiscuous mode [ 306.005194][T13985] veth0: left promiscuous mode [ 306.396838][T14021] netlink: 'syz.2.2309': attribute type 10 has an invalid length. [ 306.424998][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2309'. [ 306.474976][T14021] batadv0: entered promiscuous mode [ 306.487299][T14021] batadv0: entered allmulticast mode [ 306.498634][T14021] bridge0: port 3(batadv0) entered blocking state [ 306.505968][T14021] bridge0: port 3(batadv0) entered disabled state [ 306.516823][T14021] bridge0: port 3(batadv0) entered blocking state [ 306.523420][T14021] bridge0: port 3(batadv0) entered forwarding state [ 306.536859][T14027] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 306.638874][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 306.656355][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 306.732145][T14033] bond0: (slave bond_slave_1): Releasing backup interface [ 306.827493][T14049] sctp: [Deprecated]: syz.2.2316 (pid 14049) Use of int in maxseg socket option. [ 306.827493][T14049] Use struct sctp_assoc_value instead [ 306.901612][T14051] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 306.927669][T14051] team0: Device macvtap0 is already an upper device of the team interface [ 307.008411][ T7087] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 307.018994][ T7087] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 307.035986][T14059] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2322'. [ 307.136548][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'. [ 307.201752][T14073] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 307.221559][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 307.226424][T14067] tipc: Enabled bearer , priority 0 [ 307.322802][T14082] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 307.326107][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'. [ 307.334846][T14082] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 307.417707][T14066] tipc: Disabling bearer [ 307.498829][T14093] netlink: 'syz.0.2332': attribute type 4 has an invalid length. [ 307.537988][T14073] bond7: (slave bridge3): Enslaving as an active interface with a down link [ 307.564053][T14082] bond7: (slave gretap2): making interface the new active one [ 307.580931][T14082] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 307.849853][T14111] bond7: entered allmulticast mode [ 307.958732][T14117] veth1_to_batadv: entered allmulticast mode [ 308.366016][ T3492] net_ratelimit: 50 callbacks suppressed [ 308.366036][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 308.404985][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.495255][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 308.516610][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.552590][T14166] IPVS: Error connecting to the multicast addr [ 308.616573][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 308.741896][T14177] block nbd2: Unsupported socket: should be TCP or UNIX. [ 308.864782][T14171] team0 (unregistering): Port device team_slave_0 removed [ 308.895705][T14171] team0 (unregistering): Port device team_slave_1 removed [ 308.909858][T14171] team0 (unregistering): Port device veth0_virt_wifi removed [ 308.950980][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 308.969320][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.064217][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 309.104164][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.125940][T14194] xt_hashlimit: size too large, truncated to 1048576 [ 309.194438][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 309.248304][T14200] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 309.302434][T14204] syz.1.2362 uses old SIOCAX25GETINFO [ 309.570978][T14218] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 309.899562][T14242] C: renamed from lo [ 309.996570][T14247] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 310.177507][T14257] gretap0: entered promiscuous mode [ 310.209739][T14257] __nla_validate_parse: 14 callbacks suppressed [ 310.209759][T14257] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2380'. [ 310.252020][T14257] 0{X: renamed from gretap0 [ 310.292768][T14257] 0{X: left promiscuous mode [ 310.307104][T14257] 0{X: entered allmulticast mode [ 310.397308][T14274] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 310.793539][T14299] : renamed from bridge_slave_0 (while UP) [ 310.851313][T14299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2388'. [ 310.966560][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 311.112391][T14311] syzkaller0: entered promiscuous mode [ 311.118125][T14311] syzkaller0: entered allmulticast mode [ 311.159385][T14318] bond8: entered promiscuous mode [ 311.164746][T14318] bond8: entered allmulticast mode [ 311.171662][T14318] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.538522][T14335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2403'. [ 311.659543][T14345] tipc: Enabling of bearer rejected, already enabled [ 311.701374][T14345] tipc: Resetting bearer [ 311.723174][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2405'. [ 311.796339][T14354] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 311.804897][T14354] bridge_slave_1: left allmulticast mode [ 311.815253][T14354] bridge_slave_1: left promiscuous mode [ 311.821547][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.838067][T14354] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 311.977376][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2411'. [ 312.008543][T14367] dvmrp0: entered allmulticast mode [ 312.539150][T14415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2422'. [ 312.557321][T14410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.821193][T14433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2429'. [ 312.888973][T14433] netlink: 'syz.2.2429': attribute type 19 has an invalid length. [ 312.910045][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 312.916687][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2430'. [ 312.943624][T14440] v: renamed from vlan0 [ 313.049391][T14451] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 313.248025][T14467] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 313.256996][T14467] syz_tun: entered promiscuous mode [ 313.338009][T14477] xt_ipcomp: unknown flags 1D [ 313.394549][ T36] net_ratelimit: 65 callbacks suppressed [ 313.394567][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.444252][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 313.475938][T14488] x_tables: duplicate underflow at hook 1 [ 313.535267][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.574879][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 313.648081][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.735693][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 313.774269][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.849784][T14516] tipc: Resetting bearer [ 313.862888][T14516] syzkaller0: entered promiscuous mode [ 313.886025][T14516] syzkaller0: entered allmulticast mode [ 313.914324][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 313.934423][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.988696][T14515] tipc: Resetting bearer [ 314.004263][T14510] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 314.005822][T14506] pim6reg1: entered promiscuous mode [ 314.055512][T14506] pim6reg1: entered allmulticast mode [ 314.408490][ T36] tipc: Resetting bearer [ 314.678239][T14553] IPVS: persistence engine module ip_vs_pe_ not found [ 315.029118][T14578] bond11: Removing last ns target with arp_interval on [ 315.062340][T14583] pim6reg: entered allmulticast mode [ 315.288311][T14604] __nla_validate_parse: 154 callbacks suppressed [ 315.288329][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2479'. [ 315.293482][T14608] syz.2.2481: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.336081][T14608] CPU: 1 UID: 0 PID: 14608 Comm: syz.2.2481 Not tainted syzkaller #0 PREEMPT(full) [ 315.336108][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.336126][T14608] Call Trace: [ 315.336134][T14608] [ 315.336142][T14608] dump_stack_lvl+0x189/0x250 [ 315.336176][T14608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.336200][T14608] ? __pfx__printk+0x10/0x10 [ 315.336219][T14608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.336244][T14608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.336270][T14608] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 315.336297][T14608] warn_alloc+0x214/0x310 [ 315.336323][T14608] ? stack_depot_save_flags+0x40/0x860 [ 315.336348][T14608] ? __cgroup_account_cputime+0xe5/0x120 [ 315.336372][T14608] ? __pfx_warn_alloc+0x10/0x10 [ 315.336400][T14608] ? kasan_save_track+0x3e/0x80 [ 315.336422][T14608] ? __kasan_kmalloc+0x93/0xb0 [ 315.336448][T14608] ? xsk_setsockopt+0x4dc/0x8d0 [ 315.336468][T14608] ? do_sock_setsockopt+0x17c/0x1b0 [ 315.336484][T14608] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 315.336500][T14608] ? do_syscall_64+0xfa/0xfa0 [ 315.336523][T14608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.336552][T14608] __vmalloc_node_range_noprof+0x125/0x12d0 [ 315.336610][T14608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.336646][T14608] ? __kasan_kmalloc+0x93/0xb0 [ 315.336677][T14608] vmalloc_user_noprof+0xad/0xf0 [ 315.336703][T14608] ? xskq_create+0xbf/0x170 [ 315.336727][T14608] xskq_create+0xbf/0x170 [ 315.336754][T14608] xsk_init_queue+0xb0/0x110 [ 315.336779][T14608] xsk_setsockopt+0x4dc/0x8d0 [ 315.336804][T14608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 315.336829][T14608] ? __pfx_aa_sk_perm+0x10/0x10 [ 315.336855][T14608] ? aa_sock_opt_perm+0xff/0x1b0 [ 315.336882][T14608] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 315.336899][T14608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 315.336922][T14608] do_sock_setsockopt+0x17c/0x1b0 [ 315.336946][T14608] __x64_sys_setsockopt+0x13f/0x1b0 [ 315.336971][T14608] do_syscall_64+0xfa/0xfa0 [ 315.336990][T14608] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.337013][T14608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.337030][T14608] ? clear_bhb_loop+0x60/0xb0 [ 315.337051][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.337069][T14608] RIP: 0033:0x7f621358f6c9 [ 315.337094][T14608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.337109][T14608] RSP: 002b:00007f6214458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.337130][T14608] RAX: ffffffffffffffda RBX: 00007f62137e5fa0 RCX: 00007f621358f6c9 [ 315.337144][T14608] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 315.337155][T14608] RBP: 00007f6213611f91 R08: 0000000000000004 R09: 0000000000000000 [ 315.337166][T14608] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.337178][T14608] R13: 00007f62137e6038 R14: 00007f62137e5fa0 R15: 00007ffee752f238 [ 315.337212][T14608] [ 315.337223][T14608] Mem-Info: [ 315.416141][T14612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2484'. [ 315.422202][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 315.434029][T14608] active_anon:4750 inactive_anon:0 isolated_anon:0 [ 315.434029][T14608] active_file:2757 inactive_file:39945 isolated_file:0 [ 315.434029][T14608] unevictable:768 dirty:117 writeback:0 [ 315.434029][T14608] slab_reclaimable:11945 slab_unreclaimable:135385 [ 315.434029][T14608] mapped:29009 shmem:1357 pagetables:1142 [ 315.434029][T14608] sec_pagetables:0 bounce:0 [ 315.434029][T14608] kernel_misc_reclaimable:0 [ 315.434029][T14608] free:1293408 free_pcp:14250 free_cma:0 [ 315.637040][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 315.664136][T14608] Node 0 active_anon:19100kB inactive_anon:0kB active_file:11028kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116036kB dirty:468kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13496kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.766842][T14608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.802425][T14608] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.834194][T14608] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 315.840135][T14608] Node 0 DMA32 free:1261088kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18900kB inactive_anon:0kB active_file:11028kB inactive_file:159576kB