last executing test programs: 4.113887585s ago: executing program 4 (id=4830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000240), &(0x7f00000002c0)=0x4) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xf, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.126045597s ago: executing program 4 (id=4842): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket(0x10, 0x3, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38b6e95f886463a91d5076cbb9000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="1c002380050007000000000008001500be00000005000f0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x3, 0x5, 0x2, 0x4, 0xff}, &(0x7f0000000300)=0x98) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x800}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000000f00000000000000b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000af0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 3.124059021s ago: executing program 0 (id=4843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) unshare(0x22020600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) sendto(r1, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3a018, 0x10}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @IFLA_IFNAME={0x14, 0x3, 'pimreg\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 2.93219111s ago: executing program 2 (id=4844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000090000000000000001000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cc00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000090000000000000001000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cc00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.89103001s ago: executing program 0 (id=4846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000000000000000000000003e000000000000000000"], 0x50) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0), 0xfffffce3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, '\x00', "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) 2.841272834s ago: executing program 4 (id=4847): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f8008000340000000060800024000000001080001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000240)={r6, 0x2, 0x3, "b6a045b7ccea984d6bcb274d061049bfb022"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) 2.768567176s ago: executing program 2 (id=4848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r0, 0x126ba000) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) 2.628513255s ago: executing program 1 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r1 = socket$inet6(0xa, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x40190) (async) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000009c0)=""/4129, 0x1021}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000200)=""/126, 0x7e}], 0x6}, 0x1}], 0x1, 0x40000002, 0x0) 2.396104594s ago: executing program 3 (id=4852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair(0x2a, 0x6, 0xffff, &(0x7f00000002c0)) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 2.212929751s ago: executing program 3 (id=4853): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) 2.066113037s ago: executing program 3 (id=4854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601020000000000000000000030000900020073797a3200000000050005000200000005000400020000001400078005001400a30000000800084000000004050001000700000011000300686173683a697000"], 0x60}}, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="09e647c9e0b8e9a2f2abdd74dd2e", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000030000000000005b3a0a975d512b7e7e166b000040000018110000043772dce859c4801c52fb4a74b33f869adf49a7c3d8866e0f8443007ecf397bf583d5b52405cd81d5750069799d14fff7e2caca5763216d85416b37426204c6a3ca5fc7ef5f5b3a007bafadea5da87ebd4f3d14e959633082a88b950343a62879393ffda074d84e1a7da4c7ef862fcdd148941859b999b01d7050a452047e0e1430bd1a65842c716602822c28a3735c83e710926e2edb01d68a1fcfe64e5f56ef637270bbf963002f1337a3da3d0e5214f6b7fb21518e7feb54ae0056a4f14c078b0abaac472ed12b9242e4074319e305c0e133b8", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001836b826995d0640bb000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780854000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80000) setsockopt(r10, 0x1, 0x2c70, &(0x7f0000000180)="875762ab310964a169809d592fae11b9587d4900caf13d7dad46bccd33542c01c24bed2e8d7eb59e2f446ea5344b", 0x2e) 1.980997804s ago: executing program 2 (id=4855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}], {0x95, 0x0, 0x102}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.881547914s ago: executing program 4 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000011) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf25040000001400020067656e657665300000000000040000006514b3a61b28c3d07f951f22"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0xfff}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r6, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="5664476ac95a03e2f70054e097ce49db1741bd0edc66bed56b110c854488df76af23dcdc70815092b97de5e1e6c1292a6c980f955cd5457dadb2afb07620e7de4eaf63943aa37ce62c827832c06fd8cfee1a95b346e6a4c07a96f22ad5213fe2e882b468d1c477434d5cf51e1db85d08ab94e09e4c03e86e4b7b38c5e8b0", @ANYRES32, @ANYRESHEX=r0, @ANYRES8=r6, @ANYRES16, @ANYRES32, @ANYRES64=r5, @ANYRESHEX=r7], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0xfffffec1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="7937e2db71733844e99c00f17c0b395327dba5bc2ea17b34c6bebdaf348df288da0e87e3ec96d5a493a9c814e2819204fdafe7c274f444ae6a2da7125251659123cb3d917d6b4f499e28b5676bb18ecfef4a98e56a102a3a706d625f21b1a0c987a75011d3d6f9e8abe4fd2bdd7c4cd75a793393d24f4ef4ec893ce63cf12b4b6867ff9ac86ec58ca44614ff6e847690ad3abfec13e60701f3903f05159752a0cda373e2e5f4e06db07bfba7b52e875992174837a5bc7b7dd8e3ad05dad1b4aa9524b04103c60fe45e37020791f5aea6c1119c372bdac3fd729a62bd4e18e69211be420000", @ANYRES16=r12, @ANYBLOB="000327bd7000fedbdf25590000000c009900ff07000078000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000) r13 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r13, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x40) ioctl$int_in(r2, 0x5452, &(0x7f0000000600)=0x48) openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 1.871718099s ago: executing program 2 (id=4857): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000010}}], 0x1, 0x40) recvmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001000110cfdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000088daa92", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000790fca71040008400000", @ANYRES32=0x0, @ANYBLOB="fab0817da4b5f31a2c001280110001006272696467655f736c617665000000001400058005001900000000000500200000000000140003006272696467655f736c6176655f300000"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r11, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x40841}, 0x2008000) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r13, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x12, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000000000000000000000000000500"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c840}, 0x4000010) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000005c0)={r8, r8, 0xd, 0x9, 0x0, 0x1, 0xf9, 0x16c0, 0x5541, 0x8b, 0x1, 0xc, 'syz0\x00'}) 1.779534307s ago: executing program 0 (id=4858): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x81, 0xe5, 0x40, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7800, 0x40, 0x4}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000240)='&[(}\x00', 0x800, &(0x7f0000000280)={@_ha_fsid={[0x4efa, 0xe2]}, {0x8000, 0x3, 0x1, 0x800}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0xff}, {[0xcfa2, 0x2, 0x0, 0x80]}, 0x4ea, 0x71, &(0x7f0000000340)=""/113}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000240)='&[(}\x00', 0x800, &(0x7f0000000280)={@_ha_fsid={[0x4efa, 0xe2]}, {0x8000, 0x3, 0x1, 0x800}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0xff}, {[0xcfa2, 0x2, 0x0, 0x80]}, 0x4ea, 0x71, &(0x7f0000000340)=""/113}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000040)='GPL\x00', 0x2, 0xb2, &(0x7f0000000080)=""/178, 0x41000, 0x35, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x5, 0xa0fe162, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[r1, r2, r3, r4, r5, r6, r7], &(0x7f0000000740)=[{0x0, 0x3, 0x6, 0x8}], 0x10, 0x80000000}, 0x94) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) sendmmsg$alg(r1, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="626a39c2f639a1e50f82fde1e0af02ec73e737b6c9ca8b740aea2ef960a3dd4ce9a3eaea635bc39a859edd70ee7f4a1a1eb510e91cb3b26d329d267289132a769df0d8cca236bb3547c21215ec8bb10d696e0a6fbc1e7afb0c94e5d80e4df2fc3341afdb92aedada301fcfc1d75b9647df1fd794d1b4aac50429353a4d0b85f6adb5b568e2381da2668688a9b04c8ba02143d942d6f40538d09b4a8a98e648c2c4abdb6e9f3f2c25efdd0a29a58d22d7a38f3e9013b2f6d3a1003d346ea97d0abf93a6bc90210404f7dfc12bc79cda48ab1ddd7b74edcf3b43f32e38d0bb779527b17fd38b495d420fca7ba80d81", 0xee}], 0x1, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="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", 0xfc}, {&(0x7f0000001b40)}], 0x3, &(0x7f0000001bc0)=[@assoc={0x18, 0x117, 0x4, 0x9a0}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}], 0x48, 0x4000}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="a4cb5da7a788e894fd2c7a2d2bf13324f638610043ede3812be915ad9376ed10f79554c1d8234d4d8f8b6326e6cbcbbf9cc4b6eaacfbebd2cee48ae66ad12ea52dc2a2852a2fd08e34d84cec7176615432019644de170bc03696fbc63f474128a2016b0a5d3d4f5a93", 0x69}, {&(0x7f0000001cc0)="635e115d4107159de5574007", 0xc}, {&(0x7f0000001d00)="44786907d2da286576bd00f393d277cf1a96967b73156558e8f218428c4c068a9ac70d750f26a0afdf30407bc440afcd6457b6c43b547cb909e9ba7d179c", 0x3e}], 0x3, &(0x7f0000001d80)=[@iv={0x38, 0x117, 0x2, 0x23, "cb9b7a578c97ba3dafc7337aeafd7bf7e51346180c2044fba7f52e18d48f51b360905e"}], 0x38, 0x4000815}], 0x3, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000001e80)) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000001ec0)=0x401) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000001ec0)=0x401) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001f80)={0x0, 0x7, 0x7}) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001f80)={0x0, 0x7, 0x7}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000002380)={0x0, 0x8, 0xb3, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x28}, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000023c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x64000, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002400), 0x64000, 0x0) write$tun(r12, &(0x7f0000002440)={@val={0x0, 0x8100}, @void, @ipv4=@igmp={{0x6, 0x4, 0x0, 0x9, 0x10c, 0x65, 0x0, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}]}}, {0x17, 0x18, 0x0, @multicast2, "0f9097f48208a493e21e167f5b4d85b4b3847e8302e07e3beed3db56289a47c75ef993cf1d57f1e3bf6a02499a99a471aa2bad32d49b555d2b176a33ee56115f920882f610cbf3e4dbd5159b361993d2ac2d1a35e202c04fd0e0675ef07454e8f92b6aa7fc39e794876fd5c0e47ac36918bf1633b242892c125cca7344dc5278ec6d5f598052b40839e75a56b15c74446a6c258f7c25a5dc72eaeb1b9f6b5679a8c133fa72f38e508323c41cacaf47cbbbd92a2bf9107b9472b3a01b098b6b58bf3830100bf83f4f228b938b1b630c224a1752be3067616b45b650783fae214cb37f14108de70f2abe0f5cd6"}}}, 0x110) syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r1) r13 = syz_genetlink_get_family_id$team(&(0x7f0000002600), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000026c0)={r1, 0x58, &(0x7f0000002640)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000026c0)={r1, 0x58, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002780)={r4, 0x58, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000002b40)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f00000027c0)={0x32c, r13, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d6}}}]}}, {{0x8, 0x1, r0}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x44080}, 0x4) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000002b40)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f00000027c0)={0x32c, r13, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d6}}}]}}, {{0x8, 