unevictable:1536kB writepending:468kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:40940kB local_pcp:19924kB free_cma:0kB [ 315.875078][T14608] lowmem_reserve[]: 0 0 0 0 0 [ 315.880699][T14608] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.972676][T14608] lowmem_reserve[]: 0 0 0 0 0 [ 315.990305][T14629] syzkaller0: entered promiscuous mode [ 316.003736][T14608] Node 1 Normal free:3896800kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16416kB local_pcp:9248kB free_cma:0kB [ 316.038982][T14629] syzkaller0: entered allmulticast mode [ 316.069512][T14608] lowmem_reserve[]: 0 0 0 0 0 [ 316.089764][T14608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.148402][T14635] can: request_module (can-proto-0) failed. [ 316.156724][T14608] Node 0 DMA32: 677*4kB (M) 116*8kB (M) 2*16kB (UM) 465*32kB (UME) 534*64kB (UME) 119*128kB (UM) 17*256kB (UM) 12*512kB (UME) 6*1024kB (ME) 4*2048kB (UE) 282*4096kB (M) = 1247860kB [ 316.178135][T14608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.192856][T14608] Node 1 Normal: 190*4kB (UME) 51*8kB (UME) 49*16kB (UME) 150*32kB (UME) 40*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3896800kB [ 316.267353][T14608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.293477][T14647] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2493'. [ 316.306701][T14608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.331336][T14608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.369665][T14608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.406792][T14608] 44055 total pagecache pages [ 316.411574][T14608] 0 pages in swap cache [ 316.434920][T14608] Free swap = 124996kB [ 316.439118][T14608] Total swap = 124996kB [ 316.454190][T14608] 2097051 pages RAM [ 316.458046][T14608] 0 pages HighMem/MovableOnly [ 316.467460][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 316.476734][T14608] 424119 pages reserved [ 316.480911][T14608] 0 pages cma reserved [ 316.485345][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 316.532411][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 316.621396][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 316.630914][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2498'. [ 317.170539][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.364150][T14665] tipc: Enabling of bearer rejected, already enabled [ 318.373103][T14675] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 318.406418][ T7077] net_ratelimit: 43 callbacks suppressed [ 318.406440][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.435625][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 318.545566][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.574654][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 318.675277][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.713540][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 318.789216][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2508'. [ 318.799021][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.825686][ T30] audit: type=1800 audit(1762892395.490:7): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2508" name="cgroup.controllers" dev="tmpfs" ino=2677 res=0 errno=0 [ 318.857493][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 318.915945][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 318.974776][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 320.307485][T14775] tipc: Resetting bearer [ 320.467337][T14772] tipc: Resetting bearer [ 320.492497][ T36] tipc: Resetting bearer [ 320.565946][T14785] batadv_slave_1: entered promiscuous mode [ 320.579257][T14784] batadv_slave_1: left promiscuous mode [ 320.666511][T14797] netlink: 'syz.2.2535': attribute type 4 has an invalid length. [ 320.714633][T14797] __nla_validate_parse: 2 callbacks suppressed [ 320.714649][T14797] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2535'. [ 320.785801][T14803] netlink: 'syz.3.2537': attribute type 33 has an invalid length. [ 320.809621][T14803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2537'. [ 320.867010][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'. [ 321.149914][T14830] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 321.178185][T14829] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 321.190398][T14830] netlink: 'syz.0.2545': attribute type 3 has an invalid length. [ 321.209890][T14829] netlink: 'syz.0.2545': attribute type 3 has an invalid length. [ 321.237480][T14829] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2545'. [ 321.258083][T14830] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2545'. [ 321.392869][T14844] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 321.496759][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 321.646730][T14859] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.654474][T14859] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2555'. [ 321.663731][T14859] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2555'. [ 321.676075][T14859] veth0_to_bond: entered allmulticast mode [ 321.708239][T14859] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 321.748147][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'. [ 321.833431][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 322.026891][T14884] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 322.434489][T14912] delete_channel: no stack [ 322.850747][T14933] netlink: 'syz.1.2576': attribute type 3 has an invalid length. [ 322.977251][T14939] xt_TCPMSS: Only works on TCP SYN packets [ 323.001139][T14944] tipc: Enabling of bearer rejected, already enabled [ 323.167526][T14954] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 323.244033][T14959] netlink: 'syz.3.2584': attribute type 17 has an invalid length. [ 323.273678][T14954] `: (slave geneve1): Enslaving as an active interface with an up link [ 323.338240][T14963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 323.361694][T14959] gretap0: entered promiscuous mode [ 323.394547][T14959] gretap0: left promiscuous mode [ 323.420691][T14960] v: renamed from vlan0 (while UP) [ 323.497290][ T7077] net_ratelimit: 70 callbacks suppressed [ 323.497310][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 323.554815][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 323.664258][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 323.731352][T14976] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 323.775544][T14976] bond9 (unregistering): Released all slaves [ 323.803051][T14992] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 323.876537][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 323.918924][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 324.015590][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 324.039221][ T5151] Bluetooth: hci0: command tx timeout [ 324.054658][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 324.124243][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 324.184194][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 324.224933][T15016] xt_hashlimit: size too large, truncated to 1048576 [ 324.265296][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 324.731995][T15041] sctp: [Deprecated]: syz.1.2609 (pid 15041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.731995][T15041] Use struct sctp_sack_info instead [ 324.743206][ T30] audit: type=1800 audit(1762892401.400:8): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2611" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2925 res=0 errno=0 [ 325.339773][T15059] bond12: entered promiscuous mode [ 325.386452][T15059] bond12: entered allmulticast mode [ 325.392259][T15059] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.402371][T15065] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 326.091920][T15128] __nla_validate_parse: 22 callbacks suppressed [ 326.091936][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 326.169926][T15128] bridge0: port 3(batadv0) entered disabled state [ 326.225206][T15128] bridge_slave_1: left allmulticast mode [ 326.242919][T15128] bridge_slave_1: left promiscuous mode [ 326.250889][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.280315][T15128] bridge_slave_0: left allmulticast mode [ 326.294629][T15128] bridge_slave_0: left promiscuous mode [ 326.302247][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.501598][T15149] netlink: 'syz.0.2637': attribute type 15 has an invalid length. [ 326.510559][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 326.514051][T15148] tipc: Enabled bearer , priority 0 [ 326.543129][ T1093] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 326.543265][T15149] netlink: 'syz.0.2637': attribute type 15 has an invalid length. [ 326.563726][ T1093] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 326.603520][ T1093] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 326.615996][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 326.646220][T15148] tipc: Disabling bearer [ 326.673449][ T1093] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 326.682540][T15158] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 326.734803][T15158] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2640'. [ 326.822279][T15169] tipc: Enabling of bearer rejected, already enabled [ 326.849514][T15168] tipc: Enabling of bearer rejected, already enabled [ 326.922258][T15176] Z7nz>RA: renamed from lo (while UP) [ 327.010059][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 327.084977][T15188] pim6reg1: entered promiscuous mode [ 327.104239][T15188] pim6reg1: entered allmulticast mode [ 327.303128][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'. [ 327.369634][T15208] bridge_slave_1: entered promiscuous mode [ 327.546599][T12895] hid-generic 0005:0007:5507.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 327.808578][T15242] netlink: 'syz.1.2661': attribute type 1 has an invalid length. [ 327.839315][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'. [ 327.981658][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 327.996924][T15244] veth5: entered allmulticast mode [ 328.197026][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 328.263077][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 328.352295][T15265] tipc: Enabled bearer , priority 0 [ 328.368489][T15266] syzkaller0: entered promiscuous mode [ 328.376566][T15266] syzkaller0: entered allmulticast mode [ 328.506555][T15266] tipc: Resetting bearer [ 328.612091][T15266] tipc: Disabling bearer [ 328.644586][ T36] net_ratelimit: 44 callbacks suppressed [ 328.644616][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.694751][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 328.716382][T15285] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 328.774221][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.828209][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 328.884212][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.901930][T15282] scsi_nl_rcv_msg: discarding partial skb [ 328.974327][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 329.016847][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 329.084230][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 329.155907][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 329.586996][T15326] netlink: 'syz.2.2687': attribute type 5 has an invalid length. [ 329.931451][T15355] xt_TCPMSS: Only works on TCP SYN packets [ 329.940361][T15351] netlink: 'syz.1.2694': attribute type 83 has an invalid length. [ 330.203269][T15371] netlink: 'syz.4.2703': attribute type 20 has an invalid length. [ 330.226617][T15371] netlink: 'syz.4.2703': attribute type 20 has an invalid length. [ 330.721414][T15399] netlink: 'syz.0.2711': attribute type 5 has an invalid length. [ 331.564576][T15451] __nla_validate_parse: 16 callbacks suppressed [ 331.564593][T15451] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2725'. [ 331.700975][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 331.809440][T15467] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2731'. [ 331.939560][T15477] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 331.953189][T15477] netlink: 'syz.4.2736': attribute type 2 has an invalid length. [ 332.059364][T15486] x_tables: duplicate underflow at hook 2 [ 332.076554][T15485] x_tables: duplicate underflow at hook 2 [ 332.108988][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 332.187853][T15498] netlink: 'syz.1.2740': attribute type 4 has an invalid length. [ 332.565767][T15523] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 332.590252][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 332.634692][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 332.746583][T15532] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.913634][T15532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.935426][T15532] bond_slave_0: left promiscuous mode [ 332.948051][T15532] bond0 (unregistering): Released all slaves [ 334.535963][ T7082] net_ratelimit: 61 callbacks suppressed [ 334.535982][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.594569][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 334.654465][T15576] xt_hashlimit: size too large, truncated to 1048576 [ 334.677917][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.724362][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 334.727687][T15579] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2763'. [ 334.838210][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 334.882668][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.917300][T15586] syzkaller0: entered promiscuous mode [ 334.938426][T15586] syzkaller0: entered allmulticast mode [ 335.014205][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 335.034467][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.134205][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 335.184480][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.311401][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.321736][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.330637][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.339147][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.347539][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.397383][T15610] wg1 speed is unknown, defaulting to 1000 [ 335.416507][T15610] Z7nz>RA speed is unknown, defaulting to 1000 [ 335.425608][T15614] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2771'. [ 335.825367][T15632] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2775'. [ 336.063276][T15648] ieee802154 phy1 wpan1: encryption failed: -126 [ 336.359421][T15610] chnl_net:caif_netlink_parms(): no params data found [ 336.758300][T15663] siw: device registration error -23 [ 336.909908][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.945170][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.962932][T15610] bridge_slave_0: entered allmulticast mode [ 336.976134][T15610] bridge_slave_0: entered promiscuous mode [ 336.997794][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.015585][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.032879][T15610] bridge_slave_1: entered allmulticast mode [ 337.051541][T15610] bridge_slave_1: entered promiscuous mode [ 337.128036][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.144998][T15687] netlink: 'syz.1.2790': attribute type 9 has an invalid length. [ 337.166463][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.272169][T15610] team0: Port device team_slave_0 added [ 337.295400][T15610] team0: Port device team_slave_1 added [ 337.399452][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.412194][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.439940][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.456083][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.463346][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.474313][ T5845] Bluetooth: hci5: command tx timeout [ 337.504312][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.516580][T15698] syzkaller0: entered promiscuous mode [ 337.522411][T15698] syzkaller0: entered allmulticast mode [ 337.653095][T15610] hsr_slave_0: entered promiscuous mode [ 337.667835][T15610] hsr_slave_1: entered promiscuous mode [ 337.684803][T15610] debugfs: 'hsr0' already exists in 'hsr' [ 337.691192][T15610] Cannot create hsr debugfs directory [ 337.846639][T15707] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 337.905556][ T1093] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.914262][T15706] __nla_validate_parse: 2 callbacks suppressed [ 337.914280][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 337.914302][T15706] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2795'. [ 338.072812][ T1093] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.097190][ T1093] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.140691][T15712] tipc: Enabled bearer , priority 0 [ 338.153777][T15712] syzkaller0: entered promiscuous mode [ 338.160320][T15712] syzkaller0: entered allmulticast mode [ 338.177071][ T1093] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.192091][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2797'. [ 338.215194][T15712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2797'. [ 338.229444][T15723] tipc: Enabling of bearer rejected, failed to enable media [ 338.307069][T15712] tipc: Resetting bearer [ 338.329468][T15711] tipc: Resetting bearer [ 338.352793][T15711] tipc: Disabling bearer [ 338.360611][T15733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 338.369913][T15732] netlink: 'syz.4.2804': attribute type 29 has an invalid length. [ 338.377885][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 338.475691][T15610] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.487964][T15610] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.505780][T15610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.520126][T15610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.532839][T15610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 338.633939][T15610] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.647933][T15610] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.658097][T15610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.668685][T15610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.681777][T15610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 338.752563][T15757] tipc: Enabling of bearer rejected, already enabled [ 338.778201][T15610] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.788131][T15610] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.798306][T15610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.803991][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'. [ 338.808530][T15610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.808593][T15610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 338.888249][T15761] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 338.899680][T15761] bond10 (unregistering): Released all slaves [ 338.930321][T15610] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.941241][T15610] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 338.952160][T15610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.963258][T15610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.996810][T15610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 339.221322][T15610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.232457][T15775] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2817'. [ 339.242856][T15774] netlink: 'syz.4.2816': attribute type 39 has an invalid length. [ 339.281530][T15610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.302406][T15610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.343778][T15610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.554881][ T5845] Bluetooth: hci5: command tx timeout [ 339.595713][T15802] tipc: Enabling of bearer rejected, already enabled [ 339.618672][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.674451][ T7082] net_ratelimit: 27 callbacks suppressed [ 339.674470][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.712449][T15808] netlink: 'syz.4.2825': attribute type 3 has an invalid length. [ 339.723721][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.768417][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.775643][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.792417][T15813] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 339.806832][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 339.843587][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.850798][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.894317][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.936226][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 340.014852][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.054886][ T36] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 340.063349][T15829] xt_TCPMSS: Only works on TCP SYN packets [ 340.134256][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.174746][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 340.244222][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.295616][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 340.486006][T15855] netlink: 'syz.3.2833': attribute type 11 has an invalid length. [ 340.584631][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.599895][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2833'. [ 340.767639][T15610] veth0_vlan: entered promiscuous mode [ 340.797136][T15610] veth1_vlan: entered promiscuous mode [ 340.832400][T15872] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2837'. [ 340.936415][T15610] veth0_macvtap: entered promiscuous mode [ 340.962731][T15610] veth1_macvtap: entered promiscuous mode [ 341.019938][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.036395][T15876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.051833][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.073031][ T3492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.083374][ T3492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.121886][ T3492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.144683][ T3492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.243437][T15896] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 341.347789][T15896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.370397][T15899] vlan0: entered promiscuous mode [ 341.383172][T15899] vlan0: entered allmulticast mode [ 341.405958][T15899] hsr_slave_1: entered allmulticast mode [ 341.492125][ T7084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.526686][ T7084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.609441][ T7082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.628623][ T7082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.635588][ T5845] Bluetooth: hci5: command tx timeout [ 341.645799][T15915] Bluetooth: MGMT ver 1.23 [ 342.380749][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 342.434331][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 342.464325][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.497661][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 342.564210][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 342.625255][T15938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 342.727775][T15936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.741735][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.762648][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.773300][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.786511][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.797858][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.839534][ T5840] bond0: (slave syz_tun): Releasing backup interface [ 342.932181][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 342.950729][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 342.980926][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.011608][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 343.040844][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 343.083402][T15938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 343.228755][T15964] wg1 speed is unknown, defaulting to 1000 [ 343.336388][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 343.354368][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 343.396206][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.436812][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 343.466593][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 343.508459][T15938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 343.591664][T15964] Z7nz>RA speed is unknown, defaulting to 1000 [ 343.592596][T16005] __nla_validate_parse: 9 callbacks suppressed [ 343.592611][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2864'. [ 343.714412][ T5845] Bluetooth: hci5: command tx timeout [ 343.982829][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 344.017352][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 344.084600][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.124275][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.164340][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 344.195547][T15938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 344.241445][T16015] tipc: Resetting bearer [ 344.299019][T16015] tipc: Resetting bearer [ 344.480084][ T1093] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.503748][ T1093] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 344.512606][ T1093] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.526637][ T1093] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 344.537967][ T1093] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 344.546530][ T1093] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 6081 - 0 [ 344.589251][ T1093] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.599002][ T1093] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 344.607735][ T1093] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.616227][ T1093] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 344.625527][ T1093] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 344.635480][T16052] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2874'. [ 344.658144][ T1093] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 6081 - 0 [ 344.734991][T16044] svc: failed to register nfsdv3 RPC service (errno 111). [ 344.750033][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.784302][ T36] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 344.789110][T16044] svc: failed to register nfsaclv3 RPC service (errno 111). [ 344.792515][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.792544][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 344.837202][ T5845] Bluetooth: hci3: command tx timeout [ 344.920820][ T36] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 344.953729][ T36] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 6081 - 0 [ 345.049544][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.061731][ T36] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 345.081756][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.091263][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 345.100787][ T36] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 345.102827][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2876'. [ 345.109448][ T36] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 6081 - 0 [ 345.345219][ T7079] tipc: Resetting bearer [ 345.400274][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2879'. [ 345.420430][T16087] netlink: 'syz.2.2879': attribute type 7 has an invalid length. [ 345.425415][T15964] chnl_net:caif_netlink_parms(): no params data found [ 345.441040][T16087] netlink: 'syz.2.2879': attribute type 8 has an invalid length. [ 345.481199][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'. [ 345.514375][ T7082] net_ratelimit: 37 callbacks suppressed [ 345.514394][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 345.519467][T16090] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 345.520105][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.684542][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 345.836811][T15964] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.844035][T15964] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.857264][T15964] bridge_slave_0: entered allmulticast mode [ 345.875196][T15964] bridge_slave_0: entered promiscuous mode [ 345.891546][T15964] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.899303][T15964] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.907767][T15964] bridge_slave_1: entered allmulticast mode [ 345.929115][T15964] bridge_slave_1: entered promiscuous mode [ 345.952714][T16119] 0{X: left allmulticast mode [ 345.962463][T16125] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2886'. [ 346.076580][T16119] team0: Port device vet0_virt_wifi removed [ 346.099460][T16119] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 346.156215][T15964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.169761][T15964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.216223][T15964] team0: Port device team_slave_0 added [ 346.226581][T15964] team0: Port device team_slave_1 added [ 346.274568][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.304458][T15964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.344147][T15964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.457298][T15964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.536835][T16140] svc: failed to register nfsdv3 RPC service (errno 111). [ 346.560309][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2888'. [ 346.571171][T16146] netlink: 'syz.2.2888': attribute type 7 has an invalid length. [ 346.608634][T16146] netlink: 'syz.2.2888': attribute type 8 has an invalid length. [ 346.624020][T16140] svc: failed to register nfsaclv3 RPC service (errno 111). [ 346.632377][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 346.683301][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 346.695478][T15964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.703425][T15964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.730126][T15964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.767298][T16146] gretap0: entered promiscuous mode [ 346.774815][T16146] batadv_slave_1: entered promiscuous mode [ 346.781063][T16146] batadv_slave_1: left promiscuous mode [ 346.788474][T16146] gretap0: left promiscuous mode [ 346.917751][ T5845] Bluetooth: hci3: command tx timeout [ 346.922144][T15964] hsr_slave_0: entered promiscuous mode [ 346.933066][T16148] netlink: 'syz.0.2891': attribute type 23 has an invalid length. [ 346.946886][T15964] hsr_slave_1: entered promiscuous mode [ 346.953367][T15964] debugfs: 'hsr0' already exists in 'hsr' [ 346.961540][T15964] Cannot create hsr debugfs directory [ 346.990616][T16149] netlink: 'syz.0.2891': attribute type 23 has an invalid length. [ 347.067189][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.220147][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 347.336733][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.495321][T16174] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 347.550456][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 347.660910][T16173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.676345][T16177] tipc: Enabling of bearer rejected, already enabled [ 347.741122][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 347.785320][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 348.016292][T16197] svc: failed to register nfsdv3 RPC service (errno 111). [ 348.051391][T16197] svc: failed to register nfsaclv3 RPC service (errno 111). [ 348.177170][T16220] netlink: 'syz.2.2910': attribute type 83 has an invalid length. [ 348.188310][T15964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.205566][T15964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.227942][T15964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.263010][T15964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.296622][T16225] syz_tun: entered allmulticast mode [ 348.318049][T16224] syz_tun: left allmulticast mode [ 348.523881][T15964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.603767][T15964] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.631291][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.638534][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.709018][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.716264][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.806803][T16257] netlink: 'syz.4.2919': attribute type 12 has an invalid length. [ 348.998391][ T5845] Bluetooth: hci3: command tx timeout [ 349.199793][T15964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.303059][T16289] __nla_validate_parse: 4 callbacks suppressed [ 349.303075][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 349.340012][T15964] veth0_vlan: entered promiscuous mode [ 349.377416][T15964] veth1_vlan: entered promiscuous mode [ 349.419011][T15964] veth0_macvtap: entered promiscuous mode [ 349.467696][T15964] veth1_macvtap: entered promiscuous mode [ 349.482172][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 349.580341][T16307] netlink: 'syz.1.2931': attribute type 25 has an invalid length. [ 349.624967][T15964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.694267][T15964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.767998][ T7077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.802126][ T7077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.845657][ T7077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.864701][ T7077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.984513][ T7082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.009997][ T7082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.046550][T16335] IPVS: length: 45 != 24 [ 350.095510][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.123588][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.288277][T16352] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2848'. [ 350.308366][T16352] veth1_to_bond: entered allmulticast mode [ 350.315708][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 350.376261][T16352] bond0: (slave bond_slave_1): Releasing backup interface [ 350.406907][T16352] veth1_to_bond (unregistering): left allmulticast mode [ 350.409569][T16362] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 350.469718][T16363] erspan0: left promiscuous mode [ 350.475319][T16363] erspan0: left allmulticast mode [ 350.505303][T16368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.545962][T16363] batadv0: left promiscuous mode [ 350.554707][T16363] batadv0: left allmulticast mode [ 350.653284][T16363] net_ratelimit: 32 callbacks suppressed [ 350.653304][T16363] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 350.715153][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 350.722431][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 350.824682][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 350.854672][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 350.964216][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 350.995004][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 351.071504][T16398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.081518][ T5845] Bluetooth: hci3: command tx timeout [ 351.109417][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 351.134855][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.240771][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 351.368567][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2958'. [ 351.450620][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 351.506194][T16430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2961'. [ 351.528118][T16424] netlink: 'syz.4.2962': attribute type 6 has an invalid length. [ 351.611602][T16422] netlink: 'syz.2.2961': attribute type 3 has an invalid length. [ 351.627781][T16422] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2961'. [ 351.662227][T16422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2961'. [ 351.707549][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 352.796936][T16484] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 352.818118][T16484] bond7 (unregistering): Released all slaves [ 352.877204][T16489] IPv6: sit1: Disabled Multicast RS [ 353.002306][T16502] vlan3: entered promiscuous mode [ 353.007679][T16502] bridge0: entered promiscuous mode [ 353.288727][T16524] batadv1: entered allmulticast mode [ 353.322606][T16532] tipc: Started in network mode [ 353.336032][T16532] tipc: Node identity 7e5a4d1ce39b, cluster identity 4711 [ 353.343533][T16532] tipc: Enabled bearer , priority 0 [ 353.359921][T16532] syzkaller0: entered promiscuous mode [ 