0x1, r0}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x44080}, 0x4) socket$kcm(0x29, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002fc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002bc0)=@newqdisc={0x388, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x7ff3, 0xf}, {0xc, 0xb}, {0x10}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x6, 0x6, 0x1, 0x1, 0x5, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x4]}}, {{0x1c, 0x1, {0x6b, 0x3, 0xff7f, 0x8, 0x0, 0x401, 0x26, 0x2}}, {0x8, 0x2, [0xa9c1, 0xa5]}}, {{0x1c, 0x1, {0xd, 0x9, 0x8000, 0x8001, 0x0, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0xd7c, 0x0]}}, {{0x1c, 0x1, {0x9, 0x2, 0x7f, 0x6, 0x1, 0x7, 0x65ed, 0x5}}, {0xe, 0x2, [0x2d07, 0xa33f, 0xffff, 0x6, 0x400]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0xb4, 0x8, 0xe9ce, 0x2, 0xb, 0x0, 0xa}}, {0x18, 0x2, [0x1, 0x4, 0xd, 0x5, 0x5, 0x5, 0xfff1, 0x35a5, 0xfff, 0x5]}}, {{0x1c, 0x1, {0x39, 0xe, 0x81, 0x3, 0x0, 0x0, 0x80000001, 0x3}}, {0xa, 0x2, [0x5778, 0x5, 0x8]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x280, 0x2, 0x9, 0x2, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x6, 0x4, 0x3, 0x0, 0x0, 0x3, 0x9}}, {0x16, 0x2, [0x6, 0xf00d, 0x9, 0x1, 0xf, 0xe640, 0xc, 0xff, 0x7]}}, {{0x1c, 0x1, {0x7, 0x0, 0xde36, 0x6, 0x2, 0xffff, 0x6, 0x5}}, {0xe, 0x2, [0xc, 0x7, 0x6, 0xfff, 0x1]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x1a8, 0x2, {{0x8, 0x7, 0x6, 0x6, 0x4d5b933c, 0x1000}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4b1, 0x1, 0x800000, 0x58d}}]}, @TCA_NETEM_LOSS={0xac, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x400, 0x0, 0x10000, 0x100, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x4a, 0x100, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x28bb, 0x0, 0x1, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2591, 0x4a, 0x2, 0x16}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x9, 0x7, 0x24}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4, 0x82}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x4e, 0x0, 0x7, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x8, 0x4, 0x0, 0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x19, 0x2, "fc3d93358cd3667f347bb7eb521f10315720a47e5e"}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb5156a29e85e01ae}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4b9a38ccb3d2feff}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb6ce3caa0fb63f76}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x2, 0x84, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0xa977, 0x8, 0xfffffff6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x768, 0x59, 0x5}}]}, @TCA_NETEM_CORR={0x10, 0x1, {0x99ef, 0xd985}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x20d1}]}, 0x388}, 0x1, 0x0, 0x0, 0x10}, 0xc000) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000003000)={r10, 0x4, 0x4}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8884}, 0x24040044) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8884}, 0x24040044) 1.734428249s ago: executing program 2 (id=4859): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfe, 0x1, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x20000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r1], 0x138}}, 0x20000808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x101, @mcast1, 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r2, @ANYRESOCT=r6], 0xc4}}, 0x2004c050) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) 1.714236971s ago: executing program 1 (id=4860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cdef0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100af5d8f3f95cba14d00612effffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000080)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbb9b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.625097493s ago: executing program 0 (id=4861): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10040840}, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x7813, 0x3, 0x0, 0xfffdffff, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}}, 0x50) 1.486940924s ago: executing program 0 (id=4862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6a}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x20}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x15, 0x0, 0x80000000, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) unshare(0x20000400) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x80000) sendmsg$alg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x404c804) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x30000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="2a7d0000100000000000000048d6acba1ebaa5ecfad50a74561b2b1ba7f8170db727ce366da924ef41fa4ced05a82548c133cf2f7525a1936c91d26746ae1f831d5a61000000264a1e1fab88c640e523fe194f326ef55536c6aed4db39f498d5c9686ffc347f72c69109ab9c92e349e9c377c5de75af3cac01a82c1b2799ba30045c19df311a364a43293ba4912c7743c18062240f454da64fe58f5be1a000dd0c6a7b64cea351c46349887e624c3d392cfd612e4dba57396975b845eae35bc3bb3ce325fcdf27", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r3], 0x20) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1, 0x200000}, 0x1c) shutdown(r12, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 1.219904848s ago: executing program 1 (id=4863): unshare(0x8040480) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b1efb203921b53fd7ea815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x3c4, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x36) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0}, 0x50) 1.080209221s ago: executing program 1 (id=4864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91a2}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r6}, 0x8, 0x10000, 0x8000}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000280), &(0x7f00000006c0)=r3}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001200b00400000004000000041"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, &(0x7f00000014c0), 0x0}, 0x20) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b060102000000000000000006000002050001"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 980.07016ms ago: executing program 2 (id=4865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x12, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @jmp={0x5, 0x0, 0x6, 0x3, 0x0, 0x100, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c}}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0xe4, &(0x7f0000000800)=""/228, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xa, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x2, 0x5, 0x6, 0x9}, {0x4, 0x8, 0xa, 0x2}, {0x0, 0x4, 0x1, 0x4}, {0x3, 0x5, 0xd, 0x6}, {0x1, 0x3, 0xc}]}, 0x94) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000b00)="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") ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000300e5bb"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffffffffffffffff080211000000d0ff000000000000000064000100080026006c0900000a003400020202020202000008000d000200000008000c005b000000"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES8=r5, @ANYBLOB="01000000000000000900000008000300", @ANYRESDEC=r6, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f100500020006000000b12a5225ac271f850800030006ac0f000a000400"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000180ffffffffffff00", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100"], 0x44}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r9, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r9, 0x5) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000058008000825c1c1"], 0x4a) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r11, 0x25, 0x0, @val=@perf_event={0x8}}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wg2\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x1, [{0x1, 0x9}]}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 834.209203ms ago: executing program 1 (id=4866): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) recvfrom$inet6(r1, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) (async) recvfrom$inet6(r1, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) r4 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) (async) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}], 0x2, 0x93f, 0x0, 0x0) (async) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}], 0x2, 0x93f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r6) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 788.96034ms ago: executing program 3 (id=4867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}], {0x95, 0x0, 0x201}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 711.853137ms ago: executing program 4 (id=4868): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001800)={'lo\x00', {0x2, 0x4e23, @broadcast}}) socket$vsock_stream(0x28, 0x1, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x208, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x1d8, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x40}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x8}, @value=@ver_80211n={0x0, 0xa, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x2, 0x2, {0x0, 0x15, @random="99bde167ef9c24407275de62a24dc571a9860bd992"}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0xfffffffffffffffb, 0xba5, 0x0, 0x8}, 0x8, 0x2, 0xeb}}, [{0xdd, 0xf1, "60c16edeafd244b7b67b38ce32845657bca9e26dd4b7c620e5cdf5edff07418b316134397d6f4a88b695c4a04eb37637f74c0c79374870cc210ada0c2c3f0dbb2a8d693497f9ebb2870440245be6886b2865729da10226c365907b44266e905009082b831d0293f691c253893a26db032ab94eb46a51ab61101dd44fd749747ecb77f62cb509bdcb0c9cda0a661fbfa31043794bec50da649f6d0f0e0134cd41bc0890d09ceab7f559498237b73fe509236cc7d10d86aacfb95066e07be789a81e797448ee70679ab3fbb1842e82674e9dab875875435dde995e4a912efb3a4f70f788000f0cae4a8a00e84c24e9d61d33"}, {0xdd, 0x3e, "7d0312e845b67c0a7c31c37b48d090abc32e09459b54749fb85470d587af3b731c708cc9fc01f71c7908843026cd0e0a48e2bfc5782b00d7997e0009c20b"}, {0xdd, 0x38, "97f68fed0f0fc6b1e5930cd8aa595af35a71754c1daa19f747aa412584b3a9365ca6856ea6952cefd310ce1b32568c15102ecacdf731cabb"}, {0xdd, 0x12, "51d4f4847ea3209fea969139f2c33c478642"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) listen(r0, 0x5) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0100008000010125bd7000fddbdf2501090810ce244e2202100000090000000f000000c3000000060000000000c549004007000000000000000000000000000000000000009b8556bb30154a6d29a0803f6a6d87cc57f5db75e8819c00cc2d5fbff70500000000000000cf871b2e0f635770407e32944e04b09999a5117a1107139ba7d0655f8a5a79ca459a2c463c1f8f0b039363637b7b135d01a675c7b1462bcd77fe9f2a43db301397c2e530d2fc943907850e71f4c92cd734ae37dfec69fa349492bb1c515a032ed1ff", @ANYRES32=0x0, @ANYBLOB="01000000fbffff7f80000000c7000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000380)=""/43, 0x2b}], 0x6}, 0x140) 696.525501ms ago: executing program 3 (id=4869): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffff86}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c000) 509.244572ms ago: executing program 0 (id=4870): r0 = socket(0x2a, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0b062dbd70000040000030000000050035000200000005003600040000800a0001007770616e3000000005"], 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@local}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 160.122342ms ago: executing program 4 (id=4871): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8722cbf2b5439b66}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xef, 0x7f}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2d, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x5, 0x100, 0xc7c7, 0xe, 0x8d, 0x7]}]}]}, 0x5c}}, 0x200000c1) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000002603003f60000000001010101", 0x2e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 64.301141ms ago: executing program 3 (id=4872): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000005c0)=@nat={'nat\x00', 0x19, 0x3, 0x332, [0x200000000280, 0x0, 0x0, 0x2000000002b0, 0x200000000406], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x40, 0x88a2, 