353.367092][T16527] IPVS: length: 193 != 297784399128 [ 353.375105][T16527] ip6t_rpfilter: unknown options [ 353.381097][T16532] syzkaller0: entered allmulticast mode [ 353.392332][T16534] tipc: Enabling of bearer rejected, failed to enable media [ 353.482167][T16532] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 353.576459][T16532] tipc: Resetting bearer [ 353.661714][T16526] tipc: Resetting bearer [ 353.739397][T16526] tipc: Disabling bearer [ 353.748888][T16550] netlink: 'syz.2.2998': attribute type 13 has an invalid length. [ 354.315559][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.333016][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.341848][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.350199][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.358210][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.523978][T16580] wg1 speed is unknown, defaulting to 1000 [ 354.545885][T16580] Z7nz>RA speed is unknown, defaulting to 1000 [ 354.569419][T16593] netlink: 'syz.1.3009': attribute type 5 has an invalid length. [ 354.579418][T16593] netlink: 'syz.1.3009': attribute type 5 has an invalid length. [ 354.609668][T16594] __nla_validate_parse: 6 callbacks suppressed [ 354.609684][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3006'. [ 354.646955][T16598] netlink: 'syz.3.3010': attribute type 10 has an invalid length. [ 354.678437][T16598] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 354.693080][T16596] tipc: Enabling of bearer rejected, already enabled [ 354.772032][T16603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3011'. [ 354.813274][T16603] sctp: [Deprecated]: syz.3.3011 (pid 16603) Use of int in max_burst socket option. [ 354.813274][T16603] Use struct sctp_assoc_value instead [ 354.911817][T16613] bond10 (unregistering): Released all slaves [ 354.978577][ T7082] tipc: Resetting bearer [ 355.084782][T16580] chnl_net:caif_netlink_parms(): no params data found [ 355.164587][T16580] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.171742][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.179178][T16580] bridge_slave_0: entered allmulticast mode [ 355.186553][T16580] bridge_slave_0: entered promiscuous mode [ 355.195033][T16580] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.203445][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.210886][T16580] bridge_slave_1: entered allmulticast mode [ 355.218847][T16580] bridge_slave_1: entered promiscuous mode [ 355.251067][T16580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.263071][T16580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.296061][T16580] team0: Port device team_slave_0 added [ 355.307239][T16580] team0: Port device team_slave_1 added [ 355.343193][T16580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.351284][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.378117][T16580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.397636][T16580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.407590][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.434039][T16580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.447896][T16628] netlink: 'syz.0.3014': attribute type 5 has an invalid length. [ 355.573032][T16580] hsr_slave_0: entered promiscuous mode [ 355.582453][T16580] hsr_slave_1: entered promiscuous mode [ 355.596124][T16580] debugfs: 'hsr0' already exists in 'hsr' [ 355.601904][T16580] Cannot create hsr debugfs directory [ 355.625019][T16633] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.970137][T16656] net_ratelimit: 58 callbacks suppressed [ 355.970155][T16656] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 356.011236][T16656] veth0_to_team: entered promiscuous mode [ 356.107913][T16656] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.3021'. [ 356.187919][T16580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.208634][T16580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.255032][T16580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.325397][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.436896][ T5151] Bluetooth: hci4: command tx timeout [ 356.470729][T16675] can: request_module (can-proto-5) failed. [ 356.641950][T16580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.654457][T16580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.669755][T16580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.715136][T16684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3029'. [ 356.724724][T16684] tipc: Invalid UDP bearer configuration [ 356.724778][T16684] tipc: Enabling of bearer rejected, failed to enable media [ 356.765289][T16684] openvswitch: netlink: Message has 536 unknown bytes. [ 356.772315][T16684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.792277][T16580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.812264][T16580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.825483][T16580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.848183][T16689] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3030'. [ 356.863213][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 356.990457][T16700] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 357.004234][T16700] netlink: 'syz.1.3032': attribute type 11 has an invalid length. [ 357.013056][T16700] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3032'. [ 357.075808][T16580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.086804][T16580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.097972][T16580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 357.147850][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.213849][T16705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3035'. [ 357.348750][T16720] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 357.363545][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 357.375237][T16722] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3037'. [ 357.384400][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 357.404789][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.606109][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.634452][T16733] dvmrp0: left allmulticast mode [ 357.696008][ T7082] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 357.709550][T16580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.764844][ T1093] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.773797][T16580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.778190][T16743] SET target dimension over the limit! [ 357.807241][T16580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.835320][T16580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.860536][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.133469][T16769] netlink: 'syz.2.3050': attribute type 3 has an invalid length. [ 358.151047][T16580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.195304][T16773] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 358.203109][T16580] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.247165][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.254435][ T7079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.291808][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.299058][ T7082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.524925][ T5151] Bluetooth: hci4: command tx timeout [ 358.588792][T16791] tipc: Started in network mode [ 358.594756][T16791] tipc: Node identity 080211, cluster identity 4711 [ 358.601623][T16791] tipc: Enabled bearer , priority 0 [ 358.685839][T16794] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 358.717252][T16794] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 358.891915][T16811] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 358.899895][T16812] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 358.933703][T16812] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 358.960783][T16811] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 359.041335][T16580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.167508][T16817] svc: failed to register nfsdv3 RPC service (errno 111). [ 359.193975][T16826] netlink: 'syz.1.3062': attribute type 33 has an invalid length. [ 359.210089][T16817] svc: failed to register nfsaclv3 RPC service (errno 111). [ 359.519835][T16580] veth0_vlan: entered promiscuous mode [ 359.541630][T16846] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 359.575098][T16846] netlink: 'syz.3.3069': attribute type 21 has an invalid length. [ 359.597630][T16580] veth1_vlan: entered promiscuous mode [ 359.677912][T16580] veth0_macvtap: entered promiscuous mode [ 359.702713][T16580] veth1_macvtap: entered promiscuous mode [ 359.729100][ T24] tipc: Node number set to 134353152 [ 359.767243][T16580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.790725][T16580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.850695][ T7079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.877488][ T7079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.909648][ T7079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.924313][ T7079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.042386][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.062190][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.147751][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.168204][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.333724][T16884] svc: failed to register nfsdv3 RPC service (errno 111). [ 360.395759][T16884] svc: failed to register nfsaclv3 RPC service (errno 111). [ 360.595178][ T5151] Bluetooth: hci4: command tx timeout [ 360.894920][T16913] syzkaller1: entered promiscuous mode [ 360.902205][T16913] syzkaller1: entered allmulticast mode [ 360.987597][T16921] netlink: 'syz.0.3085': attribute type 10 has an invalid length. [ 361.030668][ T1093] net_ratelimit: 40 callbacks suppressed [ 361.030689][ T1093] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 361.045243][T16912] __nla_validate_parse: 16 callbacks suppressed [ 361.045262][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3085'. [ 361.109802][T16921] syz_tun: entered promiscuous mode [ 361.131314][T16921] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 361.149036][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.152676][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3089'. [ 361.166952][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 361.167785][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.184051][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.201857][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.222243][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.253054][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 361.296850][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 361.306028][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 361.306089][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 361.402176][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.423508][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 361.463969][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 361.494380][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 361.513295][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 361.525220][ T7079] netdevsim netdevsim1 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 361.567606][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 361.599799][T16949] lo: entered allmulticast mode [ 361.629389][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.653195][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 361.667389][T16951] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 361.677826][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 361.689339][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 361.693081][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 361.699958][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 361.719752][ T7079] netdevsim netdevsim1 eth2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 361.733430][T16925] wg1 speed is unknown, defaulting to 1000 [ 361.733546][T16948] lo: left allmulticast mode [ 361.747233][T16925] Z7nz>RA speed is unknown, defaulting to 1000 [ 361.816915][T16951] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 361.838415][T16959] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.897256][T16951] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3096'. [ 361.934505][T16959] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 362.035564][T16968] bond3: (slave gretap1): making interface the new active one [ 362.046354][T16968] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 362.057627][T16958] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 362.070304][T16958] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 362.141123][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.151538][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 362.161750][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 362.172633][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 362.182560][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 362.193584][ T7079] netdevsim netdevsim1 eth1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 362.239086][T16976] validate_nla: 1 callbacks suppressed [ 362.239104][T16976] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 362.295659][T16976] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 362.335365][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 362.371408][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.386238][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 362.396571][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 362.407511][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 362.419023][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 362.445257][ T7079] netdevsim netdevsim1 eth0 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 362.609278][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 362.649124][T17006] delete_channel: no stack [ 362.654836][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 362.678728][ T5151] Bluetooth: hci4: command tx timeout [ 363.008872][ T7079] bridge_slave_1: left allmulticast mode [ 363.018592][ T7079] bridge_slave_1: left promiscuous mode [ 363.028732][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.039314][ T7079] : left allmulticast mode [ 363.043912][ T7079] : left promiscuous mode [ 363.049353][ T7079] bridge0: port 1() entered disabled state [ 363.314671][ T5151] Bluetooth: hci1: command tx timeout [ 363.360629][ T7079] bond7 (unregistering): (slave gretap2): Releasing active interface [ 363.479082][ T7079] bond2 (unregistering): (slave geneve4): Releasing active interface [ 363.715707][ T7079] bond7 (unregistering): (slave bridge3): Releasing active interface [ 363.921449][ T7079] bond1 (unregistering): Released all slaves [ 363.934361][ T7079] bond2 (unregistering): Released all slaves [ 363.947282][ T7079] bond3 (unregistering): Released all slaves [ 363.960835][ T7079] bond4 (unregistering): Released all slaves [ 363.978036][ T7079] bond5 (unregistering): Released all slaves [ 363.992109][ T7079] bond6 (unregistering): Released all slaves [ 364.019134][ T7079] bond0 (unregistering): Released all slaves [ 364.034038][ T7079] bond7 (unregistering): Released all slaves [ 364.137293][ T7079] bond8 (unregistering): Released all slaves [ 364.149735][ T7079] bond9 (unregistering): Released all slaves [ 364.195049][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 364.215521][ T7082] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.315087][T16925] chnl_net:caif_netlink_parms(): no params data found [ 364.402221][ T7079] tipc: Left network mode [ 364.601380][T17055] syzkaller0: entered promiscuous mode [ 364.607063][T17055] syzkaller0: entered allmulticast mode [ 364.624390][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 364.867108][T16925] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.895231][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.922095][T17075] netlink: 'syz.0.3124': attribute type 1 has an invalid length. [ 364.934593][T16925] bridge_slave_0: entered allmulticast mode [ 364.954900][T16925] bridge_slave_0: entered promiscuous mode [ 365.003293][T16925] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.023542][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.036160][T16925] bridge_slave_1: entered allmulticast mode [ 365.056740][T16925] bridge_slave_1: entered promiscuous mode [ 365.072234][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'. [ 365.088518][T17084] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 365.175990][T17084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.187969][T17085] vlan2: entered allmulticast mode [ 365.198048][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3128'. [ 365.243170][T17087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.251388][T17087] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.263642][T17087] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 365.308638][T17085] vlan2: entered allmulticast mode [ 365.330487][T17092] vlan2: entered allmulticast mode [ 365.336490][T17092] bond4: entered allmulticast mode [ 365.371774][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.386848][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.398445][ T5151] Bluetooth: hci1: command tx timeout [ 365.502421][T17099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3131'. [ 365.627492][T17085] vlan2: entered allmulticast mode [ 365.799728][ T7079] batadv0: left promiscuous mode [ 365.813509][ T7079] hsr_slave_0: left promiscuous mode [ 365.822488][ T7079] hsr_slave_1: left promiscuous mode [ 365.828875][ T7079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.836501][ T7079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.861973][ T7079] v: left allmulticast mode [ 365.866765][ T7079] veth0_vlan: left allmulticast mode [ 365.872213][ T7079] v: left promiscuous mode [ 365.877656][ T7079] veth1_macvtap: left promiscuous mode [ 365.883889][ T7079] veth1_vlan: left promiscuous mode [ 365.889490][ T7079] veth0_vlan: left promiscuous mode [ 366.381789][ T7079] team0 (unregistering): Port device team_slave_1 removed [ 366.421229][ T7079] team0 (unregistering): Port device team_slave_0 removed [ 366.786218][T16925] team0: Port device team_slave_0 added [ 366.799686][T17085] vlan2: entered allmulticast mode [ 366.811243][T17112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3135'. [ 366.821957][T17116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3134'. [ 366.915043][ T36] net_ratelimit: 4 callbacks suppressed [ 366.915062][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.939461][T16925] team0: Port device team_slave_1 added [ 366.986783][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.112709][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.132536][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.205794][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.220869][T17146] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3141'. [ 367.294523][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 367.322824][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.331425][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.420231][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.476939][ T5151] Bluetooth: hci1: command tx timeout [ 367.597442][T16925] hsr_slave_0: entered promiscuous mode [ 367.616920][T16925] hsr_slave_1: entered promiscuous mode [ 367.628604][T16925] debugfs: 'hsr0' already exists in 'hsr' [ 367.635375][T16925] Cannot create hsr debugfs directory [ 367.635876][T17168] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3147'. [ 367.735110][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 367.736637][ T7079] IPVS: stop unused estimator thread 0... [ 367.763261][T17170] netlink: 'syz.4.3148': attribute type 4 has an invalid length. [ 367.863009][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 367.878817][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 367.918492][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 367.919533][T17184] netlink: 'syz.0.3151': attribute type 11 has an invalid length. [ 367.944465][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'. [ 367.975213][T17186] block nbd0: NBD_DISCONNECT [ 367.979878][T17186] block nbd0: Send disconnect failed -32 [ 367.988078][T17186] block nbd0: shutting down sockets [ 368.146658][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 368.264536][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 368.344339][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 368.423652][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 368.437297][T17224] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 368.440331][T17226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3162'. [ 368.454438][T17224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.455235][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 368.485370][T17228] lo: entered promiscuous mode [ 368.494907][T17228] netlink: 'syz.0.3164': attribute type 2 has an invalid length. [ 368.626491][T17235] delete_channel: no stack [ 368.635109][T17234] delete_channel: no stack [ 368.667681][T17240] delete_channel: no stack [ 368.755019][T17247] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 368.765796][T17245] ksmbd: Unknown IPC event: 3, ignore. [ 368.815040][T17251] tipc: Enabling of bearer rejected, already enabled [ 368.895669][T16925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.939477][T16925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.965230][T16925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.982655][T16925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.201141][ T5920] IPVS: starting estimator thread 0... [ 369.294224][T17282] IPVS: using max 27 ests per chain, 64800 per kthread [ 369.361812][T16925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.398798][T16925] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.466012][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.473199][ T7079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.507616][T17294] netlink: 'syz.0.3182': attribute type 39 has an invalid length. [ 369.531693][T17294] bond0: (slave syz_tun): Releasing backup interface [ 369.548736][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.556008][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.563814][ T5151] Bluetooth: hci1: command tx timeout [ 369.738558][T17303] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 369.840485][T17303] bond7: entered promiscuous mode [ 369.848905][T17303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.158189][T17333] veth3: entered allmulticast mode [ 370.235584][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.404387][T17344] bond2 (unregistering): Released all slaves [ 370.567074][T16925] veth0_vlan: entered promiscuous mode [ 370.620877][T16925] veth1_vlan: entered promiscuous mode [ 370.700824][T16925] veth0_macvtap: entered promiscuous mode [ 370.767077][T16925] veth1_macvtap: entered promiscuous mode [ 370.779914][T17371] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 370.811308][T17371] bond5: entered promiscuous mode [ 370.816826][T17371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.853784][T17371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.857179][T17372] svc: failed to register nfsdv3 RPC service (errno 111). [ 370.862362][T17371] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 370.877250][T17372] svc: failed to register nfsaclv3 RPC service (errno 111). [ 370.895065][T17371] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 370.910358][T17371] bond5: (slave gre2): making interface the new active one [ 370.921327][T17371] gre2: entered promiscuous mode [ 370.928272][T17371] bond5: (slave gre2): Enslaving as an active interface with an up link [ 370.960508][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.052457][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.070390][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.081920][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.092597][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.101485][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.297046][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.314720][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.349365][T17396] xt_TCPMSS: Only works on TCP SYN packets [ 