'hsr0\x00', 'dummy0\x00', 'vlan0\x00', 'geneve1\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xbe, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xf1dc}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x11, 0xf6, 'ip6erspan0\x00', 'caif0\x00', 'macvtap0\x00', 'xfrm0\x00', @local, [0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x8, 0x1}}}], [], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}, {0x3, 0x56, 0x600, 'vlan1\x00', 'veth1_macvtap\x00', 'veth1_to_bridge\x00', 'xfrm0\x00', @link_local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@random="ceaeddd973e9", 0xffffffffffffffff}}}}]}]}, 0x3aa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd03, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 0s ago: executing program 1 (id=4873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x50, r1, 0x1, 0xfffffffe, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x20840}, 0x404c080) kernel console output (not intermixed with test programs): [ 525.181077][T21343] tipc: Disabling bearer [ 525.206594][T21346] __nla_validate_parse: 3 callbacks suppressed [ 525.206616][T21346] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3568'. [ 525.249879][T21352] netlink: 'syz.0.3571': attribute type 2 has an invalid length. [ 525.381651][T21357] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3573'. [ 525.381676][T21357] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3573'. [ 526.219131][T21392] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3587'. [ 526.219159][T21392] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3587'. [ 526.392399][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 526.445815][T21398] xt_check_table_hooks: 56 callbacks suppressed [ 526.445834][T21398] x_tables: unsorted underflow at hook 2 [ 526.446866][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 526.449557][T11557] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.450328][T11557] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.450409][T11557] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.450441][T11557] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.801858][T21412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'. [ 526.830403][T21413] sctp: [Deprecated]: syz.2.3592 (pid 21413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.830403][T21413] Use struct sctp_sack_info instead [ 527.016507][T21416] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3595'. [ 527.114040][T21419] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3594'. [ 528.003514][T21455] syzkaller0: entered promiscuous mode [ 528.003541][T21455] syzkaller0: entered allmulticast mode [ 528.065767][T21458] xt_LOG: level 115 >= 8 [ 530.611127][ T8114] net_ratelimit: 27 callbacks suppressed [ 530.611147][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 530.761279][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 530.870426][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 530.976518][T21580] __nla_validate_parse: 1 callbacks suppressed [ 530.976541][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 530.985633][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 531.090260][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 531.201590][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 531.498859][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 531.639287][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 531.692286][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 531.768385][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 531.786917][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 531.786942][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 531.923327][T21612] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.923925][T21612] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.031028][T21612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.037114][T21612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.002108][T21640] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 534.530182][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.590271][T21621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.590309][T21621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.758852][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 534.780118][T21621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.780153][T21621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.878802][T11555] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.878948][T11555] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.901589][T11555] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.992480][T21657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3642'. [ 534.995840][T21621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.995873][T21621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.192642][T21621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.192664][T21621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.254925][T21532] bridge0: entered promiscuous mode [ 535.272648][T21672] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 535.387106][ T3322] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.387141][ T3322] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.404423][ T3322] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.404457][ T3322] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.502777][T21678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3646'. [ 535.502889][T21678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3646'. [ 535.527653][ T3322] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.527687][ T3322] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.648620][ T8114] net_ratelimit: 7 callbacks suppressed [ 535.648643][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 535.725138][T21623] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.725175][T21623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.759520][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 535.812548][T21623] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.812585][T21623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.868520][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 535.920220][T21623] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.920246][T21623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.020009][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 536.148676][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 536.261036][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 536.368450][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 536.499208][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 536.542227][T21723] netlink: 'syz.4.3660': attribute type 1 has an invalid length. [ 536.584325][T21723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.609881][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 536.629760][T21723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3660'. [ 536.652991][T21727] netlink: 'syz.1.3661': attribute type 2 has an invalid length. [ 536.663404][T21723] bond2: entered promiscuous mode [ 536.663427][T21723] bond2: entered allmulticast mode [ 536.685199][T21723] bond2: (slave dummy0): making interface the new active one [ 536.685220][T21723] dummy0: entered promiscuous mode [ 536.685464][T21723] dummy0: entered allmulticast mode [ 536.701524][T21723] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 536.732359][T21729] syzkaller0: entered promiscuous mode [ 536.732381][T21729] syzkaller0: entered allmulticast mode [ 536.767423][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 536.830106][T21731] lo speed is unknown, defaulting to 1000 [ 536.831945][T21731] wg2 speed is unknown, defaulting to 1000 [ 537.120856][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'. [ 537.272110][T21750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.272873][T21753] netlink: 'syz.0.3670': attribute type 2 has an invalid length. [ 537.440331][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 537.473001][T21763] netlink: 'syz.4.3674': attribute type 12 has an invalid length. [ 538.030132][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 538.342807][T21796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3684'. [ 538.407794][T21806] sctp: [Deprecated]: syz.4.3688 (pid 21806) Use of int in max_burst socket option. [ 538.407794][T21806] Use struct sctp_assoc_value instead [ 538.414892][T21809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3684'. [ 538.998719][T21831] netlink: 'syz.2.3693': attribute type 2 has an invalid length. [ 538.998741][T21831] netlink: 'syz.2.3693': attribute type 11 has an invalid length. [ 538.998753][T21831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3693'. [ 539.110327][T21833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.113951][T21833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.151872][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'. [ 539.166327][T21833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.368727][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.368761][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.430417][T11555] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.430452][T11555] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.438555][ T8114] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.438586][ T8114] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.439212][ T8114] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.439239][ T8114] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.607305][T21854] netlink: 'syz.0.3702': attribute type 1 has an invalid length. [ 539.678046][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3703'. [ 539.759280][T21854] macvtap1: entered allmulticast mode [ 539.874049][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3707'. [ 539.915716][T21872] netlink: 'syz.1.3706': attribute type 23 has an invalid length. [ 540.232177][T21891] netlink: 'syz.4.3712': attribute type 2 has an invalid length. [ 540.434834][T21900] bridge0: port 3(vlan3) entered blocking state [ 540.434989][T21900] bridge0: port 3(vlan3) entered disabled state [ 540.435121][T21900] vlan3: entered allmulticast mode [ 540.435138][T21900] geneve0: entered allmulticast mode [ 540.437261][T21900] vlan3: entered promiscuous mode [ 540.437280][T21900] geneve0: entered promiscuous mode [ 540.624602][T21910] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 540.709716][ T50] net_ratelimit: 31 callbacks suppressed [ 540.709844][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 540.752866][T21914] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 540.774410][T21914] pim6reg1: entered promiscuous mode [ 540.774434][T21914] pim6reg1: entered allmulticast mode [ 540.781163][T21914] tipc: Enabled bearer , priority 0 [ 540.818832][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 540.847640][T21917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 540.948912][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 540.973892][T21914] tipc: Disabling bearer [ 541.080318][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 541.189008][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 541.319110][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 541.425195][T21949] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 541.426363][T21949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 541.452524][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 541.559788][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 541.643411][T21960] syzkaller0: entered promiscuous mode [ 541.643434][T21960] syzkaller0: entered allmulticast mode [ 541.671333][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 541.673741][T21960] tipc: Enabled bearer , priority 0 [ 541.703609][T21967] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 541.703865][T21960] tipc: Resetting bearer [ 541.736157][T21967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.749395][T21967] team0: Port device netdevsim1 added [ 541.752796][T21956] tipc: Resetting bearer [ 541.802154][T21956] tipc: Disabling bearer [ 541.838528][T21971] gretap0: entered promiscuous mode [ 541.838553][T21971] gretap0: entered allmulticast mode [ 541.854543][T21965] __nla_validate_parse: 5 callbacks suppressed [ 541.854561][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3737'. [ 541.854579][T21965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3737'. [ 541.889466][T21972] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 541.905600][T21974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 541.982439][T21972] team0: Port device netdevsim1 removed [ 542.005189][T21972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.015796][T21972] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 542.314907][T21989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3745'. [ 542.414860][T21996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3748'. [ 542.557633][T22002] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.574239][T22002] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.574519][T22002] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.575771][T22005] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 542.663086][T22004] veth5: entered allmulticast mode [ 542.755719][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 542.755743][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 542.782725][T22015] batadv0: entered promiscuous mode [ 542.786148][T22015] macsec2: entered promiscuous mode [ 542.786370][T22015] macsec2: entered allmulticast mode [ 542.787583][T22015] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 543.298146][T22038] Cannot find map_set index 2 as target [ 543.322700][T22046] netlink: 'syz.2.3764': attribute type 12 has an invalid length. [ 543.445152][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 543.445188][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3764'. [ 543.511031][T22049] bond3: option primary_reselect: invalid value (6) [ 543.530967][T22049] bond3 (unregistering): Released all slaves [ 543.580346][T22050] geneve2: entered promiscuous mode [ 543.580361][T22050] geneve2: entered allmulticast mode [ 543.672093][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'. [ 544.261423][T22076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3770'. [ 544.586606][T22101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.621500][T22101] veth0: entered promiscuous mode [ 544.686399][T22100] veth0: left promiscuous mode [ 544.860864][T22116] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20000 [ 544.895684][T22111] syzkaller0: entered promiscuous mode [ 544.895711][T22111] syzkaller0: entered allmulticast mode [ 545.691862][T22148] netlink: 'syz.0.3791': attribute type 8 has an invalid length. [ 547.462407][ T8114] net_ratelimit: 26 callbacks suppressed [ 547.462429][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 547.579425][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 547.606788][T22170] netlink: 'syz.4.3795': attribute type 12 has an invalid length. [ 547.606809][T22170] netlink: 'syz.4.3795': attribute type 29 has an invalid length. [ 547.606828][T22170] __nla_validate_parse: 37 callbacks suppressed [ 547.606839][T22170] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3795'. [ 547.606867][T22170] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3795'. [ 547.607270][T22170] netlink: 'syz.4.3795': attribute type 12 has an invalid length. [ 547.607285][T22170] netlink: 'syz.4.3795': attribute type 29 has an invalid length. [ 547.607297][T22170] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3795'. [ 547.607312][T22170] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3795'. [ 547.691157][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 547.743271][T22170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3795'. [ 547.799944][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 547.886361][T22177] xt_CT: No such helper "netbios-ns" [ 547.911540][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 548.038976][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 548.149790][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 548.250415][T22198] netlink: 'syz.3.3805': attribute type 23 has an invalid length. [ 548.250441][T22198] netlink: 'syz.3.3805': attribute type 11 has an invalid length. [ 548.250597][T22200] netlink: 'syz.3.3805': attribute type 23 has an invalid length. [ 548.250614][T22200] netlink: 'syz.3.3805': attribute type 11 has an invalid length. [ 548.258765][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 548.389253][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 548.499996][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 548.556241][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3809'. [ 548.873830][T22228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'. [ 549.100467][T22240] siw: device registration error -23 [ 549.186987][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3821'. [ 549.394582][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'. [ 549.427387][T22259] vlan0: entered allmulticast mode [ 549.427410][T22259] geneve0: entered allmulticast mode [ 549.608007][T22265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'. [ 549.981920][T22270] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 550.098850][T22293] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 550.126191][T22270] bond3 (unregistering): Released all slaves [ 550.447456][T22292] sctp: [Deprecated]: syz.0.3831 (pid 22292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.447456][T22292] Use struct sctp_sack_info instead [ 550.922481][T22324] siw: device registration error -23 [ 551.127810][T22340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.416236][T22361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 551.451454][T22359] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 551.599867][T22359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.640903][T22363] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 551.644845][T22363] bond4: (slave batadv1): making interface the new active one [ 551.646161][T22363] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 551.681007][T22364] pimreg: entered allmulticast mode [ 551.876130][T22390] xt_l2tp: invalid flags combination: 8 [ 551.926698][T22390] netlink: 'syz.1.3862': attribute type 2 has an invalid length. [ 551.975138][T22395] netlink: 'syz.4.3864': attribute type 1 has an invalid length. [ 552.065841][T22396] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.065982][T22396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.207486][T22401] syzkaller1: entered promiscuous mode [ 552.207509][T22401] syzkaller1: entered allmulticast mode [ 552.528926][ T50] net_ratelimit: 28 callbacks suppressed [ 552.528948][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 552.590760][T22424] sock: sock_timestamping_bind_phc: sock not bind to device [ 552.639405][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 552.748785][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 552.817012][T22429] __nla_validate_parse: 20 callbacks suppressed [ 552.817035][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 552.833476][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 552.834447][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 552.868909][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 553.004194][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 553.084030][T22445] netlink: 'syz.4.3878': attribute type 1 has an invalid length. [ 553.153258][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 553.259376][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 553.273228][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 553.414235][T22463] syzkaller0: entered promiscuous mode [ 553.414259][T22463] syzkaller0: entered allmulticast mode [ 553.520591][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3886'. [ 554.502989][ C1] openvswitch: cpu_id mismatch with handler threads [ 554.535052][T22499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 554.691200][T22503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3893'. [ 554.746354][T22504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3893'. [ 555.070706][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3893'. [ 556.231577][T22466] netlink: 'syz.1.3883': attribute type 5 has an invalid length. [ 556.231596][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3883'. [ 556.262500][T22490] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 556.381668][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 556.446592][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 556.489595][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 556.589181][T22515] lo speed is unknown, defaulting to 1000 [ 556.592094][T22515] wg2 speed is unknown, defaulting to 1000 [ 556.680198][T22531] bond4: option lacp_active: invalid value (5) [ 556.683328][T22531] bond4 (unregistering): Released all slaves [ 556.998462][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 557.539557][T11555] net_ratelimit: 3 callbacks suppressed [ 557.539578][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 557.548485][T22580] FAULT_INJECTION: forcing a failure. [ 557.548485][T22580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.548518][T22580] CPU: 0 UID: 0 PID: 22580 Comm: syz.1.3911 Not tainted syzkaller #0 PREEMPT(full) [ 557.548550][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.548562][T22580] Call Trace: [ 557.548570][T22580] [ 557.548579][T22580] dump_stack_lvl+0xe8/0x150 [ 557.548612][T22580] should_fail_ex+0x410/0x560 [ 557.548640][T22580] _copy_from_user+0x2d/0xb0 [ 557.548669][T22580] ___sys_sendmsg+0x1c6/0x360 [ 557.548695][T22580] ? __lock_acquire+0x747/0x2de0 [ 557.548721][T22580] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.548782][T22580] ? __fget_files+0x2a/0x420 [ 557.548809][T22580] ? __fget_files+0x3a2/0x420 [ 557.548846][T22580] __x64_sys_sendmsg+0x1b1/0x290 [ 557.548875][T22580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.548923][T22580] do_syscall_64+0x166/0x520 [ 557.548945][T22580] ? trace_irq_disable+0x3b/0x140 [ 557.548965][T22580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.548985][T22580] ? clear_bhb_loop+0x70/0xc0 [ 557.549011][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.549030][T22580] RIP: 0033:0x7f2c16d9e159 [ 557.549049][T22580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.549065][T22580] RSP: 002b:00007f2c14ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.549086][T22580] RAX: ffffffffffffffda RBX: 00007f2c17025fa0 RCX: 00007f2c16d9e159 [ 557.549100][T22580] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 557.549112][T22580] RBP: 00007f2c14ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.549125][T22580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.549137][T22580] R13: 00007f2c17026038 R14: 00007f2c17025fa0 R15: 00007ffd9d584378 [ 557.549170][T22580] [ 557.654211][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 557.771825][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 557.870109][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 557.885085][T22589] __nla_validate_parse: 4 callbacks suppressed [ 557.885170][T22589] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3915'. [ 557.896894][T22589] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3915'. [ 557.918612][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 557.978917][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 558.040407][T22602] xt_cgroup: path and classid specified [ 558.041040][T22602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3918'. [ 558.082613][T22600] Cannot find del_set index 2 as target [ 558.109151][T22602] xt_cgroup: path and classid specified [ 558.109521][T22610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3918'. [ 558.135326][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 558.192610][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 558.194107][T22619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'. [ 558.240830][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 