371.371411][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.386205][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.473505][T17405] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 371.544608][T17405] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.005793][T17431] __nla_validate_parse: 11 callbacks suppressed [ 372.005811][T17431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 372.026513][T17433] lo: entered promiscuous mode [ 372.052438][T17433] tunl0: entered promiscuous mode [ 372.090496][T17433] gre0: entered promiscuous mode [ 372.179473][T17433] gretap0: entered promiscuous mode [ 372.272500][T17436] syz.3.3220: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 372.297323][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.314732][T17436] CPU: 1 UID: 0 PID: 17436 Comm: syz.3.3220 Not tainted syzkaller #0 PREEMPT(full) [ 372.314757][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.314771][T17436] Call Trace: [ 372.314778][T17436] [ 372.314786][T17436] dump_stack_lvl+0x189/0x250 [ 372.314818][T17436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.314837][T17436] ? __pfx__printk+0x10/0x10 [ 372.314859][T17436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.314878][T17436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.314900][T17436] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 372.314942][T17436] warn_alloc+0x214/0x310 [ 372.314972][T17436] ? __pfx_warn_alloc+0x10/0x10 [ 372.315004][T17436] ? __get_vm_area_node+0x28f/0x300 [ 372.315026][T17436] ? xskq_create+0xbf/0x170 [ 372.315051][T17436] __vmalloc_node_range_noprof+0x690/0x12d0 [ 372.315100][T17436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.315126][T17436] ? __kasan_kmalloc+0x93/0xb0 [ 372.315154][T17436] vmalloc_user_noprof+0xad/0xf0 [ 372.315176][T17436] ? xskq_create+0xbf/0x170 [ 372.315197][T17436] xskq_create+0xbf/0x170 [ 372.315218][T17436] xsk_init_queue+0xb0/0x110 [ 372.315239][T17436] xsk_setsockopt+0x57b/0x8d0 [ 372.315262][T17436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.315284][T17436] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.315308][T17436] ? aa_sock_opt_perm+0xff/0x1b0 [ 372.315332][T17436] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 372.315347][T17436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.315367][T17436] do_sock_setsockopt+0x17c/0x1b0 [ 372.315389][T17436] __x64_sys_setsockopt+0x13f/0x1b0 [ 372.315414][T17436] do_syscall_64+0xfa/0xfa0 [ 372.315435][T17436] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.315459][T17436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.315476][T17436] ? clear_bhb_loop+0x60/0xb0 [ 372.315497][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.315520][T17436] RIP: 0033:0x7fd1a4f8f6c9 [ 372.315533][T17436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.315545][T17436] RSP: 002b:00007fd1a5d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.315562][T17436] RAX: ffffffffffffffda RBX: 00007fd1a51e6180 RCX: 00007fd1a4f8f6c9 [ 372.315574][T17436] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 372.315582][T17436] RBP: 00007fd1a5011f91 R08: 0000000000000004 R09: 0000000000000000 [ 372.315592][T17436] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 372.315602][T17436] R13: 00007fd1a51e6218 R14: 00007fd1a51e6180 R15: 00007ffc95cc9f88 [ 372.315633][T17436] [ 372.315653][T17436] Mem-Info: [ 372.447310][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.461230][T17436] active_anon:4640 inactive_anon:0 isolated_anon:0 [ 372.461230][T17436] active_file:2885 inactive_file:39980 isolated_file:0 [ 372.461230][T17436] unevictable:768 dirty:122 writeback:0 [ 372.461230][T17436] slab_reclaimable:12435 slab_unreclaimable:138281 [ 372.461230][T17436] mapped:29029 shmem:1357 pagetables:1290 [ 372.461230][T17436] sec_pagetables:0 bounce:0 [ 372.461230][T17436] kernel_misc_reclaimable:0 [ 372.461230][T17436] free:1289258 free_pcp:14198 free_cma:0 [ 372.469637][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.472693][T17436] Node 0 active_anon:18560kB inactive_anon:0kB active_file:11540kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116116kB dirty:484kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14680kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.481311][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.481986][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.487093][T17436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.494328][T17433] erspan0: entered promiscuous mode [ 372.529533][T17436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.563742][T17433] ip_vti0: entered promiscuous mode [ 372.565629][T17436] lowmem_reserve[]: [ 372.625295][ T7079] net_ratelimit: 34 callbacks suppressed [ 372.625324][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 372.810747][T17436] 0 2505 2505 2505 2505 [ 372.817993][T17436] Node 0 DMA32 free:1243576kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18460kB inactive_anon:0kB active_file:11540kB inactive_file:159716kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:41636kB local_pcp:22580kB free_cma:0kB [ 372.851733][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 372.875296][T17436] lowmem_reserve[]: 0 0 0 0 0 [ 372.881085][T17436] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.939401][T17453] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 372.946868][T17453] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 372.955722][T17436] lowmem_reserve[]: 0 0 0 0 0 [ 372.960605][T17436] Node 1 Normal free:3898096kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15136kB local_pcp:6656kB free_cma:0kB [ 372.992950][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 372.993002][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 373.027799][T17444] wg1 speed is unknown, defaulting to 1000 [ 373.035481][T17444] Z7nz>RA speed is unknown, defaulting to 1000 [ 373.052909][T17436] lowmem_reserve[]: 0 0 0 0 0 [ 373.063026][T17436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.094347][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 373.104173][T17436] Node 0 DMA32: 712*4kB (UME) 375*8kB (UM) 29*16kB (UM) 133*32kB (UME) 99*64kB (UME) 691*128kB (UM) 484*256kB (UME) 296*512kB (UME) 144*1024kB (UME) 4*2048kB (UM) 173*4096kB (UM) = 1245064kB [ 373.134157][T17436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.136044][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 373.152484][T17436] Node 1 Normal: 186*4kB (UME) 51*8kB (UME) 51*16kB (UME) 176*32kB (UME) 47*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3898096kB [ 373.207801][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 373.212274][T17436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.241169][T17436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.271124][T17436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.298876][T17436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.304220][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 373.316904][T17436] 44218 total pagecache pages [ 373.321784][T17436] 0 pages in swap cache [ 373.331423][T17436] Free swap = 124996kB [ 373.344036][T17436] Total swap = 124996kB [ 373.344453][ T3492] bond1: (slave macvlan2): failed to get link speed/duplex [ 373.354186][T17436] 2097051 pages RAM [ 373.367441][T17436] 0 pages HighMem/MovableOnly [ 373.378860][T17436] 424119 pages reserved [ 373.388769][T17436] 0 pages cma reserved [ 373.455597][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 373.550877][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3231'. [ 373.598781][T17470] syzkaller0: entered promiscuous mode [ 373.611764][T17470] syzkaller0: entered allmulticast mode [ 373.752819][T17478] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3233'. [ 373.829982][T17444] chnl_net:caif_netlink_parms(): no params data found [ 374.122366][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.141253][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.159409][T17444] bridge_slave_0: entered allmulticast mode [ 374.167814][T17444] bridge_slave_0: entered promiscuous mode [ 374.178013][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.185515][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.192918][T17444] bridge_slave_1: entered allmulticast mode [ 374.204350][T17444] bridge_slave_1: entered promiscuous mode [ 374.273959][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 374.340672][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 374.356644][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 374.435226][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.481020][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.569164][ T3492] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 374.653886][T17444] team0: Port device team_slave_0 added [ 374.705984][T17444] team0: Port device team_slave_1 added [ 374.772544][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 374.814864][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.821950][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.848722][ T5845] Bluetooth: hci2: command tx timeout [ 374.863252][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.882684][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.891543][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.922794][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 374.939617][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.070713][T17444] hsr_slave_0: entered promiscuous mode [ 375.096025][T17444] hsr_slave_1: entered promiscuous mode [ 375.109126][T17444] debugfs: 'hsr0' already exists in 'hsr' [ 375.123386][T17444] Cannot create hsr debugfs directory [ 375.287497][T17548] netlink: 'syz.3.3250': attribute type 5 has an invalid length. [ 375.469204][ T30] audit: type=1107 audit(1762892452.130:9): pid=17552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='h$-2ꢂ)!J,G;[O,J F,:g.Ҷ6/8W*IܾY#Ҝc֩b7#1%W._am˸? UF17DɉS/von]"8[{9]q嫔рIM̝g-8Y.ԭ׬#Hc:H_Dz1LhIgkH' [ 375.543569][T17444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.564704][T17444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.584172][T17444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 375.604263][T17444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 375.829753][T17444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.867311][T17444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.904364][T17444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 375.929506][T17444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 376.009571][T17577] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3259'. [ 376.029408][T17577] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3259'. [ 376.074466][T17444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.087677][T17444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.101638][T17444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 376.112675][T17444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 376.240964][T17444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.251805][T17444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.262928][T17444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 376.276991][T17444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 376.542949][T17602] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 376.614937][T17444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.644892][T17444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.673944][T17444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.701344][T17444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.915495][ T5845] Bluetooth: hci2: command tx timeout [ 377.035213][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.048325][T17639] bond0: entered promiscuous mode [ 377.053406][T17639] bond_slave_0: entered promiscuous mode [ 377.063283][T17639] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 377.134898][T17645] __nla_validate_parse: 5 callbacks suppressed [ 377.134915][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 377.168272][T17444] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.206170][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.213421][ T7084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.228686][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 377.299492][T17640] syzkaller0: entered