558.252740][T22624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3922'. [ 558.408430][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 558.429631][T22633] FAULT_INJECTION: forcing a failure. [ 558.429631][T22633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.429663][T22633] CPU: 0 UID: 0 PID: 22633 Comm: syz.1.3925 Not tainted syzkaller #0 PREEMPT(full) [ 558.429685][T22633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.429696][T22633] Call Trace: [ 558.429705][T22633] [ 558.429713][T22633] dump_stack_lvl+0xe8/0x150 [ 558.429747][T22633] should_fail_ex+0x410/0x560 [ 558.429773][T22633] _copy_from_user+0x2d/0xb0 [ 558.429798][T22633] __copy_msghdr+0x390/0x590 [ 558.429828][T22633] ___sys_sendmsg+0x213/0x360 [ 558.429852][T22633] ? __lock_acquire+0x747/0x2de0 [ 558.429877][T22633] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.429936][T22633] ? __fget_files+0x2a/0x420 [ 558.429962][T22633] ? __fget_files+0x3a2/0x420 [ 558.429998][T22633] __x64_sys_sendmsg+0x1b1/0x290 [ 558.430035][T22633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.430079][T22633] do_syscall_64+0x166/0x520 [ 558.430100][T22633] ? trace_irq_disable+0x3b/0x140 [ 558.430119][T22633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.430138][T22633] ? clear_bhb_loop+0x70/0xc0 [ 558.430162][T22633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.430182][T22633] RIP: 0033:0x7f2c16d9e159 [ 558.430200][T22633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.430217][T22633] RSP: 002b:00007f2c14ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.430240][T22633] RAX: ffffffffffffffda RBX: 00007f2c17025fa0 RCX: 00007f2c16d9e159 [ 558.430255][T22633] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 558.430268][T22633] RBP: 00007f2c14ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 558.430281][T22633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.430293][T22633] R13: 00007f2c17026038 R14: 00007f2c17025fa0 R15: 00007ffd9d584378 [ 558.430323][T22633] [ 558.530738][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 558.570837][T22636] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.669800][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 558.670501][T22645] netlink: 'syz.2.3928': attribute type 16 has an invalid length. [ 558.670527][T22645] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3928'. [ 559.114120][T22657] xt_CT: No such helper "netbios-ns" [ 561.051769][T22604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.248157][T22679] FAULT_INJECTION: forcing a failure. [ 561.248157][T22679] name failslab, interval 1, probability 0, space 0, times 0 [ 561.248199][T22679] CPU: 1 UID: 0 PID: 22679 Comm: syz.1.3937 Not tainted syzkaller #0 PREEMPT(full) [ 561.248223][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.248234][T22679] Call Trace: [ 561.248242][T22679] [ 561.248251][T22679] dump_stack_lvl+0xe8/0x150 [ 561.248282][T22679] should_fail_ex+0x410/0x560 [ 561.248310][T22679] should_failslab+0xa8/0x100 [ 561.248336][T22679] __kmalloc_noprof+0xfe/0x720 [ 561.248357][T22679] ? sock_kmalloc+0xd6/0x160 [ 561.248381][T22679] ? sock_kmalloc+0xd6/0x160 [ 561.248413][T22679] sock_kmalloc+0xd6/0x160 [ 561.248442][T22679] ____sys_sendmsg+0x1be/0x850 [ 561.248473][T22679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.248507][T22679] ? import_iovec+0x73/0xa0 [ 561.248536][T22679] ___sys_sendmsg+0x2a5/0x360 [ 561.248560][T22679] ? __lock_acquire+0x747/0x2de0 [ 561.248584][T22679] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.248639][T22679] ? __fget_files+0x2a/0x420 [ 561.248665][T22679] ? __fget_files+0x3a2/0x420 [ 561.248700][T22679] __x64_sys_sendmsg+0x1b1/0x290 [ 561.248727][T22679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.248771][T22679] do_syscall_64+0x166/0x520 [ 561.248793][T22679] ? trace_irq_disable+0x3b/0x140 [ 561.248812][T22679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.248832][T22679] ? clear_bhb_loop+0x70/0xc0 [ 561.248855][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.248875][T22679] RIP: 0033:0x7f2c16d9e159 [ 561.248894][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.248911][T22679] RSP: 002b:00007f2c14ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.248933][T22679] RAX: ffffffffffffffda RBX: 00007f2c17025fa0 RCX: 00007f2c16d9e159 [ 561.248948][T22679] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 561.248962][T22679] RBP: 00007f2c14ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 561.248975][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.248987][T22679] R13: 00007f2c17026038 R14: 00007f2c17025fa0 R15: 00007ffd9d584378 [ 561.249019][T22679] [ 561.307845][T22682] netlink: 'syz.4.3938': attribute type 1 has an invalid length. [ 561.354806][T22682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.411021][T22682] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 561.540192][T22691] netlink: 'syz.3.3941': attribute type 2 has an invalid length. [ 561.540221][T22691] netlink: 'syz.3.3941': attribute type 2 has an invalid length. [ 561.879629][T22682] bond3: entered promiscuous mode [ 561.879656][T22682] bond3: entered allmulticast mode [ 562.236917][T22711] netlink: 'syz.0.3944': attribute type 10 has an invalid length. [ 562.237055][T22711] tipc: Resetting bearer [ 562.317048][T22711] tipc: Disabling bearer [ 562.427070][T22711] team0 (unregistering): Port device team_slave_0 removed [ 562.473484][T22711] team0 (unregistering): Port device team_slave_1 removed [ 562.543618][T22711] team0 (unregistering): Port device dummy0 removed [ 562.609312][ T12] net_ratelimit: 26 callbacks suppressed [ 562.609333][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 562.719127][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 562.824993][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.859186][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 562.930881][T22746] netlink: 'syz.2.3957': attribute type 10 has an invalid length. [ 563.004836][T22746] team0 (unregistering): Port device team_slave_0 removed [ 563.019392][T22752] FAULT_INJECTION: forcing a failure. [ 563.019392][T22752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.019424][T22752] CPU: 1 UID: 0 PID: 22752 Comm: syz.3.3959 Not tainted syzkaller #0 PREEMPT(full) [ 563.019446][T22752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.019459][T22752] Call Trace: [ 563.019467][T22752] [ 563.019475][T22752] dump_stack_lvl+0xe8/0x150 [ 563.019508][T22752] should_fail_ex+0x410/0x560 [ 563.019536][T22752] _copy_to_user+0x31/0xb0 [ 563.019566][T22752] simple_read_from_buffer+0xe1/0x170 [ 563.019599][T22752] proc_fail_nth_read+0x1bb/0x230 [ 563.019636][T22752] ? common_file_perm+0x20e/0x2b0 [ 563.019662][T22752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.019696][T22752] ? rw_verify_area+0x24a/0x4c0 [ 563.019726][T22752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.019754][T22752] vfs_read+0x213/0xa80 [ 563.019787][T22752] ? __pfx___mutex_lock+0x10/0x10 [ 563.019811][T22752] ? __pfx_vfs_read+0x10/0x10 [ 563.019841][T22752] ? __fget_files+0x2a/0x420 [ 563.019871][T22752] ? __fget_files+0x3a2/0x420 [ 563.019896][T22752] ? __fget_files+0x2a/0x420 [ 563.019931][T22752] ksys_read+0x150/0x270 [ 563.019962][T22752] ? __pfx_ksys_read+0x10/0x10 [ 563.020003][T22752] do_syscall_64+0x166/0x520 [ 563.020023][T22752] ? trace_irq_disable+0x3b/0x140 [ 563.020044][T22752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.020063][T22752] ? clear_bhb_loop+0x70/0xc0 [ 563.020088][T22752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.020107][T22752] RIP: 0033:0x7f8fc555e98e [ 563.020125][T22752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.020143][T22752] RSP: 002b:00007f8fc63befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.020165][T22752] RAX: ffffffffffffffda RBX: 00007f8fc63bf6c0 RCX: 00007f8fc555e98e [ 563.020180][T22752] RDX: 000000000000000f RSI: 00007f8fc63bf0a0 RDI: 0000000000000004 [ 563.020194][T22752] RBP: 00007f8fc63bf090 R08: 0000000000000000 R09: 0000000000000000 [ 563.020207][T22752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.020218][T22752] R13: 00007f8fc5826038 R14: 00007f8fc5825fa0 R15: 00007ffcdf277bd8 [ 563.020250][T22752] [ 563.053177][T22753] __nla_validate_parse: 13 callbacks suppressed [ 563.053197][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3958'. [ 563.053213][T22753] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.094073][T22754] netlink: 'syz.0.3960': attribute type 1 has an invalid length. [ 563.170444][T22746] team0 (unregistering): Port device team_slave_1 removed [ 563.220711][T22764] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 563.220731][T22764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3960'. [ 563.371222][T22754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.379818][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 563.427359][T22759] bond4: (slave dummy0): Enslaving as a backup interface with a down link [ 563.437807][T22764] dummy0: entered promiscuous mode [ 563.471283][T22764] bond4: (slave dummy0): Releasing backup interface [ 563.489663][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 563.547738][T22774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.547804][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.547819][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.547880][T22774] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.547893][T22774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3964'. [ 563.605853][T22777] ipvlan2: entered allmulticast mode [ 563.606099][T22777] macvlan1: entered allmulticast mode [ 563.607248][T22777] batman_adv: batadv0: Adding interface: ipvlan2 [ 563.607262][T22777] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.607293][T22777] batman_adv: batadv0: Interface activated: ipvlan2 [ 563.689089][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 563.807196][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 563.838846][T22793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3968'. [ 563.840411][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 563.949006][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 564.061428][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 564.175323][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 564.380001][T22817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3974'. [ 564.835106][T22836] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 564.899756][T22761] Bluetooth: hci5: command 0x0406 tx timeout [ 565.220079][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 565.558116][T22861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.595584][T22861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.607564][T22861] bond1: (slave bond0): making interface the new active one [ 565.624080][T22861] bond1: (slave bond0): Enslaving as an active interface with an up link [ 565.642694][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 565.694838][T22861] bond1 (unregistering): (slave bond0): Releasing active interface [ 565.704732][T22861] bond1 (unregistering): Released all slaves [ 566.146142][T22889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 567.668559][T11557] net_ratelimit: 27 callbacks suppressed [ 567.668583][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 567.779968][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 567.888542][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 567.998889][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 568.108593][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 568.218523][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 568.329384][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 568.478373][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 568.532683][T22866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.611140][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 568.723953][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 568.891166][T22918] __nla_validate_parse: 11 callbacks suppressed [ 568.891187][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 569.000665][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3995'. [ 569.573408][T22926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3996'. [ 569.604419][T22955] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4008'. [ 569.680232][T22962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'. [ 569.687478][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'. [ 569.693639][T22966] netlink: 'syz.1.4008': attribute type 39 has an invalid length. [ 569.922608][T22957] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4010'. [ 569.922662][T22957] netlink: 'syz.4.4010': attribute type 9 has an invalid length. [ 569.922677][T22957] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4010'. [ 569.922691][T22957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4010'. [ 570.278024][T22986] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 570.323685][T22986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.671146][T23016] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 570.813882][T23019] syzkaller0: entered promiscuous mode [ 570.814333][T23019] syzkaller0: entered allmulticast mode [ 570.959855][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 571.003528][T23041] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 571.039102][T23045] IPVS: Unknown mcast interface: vcan0 [ 571.065143][T23047] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 573.690139][ T13] net_ratelimit: 17 callbacks suppressed [ 573.690160][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 573.798909][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 573.920296][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 573.923400][T23086] __nla_validate_parse: 4 callbacks suppressed [ 573.923418][T23086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4039'. [ 573.938712][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 573.997555][T23094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4039'. [ 574.030752][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 574.139520][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 574.251730][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 574.428434][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 574.558660][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 574.670576][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 574.780807][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 575.138698][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 576.844499][T23080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.845273][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'. [ 577.004853][T23123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4047'. [ 577.028748][T23127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4046'. [ 577.029802][T23123] sock: sock_timestamping_bind_phc: sock not bind to device [ 577.109299][T23132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4048'. [ 577.185234][T23126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'. [ 577.188178][T23126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'. [ 577.188913][T23126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'. [ 577.487222][T23157] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 577.599991][T23157] bond5: entered promiscuous mode [ 577.600566][T23157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.695505][T23157] bond5: (slave bridge3): making interface the new active one [ 577.695532][T23157] bridge3: entered promiscuous mode [ 577.719594][T23157] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 578.167382][T23199] ip6t_REJECT: ECHOREPLY is not supported [ 578.179140][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 578.357235][T23219] bridge0: entered allmulticast mode [ 578.439572][T23229] FAULT_INJECTION: forcing a failure. [ 578.439572][T23229] name failslab, interval 1, probability 0, space 0, times 0 [ 578.439607][T23229] CPU: 0 UID: 0 PID: 23229 Comm: syz.2.4069 Not tainted syzkaller #0 PREEMPT(full) [ 578.439631][T23229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.439643][T23229] Call Trace: [ 578.439651][T23229] [ 578.439658][T23229] dump_stack_lvl+0xe8/0x150 [ 578.439692][T23229] should_fail_ex+0x410/0x560 [ 578.439720][T23229] should_failslab+0xa8/0x100 [ 578.439744][T23229] ? skb_clone+0x212/0x3a0 [ 578.439770][T23229] kmem_cache_alloc_noprof+0xa1/0x600 [ 578.439807][T23229] ? skb_clone+0x212/0x3a0 [ 578.439839][T23229] skb_clone+0x212/0x3a0 [ 578.439871][T23229] __netlink_deliver_tap+0x413/0x860 [ 578.439912][T23229] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.439941][T23229] netlink_deliver_tap+0x19c/0x1b0 [ 578.439970][T23229] netlink_sendskb+0x68/0x140 [ 578.440007][T23229] netlink_rcv_skb+0x2a4/0x4a0 [ 578.440035][T23229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 578.440061][T23229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.440101][T23229] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.440128][T23229] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.440162][T23229] netlink_unicast+0x7bd/0x940 [ 578.440198][T23229] netlink_sendmsg+0x813/0xb40 [ 578.440235][T23229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.440272][T23229] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.440296][T23229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.440321][T23229] sock_sendmsg_nosec+0x13a/0x180 [ 578.440354][T23229] ____sys_sendmsg+0x54e/0x850 [ 578.440386][T23229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.440420][T23229] ? import_iovec+0x73/0xa0 [ 578.440448][T23229] ___sys_sendmsg+0x2a5/0x360 [ 578.440471][T23229] ? __lock_acquire+0x747/0x2de0 [ 578.440496][T23229] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.440555][T23229] ? __fget_files+0x2a/0x420 [ 578.440584][T23229] ? __fget_files+0x3a2/0x420 [ 578.440621][T23229] __x64_sys_sendmsg+0x1b1/0x290 [ 578.440649][T23229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.440696][T23229] do_syscall_64+0x166/0x520 [ 578.440716][T23229] ? trace_irq_disable+0x3b/0x140 [ 578.440736][T23229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.440757][T23229] ? clear_bhb_loop+0x70/0xc0 [ 578.440782][T23229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.440802][T23229] RIP: 0033:0x7f169319e159 [ 578.440820][T23229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.440838][T23229] RSP: 002b:00007f1694026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.440860][T23229] RAX: ffffffffffffffda RBX: 00007f1693425fa0 RCX: 00007f169319e159 [ 578.440874][T23229] RDX: 00000000000480d0 RSI: 0000200000000400 RDI: 0000000000000003 [ 578.440887][T23229] RBP: 00007f1694026090 R08: 0000000000000000 R09: 0000000000000000 [ 578.440900][T23229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.440912][T23229] R13: 00007f1693426038 R14: 00007f1693425fa0 R15: 00007fffcf167878 [ 578.440960][T23229] [ 578.826012][ T13] net_ratelimit: 65 callbacks suppressed [ 578.826034][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 578.933506][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 579.039174][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 579.065553][T23248] __nla_validate_parse: 70 callbacks suppressed [ 579.065575][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 579.211142][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 579.321657][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 579.431618][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 579.487781][T23265] syzkaller0: entered promiscuous mode [ 579.487804][T23265] syzkaller0: entered allmulticast mode [ 579.503411][T23265] tipc: Enabled bearer , priority 0 [ 579.624416][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 579.643814][T23273] tipc: Resetting bearer [ 579.691878][T23262] tipc: Resetting bearer [ 579.779313][T23262] tipc: Disabling bearer [ 579.829208][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 579.943573][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 580.049229][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 580.090806][T23293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4088'. [ 580.104933][T23292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 580.199729][T23298] netlink: 'syz.2.4091': attribute type 7 has an invalid length. [ 580.383786][T23302] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.411487][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'. [ 580.442530][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4094'. [ 580.495380][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 580.523522][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 580.561063][T23315] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 580.594469][T23315] bond5: entered promiscuous mode [ 580.594887][T23315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.704761][T23326] tipc: Enabled bearer , priority 10 [ 580.733800][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4099'. [ 580.836374][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 580.980836][T23338] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 581.245721][T23353] netlink: 'syz.2.4104': attribute type 2 has an invalid length. [ 581.245746][T23353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4104'. [ 581.530449][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 581.532014][T23373] netlink: 'syz.1.4107': attribute type 4 has an invalid length. [ 581.610647][T23376] netlink: 'syz.1.4107': attribute type 4 has an invalid length. [ 581.679854][T21549] tipc: Node number set to 2893125447 [ 582.227778][T23404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 582.416104][T23417] netlink: 'syz.2.4121': attribute type 1 has an invalid length. [ 582.972822][T23420] infiniband syz0: set down [ 582.972945][T23420] infiniband syz0: added bond0 [ 583.006610][T23420] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 583.006840][T23420] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 583.006885][T23420] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 583.085175][T23420] RDS/IB: syz0: added [ 583.085832][T23420] smc: adding ib device syz0 with port count 1 [ 583.086021][T23420] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 583.929715][ T13] net_ratelimit: 38 callbacks suppressed [ 583.929736][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 584.049855][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 584.161310][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 584.271181][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 584.311184][T23481] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 584.381504][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 584.484548][T23485] __nla_validate_parse: 10 callbacks suppressed [ 584.484570][T23485] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4140'. [ 584.537477][T23485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 584.538919][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 584.618676][T23488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 584.621251][T23488] nbd: nbd64 already in use [ 584.648474][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 584.761523][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 584.845912][T23285] udevd[23285]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 584.871223][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 584.892337][T23495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 585.096491][T23497] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4142'. [ 585.161159][T23500] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 585.200593][T23503] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 585.277802][T23505] netlink: 'syz.2.4145': attribute type 1 has an invalid length. [ 585.444620][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 585.447739][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'. [ 585.636648][T23514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4148'. [ 585.636675][T23514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4148'. [ 585.636690][T23514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4148'. [ 