promiscuous mode [ 377.306068][T17640] syzkaller0: entered allmulticast mode [ 377.307748][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 377.331009][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.338258][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.050273][T17666] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3282'. [ 378.598777][ T1304] net_ratelimit: 29 callbacks suppressed [ 378.598797][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.796456][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 378.964688][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 378.990669][T17675] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 379.000411][ T5845] Bluetooth: hci2: command tx timeout [ 379.004381][T17675] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 379.023223][ T3492] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 379.084495][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.163992][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3287'. [ 379.174486][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 379.191007][T17686] netlink: 'syz.0.3288': attribute type 7 has an invalid length. [ 379.204292][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.272074][T17444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.304187][ T7077] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 379.385827][T17444] veth0_vlan: entered promiscuous mode [ 379.415067][ T7077] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.437938][T17444] veth1_vlan: entered promiscuous mode [ 379.476003][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.476003][T17695] Use struct sctp_sack_info instead [ 379.499566][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.499566][T17695] Use struct sctp_sack_info instead [ 379.517565][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.517565][T17695] Use struct sctp_sack_info instead [ 379.534762][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.534762][T17695] Use struct sctp_sack_info instead [ 379.553359][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.553359][T17695] Use struct sctp_sack_info instead [ 379.578388][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.578388][T17695] Use struct sctp_sack_info instead [ 379.601871][T17444] veth0_macvtap: entered promiscuous mode [ 379.616326][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.626651][T17444] veth1_macvtap: entered promiscuous mode [ 379.648984][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.648984][T17695] Use struct sctp_sack_info instead [ 379.681838][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.681838][T17695] Use struct sctp_sack_info instead [ 379.721403][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.721403][T17695] Use struct sctp_sack_info instead [ 379.745827][T17444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.760870][T17444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.768556][T17695] sctp: [Deprecated]: syz.0.3292 (pid 17695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.768556][T17695] Use struct sctp_sack_info instead [ 379.769546][T17704] [ 379.787394][T17704] ====================================================== [ 379.794506][T17704] WARNING: possible circular locking dependency detected [ 379.795508][ T7077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.801973][T17704] syzkaller #0 Not tainted [ 379.801985][T17704] ------------------------------------------------------ [ 379.801993][T17704] syz.4.3295/17704 is trying to acquire lock: [ 379.802002][T17704] ffffffff8f4262d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 379.837588][T17704] [ 379.837588][T17704] but task is already holding lock: [ 379.845461][T17704] ffff888067044570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 379.854779][T17704] [ 379.854779][T17704] which lock already depends on the new lock. [ 379.854779][T17704] [ 379.865179][T17704] [ 379.865179][T17704] the existing dependency chain (in reverse order) is: [ 379.874181][T17704] [ 379.874181][T17704] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 379.882186][T17704] lock_acquire+0x120/0x360 [ 379.887213][T17704] _raw_spin_lock_bh+0x36/0x50 [ 379.892500][T17704] nr_rt_device_down+0x12a/0x720 [ 379.897977][T17704] nr_device_event+0x137/0x150 [ 379.903268][T17704] notifier_call_chain+0x1b6/0x3e0 [ 379.908904][T17704] __dev_notify_flags+0x18d/0x2e0 [ 379.914536][T17704] netif_change_flags+0xe8/0x1a0 [ 379.920012][T17704] dev_change_flags+0x130/0x260 [ 379.925372][T17704] dev_ioctl+0x7b4/0x1150 [ 379.930211][T17704] sock_do_ioctl+0x22c/0x300 [ 379.935480][T17704] sock_ioctl+0x576/0x790 [ 379.940317][T17704] __se_sys_ioctl+0xfc/0x170 [ 379.945414][T17704] do_syscall_64+0xfa/0xfa0 [ 379.950441][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.956842][T17704] [ 379.956842][T17704] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 379.964648][T17704] lock_acquire+0x120/0x360 [ 379.969660][T17704] _raw_spin_lock_bh+0x36/0x50 [ 379.974932][T17704] nr_rt_device_down+0xa9/0x720 [ 379.980291][T17704] nr_device_event+0x137/0x150 [ 379.985570][T17704] notifier_call_chain+0x1b6/0x3e0 [ 379.991211][T17704] __dev_notify_flags+0x18d/0x2e0 [ 379.996789][T17704] netif_change_flags+0xe8/0x1a0 [ 380.002318][T17704] dev_change_flags+0x130/0x260 [ 380.007686][T17704] dev_ioctl+0x7b4/0x1150 [ 380.012528][T17704] sock_do_ioctl+0x22c/0x300 [ 380.017627][T17704] sock_ioctl+0x576/0x790 [ 380.022470][T17704] __se_sys_ioctl+0xfc/0x170 [ 380.027573][T17704] do_syscall_64+0xfa/0xfa0 [ 380.032588][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.039001][T17704] [ 380.039001][T17704] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 380.047031][T17704] validate_chain+0xb9b/0x2140 [ 380.052429][T17704] __lock_acquire+0xab9/0xd20 [ 380.057954][T17704] lock_acquire+0x120/0x360 [ 380.063011][T17704] _raw_spin_lock_bh+0x36/0x50 [ 380.068395][T17704] nr_remove_neigh+0x25/0xe0 [ 380.073526][T17704] nr_add_node+0x1d9f/0x2570 [ 380.078636][T17704] nr_rt_ioctl+0xc12/0xd50 [ 380.083577][T17704] sock_do_ioctl+0xdc/0x300 [ 380.088623][T17704] sock_ioctl+0x576/0x790 [ 380.093472][T17704] __se_sys_ioctl+0xfc/0x170 [ 380.098575][T17704] do_syscall_64+0xfa/0xfa0 [ 380.103609][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.110011][T17704] [ 380.110011][T17704] other info that might help us debug this: [ 380.110011][T17704] [ 380.120221][T17704] Chain exists of: [ 380.120221][T17704] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 380.120221][T17704] [ 380.134024][T17704] Possible unsafe locking scenario: [ 380.134024][T17704] [ 380.141717][T17704] CPU0 CPU1 [ 380.147064][T17704] ---- ---- [ 380.152410][T17704] lock(&nr_node->node_lock); [ 380.157249][T17704] lock(nr_node_list_lock); [ 380.164357][T17704] lock(&nr_node->node_lock); [ 380.171644][T17704] lock(nr_neigh_list_lock); [ 380.176333][T17704] [ 380.176333][T17704] *** DEADLOCK *** [ 380.176333][T17704] [ 380.184465][T17704] 1 lock held by syz.4.3295/17704: [ 380.189559][T17704] #0: ffff888067044570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 380.199312][T17704] [ 380.199312][T17704] stack backtrace: [ 380.205200][T17704] CPU: 1 UID: 0 PID: 17704 Comm: syz.4.3295 Not tainted syzkaller #0 PREEMPT(full) [ 380.205217][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.205227][T17704] Call Trace: [ 380.205233][T17704] [ 380.205239][T17704] dump_stack_lvl+0x189/0x250 [ 380.205261][T17704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.205278][T17704] ? __pfx__printk+0x10/0x10 [ 380.205291][T17704] ? stack_trace_save+0x9c/0xe0 [ 380.205313][T17704] print_circular_bug+0x2ee/0x310 [ 380.205331][T17704] check_noncircular+0x134/0x160 [ 380.205349][T17704] validate_chain+0xb9b/0x2140 [ 380.205373][T17704] __lock_acquire+0xab9/0xd20 [ 380.205388][T17704] ? nr_remove_neigh+0x25/0xe0 [ 380.205404][T17704] lock_acquire+0x120/0x360 [ 380.205417][T17704] ? nr_remove_neigh+0x25/0xe0 [ 380.205435][T17704] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.205452][T17704] ? nr_remove_neigh+0x25/0xe0 [ 380.205468][T17704] _raw_spin_lock_bh+0x36/0x50 [ 380.205485][T17704] ? nr_remove_neigh+0x25/0xe0 [ 380.205500][T17704] nr_remove_neigh+0x25/0xe0 [ 380.205517][T17704] nr_add_node+0x1d9f/0x2570 [ 380.205535][T17704] ? dev_get_by_name+0x21/0x200 [ 380.205551][T17704] ? dev_get_by_name+0x21/0x200 [ 380.205565][T17704] ? dev_get_by_name+0x21/0x200 [ 380.205579][T17704] ? nr_call_to_digi+0x136/0x1b0 [ 380.205595][T17704] nr_rt_ioctl+0xc12/0xd50 [ 380.205615][T17704] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 380.205629][T17704] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.205650][T17704] ? apparmor_capable+0x137/0x1b0 [ 380.205668][T17704] ? capable+0x89/0xe0 [ 380.205682][T17704] ? nr_ioctl+0x1b1/0x3b0 [ 380.205695][T17704] sock_do_ioctl+0xdc/0x300 [ 380.205713][T17704] ? __pfx_sock_do_ioctl+0x10/0x10 [ 380.205735][T17704] sock_ioctl+0x576/0x790 [ 380.205752][T17704] ? __pfx_sock_ioctl+0x10/0x10 [ 380.205768][T17704] ? __fget_files+0x3a0/0x420 [ 380.205781][T17704] ? __fget_files+0x2a/0x420 [ 380.205795][T17704] ? bpf_lsm_file_ioctl+0x9/0x20 [ 380.205809][T17704] ? __pfx_sock_ioctl+0x10/0x10 [ 380.205825][T17704] __se_sys_ioctl+0xfc/0x170 [ 380.205842][T17704] do_syscall_64+0xfa/0xfa0 [ 380.205859][T17704] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.205875][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.205889][T17704] ? clear_bhb_loop+0x60/0xb0 [ 380.205904][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.205917][T17704] RIP: 0033:0x7f79af58f6c9 [ 380.205932][T17704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.205945][T17704] RSP: 002b:00007f79b0480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.205960][T17704] RAX: ffffffffffffffda RBX: 00007f79af7e5fa0 RCX: 00007f79af58f6c9 [ 380.205971][T17704] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a [ 380.205980][T17704] RBP: 00007f79af611f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.205989][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.205997][T17704] R13: 00007f79af7e6038 R14: 00007f79af7e5fa0 R15: 00007fff42e51ae8 [ 380.206014][T17704] [ 380.533035][ T7077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.560806][ T7077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.578141][ T7077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.593720][T17444] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 380.617417][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.619206][T17444] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 380.626136][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.647273][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.655635][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.074327][ T5845] Bluetooth: hci2: command tx timeout [ 383.614859][ T7084] net_ratelimit: 57 callbacks suppressed [ 383.614887][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 383.704189][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.734210][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 383.814204][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.844194][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 383.924246][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.955196][ T7084] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 384.034272][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.064221][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 384.144520][ T7084] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.664424][ T7079] net_ratelimit: 80 callbacks suppressed [ 388.664444][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 388.714251][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.784204][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 388.824509][ T7079] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.894196][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 388.934211][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.004492][ T7079] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 389.044225][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.114392][ T7087] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 389.154304][ T7087] bond1: (slave macvlan2): failed to get link speed/duplex