585.651131][T23514] veth0: entered promiscuous mode [ 585.727236][T23520] veth0: left promiscuous mode [ 585.832210][T23522] syzkaller0: entered promiscuous mode [ 585.832232][T23522] syzkaller0: entered allmulticast mode [ 586.320213][T23545] netlink: 'syz.3.4157': attribute type 1 has an invalid length. [ 586.347834][T23545] bond3: entered promiscuous mode [ 586.347898][T23545] bond3: entered allmulticast mode [ 586.364280][T23545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.398143][T23545] erspan1: entered allmulticast mode [ 586.412214][T23545] bond3: (slave erspan1): making interface the new active one [ 586.412239][T23545] erspan1: entered promiscuous mode [ 586.414459][T23545] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 586.479842][T23545] syz.3.4157 (23545) used obsolete PPPIOCDETACH ioctl [ 586.768181][T23561] vlan5: entered allmulticast mode [ 586.768761][T23561] bridge4: entered allmulticast mode [ 586.772487][T23561] bridge4: port 1(erspan0) entered blocking state [ 586.772648][T23561] bridge4: port 1(erspan0) entered disabled state [ 586.772768][T23561] erspan0: entered allmulticast mode [ 586.774004][T23561] erspan0: entered promiscuous mode [ 586.774728][T23561] bridge4: port 1(erspan0) entered blocking state [ 586.774834][T23561] bridge4: port 1(erspan0) entered forwarding state [ 587.511463][T23602] netlink: 'syz.1.4170': attribute type 6 has an invalid length. [ 587.516193][T23602] netlink: 'syz.1.4170': attribute type 6 has an invalid length. [ 587.535217][T23605] vlan3: entered allmulticast mode [ 587.645450][T23607] siw: device registration error -23 [ 587.963744][T23625] bridge0: port 3(vlan3) entered blocking state [ 587.963806][T23625] bridge0: port 3(vlan3) entered disabled state [ 587.963881][T23625] vlan3: entered allmulticast mode [ 587.963890][T23625] geneve0: entered allmulticast mode [ 587.964950][T23625] vlan3: entered promiscuous mode [ 587.964968][T23625] geneve0: entered promiscuous mode [ 588.110264][T23634] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 588.141107][T23638] sctp: [Deprecated]: syz.3.4181 (pid 23638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.141107][T23638] Use struct sctp_sack_info instead [ 588.783482][T23677] batman_adv: batadv0: Adding interface: gretap1 [ 588.783503][T23677] batman_adv: batadv0: The MTU of interface gretap1 is too small (1414) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.783535][T23677] batman_adv: batadv0: Interface activated: gretap1 [ 589.040118][ T12] net_ratelimit: 34 callbacks suppressed [ 589.040140][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 589.151045][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 589.278958][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 589.389177][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 589.499112][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 589.608702][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 589.718762][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 589.726119][T23721] __nla_validate_parse: 15 callbacks suppressed [ 589.726138][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4203'. [ 589.829169][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 589.893259][T23727] tipc: Enabling of bearer rejected, already enabled [ 589.939557][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 589.984110][T23730] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4206'. [ 590.051318][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 590.154386][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 590.227247][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 590.239545][T23742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4209'. [ 590.265090][T23740] ip6gre1: entered promiscuous mode [ 590.265118][T23740] ip6gre1: entered allmulticast mode [ 590.474255][T23756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4211'. [ 590.499331][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 590.533058][T23758] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4212'. [ 590.533084][T23758] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4212'. [ 590.795367][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4215'. [ 590.873540][T23771] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4217'. [ 591.116753][T23780] netlink: 'syz.1.4219': attribute type 11 has an invalid length. [ 591.209530][T23783] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 591.257524][T23783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.274200][T23788] bond4: entered allmulticast mode [ 591.297777][T23783] batadv_slave_1: entered promiscuous mode [ 591.389228][T23781] batadv_slave_1: left promiscuous mode [ 591.984737][T23809] tipc: Enabling of bearer rejected, already enabled [ 592.765453][T23831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 593.130388][T23842] netlink: 'syz.1.4241': attribute type 4 has an invalid length. [ 593.171374][T23842] netlink: 'syz.1.4241': attribute type 4 has an invalid length. [ 593.580370][T21557] hid-generic 0005:0B57:05DF.0001: item fetching failed at offset 0/3 [ 593.581742][T21557] hid-generic 0005:0B57:05DF.0001: probe with driver hid-generic failed with error -22 [ 594.048464][ T12] net_ratelimit: 34 callbacks suppressed [ 594.048481][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 594.169755][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 594.280147][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 594.389175][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 594.400619][T21557] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 594.473253][T23889] netlink: 'syz.3.4252': attribute type 29 has an invalid length. [ 594.500288][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 594.508037][T23890] netlink: 'syz.0.4253': attribute type 4 has an invalid length. [ 594.549429][ T83] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 594.550177][T23890] netlink: 'syz.0.4253': attribute type 4 has an invalid length. [ 594.609868][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 594.677803][T23895] batadv_slave_0: entered allmulticast mode [ 594.689717][T23895] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 594.739656][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 594.889316][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 594.999084][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 595.133480][T23917] __nla_validate_parse: 12 callbacks suppressed [ 595.133495][T23917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'. [ 595.150898][T21561] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 595.373812][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4267'. [ 595.424024][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4267'. [ 595.428905][ T83] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.433271][T11555] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.433381][T11555] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.433415][T11555] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.494565][T23938] SET target dimension over the limit! [ 595.751269][T23941] sctp: [Deprecated]: syz.0.4268 (pid 23941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.751269][T23941] Use struct sctp_sack_info instead [ 596.033024][T11555] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.033275][T11555] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.100270][T21561] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.120732][T23950] netlink: 'syz.2.4271': attribute type 1 has an invalid length. [ 596.215641][T23959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4274'. [ 596.977585][T23954] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 596.977630][T23954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 596.977733][T23954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 597.121300][T23966] syzkaller1: entered promiscuous mode [ 597.121324][T23966] syzkaller1: entered allmulticast mode [ 597.173400][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'. [ 597.213411][T23974] netlink: 'syz.1.4278': attribute type 6 has an invalid length. [ 597.213435][T23974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4278'. [ 597.553190][T23991] bond6 (unregistering): Released all slaves [ 597.669745][T24006] netlink: 'syz.3.4283': attribute type 4 has an invalid length. [ 597.677403][T24000] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 597.700453][T24000] bond6 (unregistering): Released all slaves [ 597.744906][T23993] netlink: 'syz.3.4283': attribute type 4 has an invalid length. [ 597.884185][T23999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4283'. [ 597.998729][T24016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.999463][T24016] bridge0: port 4(bond6) entered blocking state [ 597.999642][T24016] bridge0: port 4(bond6) entered disabled state [ 597.999769][T24016] bond6: entered allmulticast mode [ 598.002073][T24016] bond6: entered promiscuous mode [ 598.740282][T24061] syzkaller0: entered promiscuous mode [ 598.740304][T24061] syzkaller0: entered allmulticast mode [ 598.765843][T24061] simple: /dev/video#_74 [ 598.765865][T24061] simple: /dev/video#_148 [ 598.765877][T24061] simple: /dev/video#_222 [ 598.765886][T24061] simple: /dev/video#_296 [ 598.765896][T24061] simple: /dev/video#_370 [ 598.765906][T24061] simple: /dev/video#_444 [ 598.765917][T24061] simple: /dev/video#_518 [ 598.765927][T24061] simple: /dev/video#_592 [ 598.765937][T24061] simple: /dev/video#_666 [ 598.765948][T24061] simple: /dev/video#_740 [ 598.765958][T24061] simple: /dev/video#_814 [ 598.765968][T24061] simple: /dev/video#_888 [ 598.765978][T24061] simple: /dev/video#_962 [ 598.765987][T24061] simple: /dev/video#_1036 [ 598.765997][T24061] simple: /dev/video#_1110 [ 598.766006][T24061] simple: /dev/video#_1184 [ 598.766016][T24061] simple: /dev/video#_1258 [ 598.766026][T24061] simple: /dev/video#_1332 [ 598.766034][T24061] simple: /dev/video#_1406 [ 598.766043][T24061] simple: /dev/video#_1480 [ 598.766053][T24061] simple: /dev/video#_1554 [ 598.766062][T24061] simple: /dev/video#_1628 [ 598.766072][T24061] simple: /dev/video#_1702 [ 598.766081][T24061] simple: /dev/video#_1776 [ 598.766091][T24061] simple: /dev/video#_1850 [ 598.766100][T24061] simple: /dev/video#_1924 [ 598.766110][T24061] simple: /dev/video#_1998 [ 598.766119][T24061] simple: /dev/video#_2072 [ 598.766130][T24061] simple: /dev/video#_2146 [ 598.766140][T24061] simple: /dev/video#_2220 [ 598.766150][T24061] simple: /dev/video#_2294 [ 598.766160][T24061] simple: /dev/video#_2368 [ 598.914527][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 599.058975][ T12] net_ratelimit: 22 callbacks suppressed [ 599.058995][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 599.230225][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 599.322970][T24076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4307'. [ 599.322995][T24076] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4307'. [ 599.338904][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 599.449572][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 599.558672][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 599.579184][T24090] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 599.674870][T24090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.678127][T24092] netlink: 'syz.4.4313': attribute type 3 has an invalid length. [ 599.730754][T24095] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 599.780696][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 599.862578][T24096] netlink: 'syz.3.4314': attribute type 4 has an invalid length. [ 599.918435][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 600.028382][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 600.093851][T24109] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.143057][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 600.291004][T24115] netlink: 'syz.4.4322': attribute type 3 has an invalid length. [ 600.328364][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 600.338927][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 600.562272][T24128] __nla_validate_parse: 5 callbacks suppressed [ 600.562294][T24128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4327'. [ 600.710025][T24132] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 600.727235][T24132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4328'. [ 600.741941][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 600.942900][T24145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.200589][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.279148][T24165] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 601.473492][T24165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.491348][T24165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.503795][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 601.513515][T24182] netlink: 'syz.0.4344': attribute type 10 has an invalid length. [ 601.516056][T24165] 8021q: adding VLAN 0 to HW filter on device eth0 [ 601.533812][T24165] 8021q: adding VLAN 0 to HW filter on device eth1 [ 601.536085][T24165] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.552300][T24165] 8021q: adding VLAN 0 to HW filter on device eth3 [ 601.568509][T24165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.584068][T24171] netlink: 'syz.4.4340': attribute type 5 has an invalid length. [ 601.599416][T21535] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 601.638547][T21535] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 601.692404][T24181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.694833][T24188] block nbd0: reconnected socket [ 601.694947][T24188] block nbd0: reconnected socket [ 601.732432][ T83] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 601.740915][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'. [ 601.771574][ T5622] block nbd0: Receive control failed (result -32) [ 601.771629][ T52] block nbd0: Receive control failed (result -32) [ 601.864782][T24197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 601.962458][T24207] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4351'. [ 601.972894][T24207] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4351'. [ 602.087143][T24201] can: request_module (can-proto-0) failed. [ 602.196413][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 602.331288][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'. [ 602.503366][ T8114] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 602.725720][T24245] syzkaller0: entered promiscuous mode [ 602.725744][T24245] syzkaller0: entered allmulticast mode [ 602.969609][T21557] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 603.103928][T24274] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 603.550073][ T8114] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 603.550260][ T8114] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 603.586120][T24282] xt_IDLETIMER: label is empty or not nul-terminated [ 603.783875][T21557] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 603.877970][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.906038][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 604.278578][ T12] net_ratelimit: 27 callbacks suppressed [ 604.278602][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 604.404617][T24329] syzkaller1: entered promiscuous mode [ 604.404639][T24329] syzkaller1: entered allmulticast mode [ 604.408511][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 604.419530][T21529] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 604.520527][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 604.597261][T24341] netlink: 'syz.1.4384': attribute type 1 has an invalid length. [ 604.642924][T24341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 604.722013][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 604.787745][T24352] syzkaller1: entered promiscuous mode [ 604.787759][T24352] syzkaller1: entered allmulticast mode [ 604.828671][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 604.895582][T24353] vlan3: entered allmulticast mode [ 604.968679][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 605.078476][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 605.208356][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 605.318415][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 605.428419][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 606.098592][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 606.868842][T24317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.084588][T24363] __nla_validate_parse: 46 callbacks suppressed [ 607.084609][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4391'. [ 607.538413][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 608.056462][T24426] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 608.327209][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4407'. [ 608.470088][T24436] No such timeout policy "syz1" [ 608.912907][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.934878][T24451] veth1_macvtap: left promiscuous mode [ 608.934908][T24451] macsec0: entered allmulticast mode [ 609.048434][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 609.048459][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 609.171648][T24465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4417'. [ 609.262411][T24452] bridge4: port 1(erspan0) entered disabled state [ 609.314182][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4417'. [ 609.970869][T24452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.021811][T24452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.639617][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.639676][ T50] net_ratelimit: 28 callbacks suppressed [ 610.639699][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 610.640706][ T83] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.640802][ T83] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.640839][ T83] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.656720][T24451] veth1_macvtap: entered promiscuous mode [ 610.656745][T24451] veth1_macvtap: entered allmulticast mode [ 610.656799][T24451] macsec0: left allmulticast mode [ 610.656811][T24451] veth1_macvtap: left allmulticast mode [ 610.899352][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 611.011911][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 611.121387][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 611.229272][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 611.244582][T24494] tipc: Started in network mode [ 611.244610][T24494] tipc: Node identity ac141441, cluster identity 4711 [ 611.245371][T24494] tipc: Enabled bearer , priority 10 [ 611.281642][T24486] batman_adv: batadv0: Removing interface: wlan1 [ 611.492554][T24492] vlan2: left allmulticast mode [ 611.492579][T24492] batadv0: left allmulticast mode [ 611.501073][T24492] macsec2: left promiscuous mode [ 611.501096][T24492] macsec2: left allmulticast mode [ 611.503346][T24492] bond5: left promiscuous mode [ 611.503363][T24492] bridge3: left promiscuous mode [ 611.509964][T24492] vlan5: left allmulticast mode [ 611.509983][T24492] bridge4: left allmulticast mode [ 611.518491][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 611.573195][T24507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4426'. [ 611.749079][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 611.792611][T24504] lo speed is unknown, defaulting to 1000 [ 611.802152][T24504] wg2 speed is unknown, defaulting to 1000 [ 611.834299][T24510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4427'. [ 611.865097][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 611.972857][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 612.079289][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 612.304370][T24512] lo speed is unknown, defaulting to 1000 [ 612.312646][T24512] wg2 speed is unknown, defaulting to 1000 [ 612.358397][T21521] tipc: Node number set to 2886997057 [ 612.707969][T24525] ieee802154 phy1 wpan1: encryption failed: -22 [ 612.744354][T24522] IPVS: length: 140 != 8 [ 613.280756][T24546] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4437'. [ 613.412395][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4440'. [ 613.689899][T24560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4442'. [ 613.745960][T24560] tipc: Enabling of bearer rejected, failed to enable media [ 614.273254][T24569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4444'. [ 614.471923][ T5622] Bluetooth: hci1: link tx timeout [ 614.472140][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.477930][ T5622] Bluetooth: hci1: link tx timeout [ 614.477950][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.480346][ T5622] Bluetooth: hci1: link tx timeout [ 614.480362][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.480378][ T5622] Bluetooth: hci1: link tx timeout [ 614.480387][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.480984][ T5622] Bluetooth: hci1: link tx timeout [ 614.480997][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.481013][ T5622] Bluetooth: hci1: link tx timeout [ 614.481023][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.481117][ T5622] Bluetooth: hci1: link tx timeout [ 614.481127][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.481140][ T5622] Bluetooth: hci1: link tx timeout [ 614.481150][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.481364][ T5622] Bluetooth: hci1: link tx timeout [ 614.481375][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.481388][ T5622] Bluetooth: hci1: link tx timeout [ 614.481398][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.484893][ T5622] Bluetooth: hci1: link tx timeout [ 614.484909][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.484923][ T5622] Bluetooth: hci1: link tx timeout [ 614.484934][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.488413][ T5622] Bluetooth: hci1: link tx timeout [ 614.488428][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.488442][ T5622] Bluetooth: hci1: link tx timeout [ 614.488452][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.495264][ T5622] Bluetooth: hci1: link tx timeout [ 614.495280][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.495295][ T5622] Bluetooth: hci1: link tx timeout [ 614.495305][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.497623][ T5622] Bluetooth: hci1: link tx timeout [ 614.497638][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.497652][ T5622] Bluetooth: hci1: link tx timeout [ 614.497661][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.497763][ T5622] Bluetooth: hci1: link tx timeout [ 614.497774][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.497787][ T5622] Bluetooth: hci1: link tx timeout [ 614.497797][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.497892][ T5622] Bluetooth: hci1: link tx timeout [ 614.497903][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.497916][ T5622] Bluetooth: hci1: link tx timeout [ 614.497925][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.498008][ T5622] Bluetooth: hci1: link tx timeout [ 614.498019][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.498032][ T5622] Bluetooth: hci1: link tx timeout [ 614.498042][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.498123][ T5622] Bluetooth: hci1: link tx timeout [ 614.498134][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.498147][ T5622] Bluetooth: hci1: link tx timeout [ 614.498156][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.505125][ T5622] Bluetooth: hci1: link tx timeout [ 614.505141][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.505155][ T5622] Bluetooth: hci1: link tx timeout [ 614.505165][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.511367][ T5622] Bluetooth: hci1: link tx timeout [ 614.511383][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.511398][ T5622] Bluetooth: hci1: link tx timeout [ 614.511407][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.519131][ T5622] Bluetooth: hci1: link tx timeout [ 614.519149][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.519164][ T5622] Bluetooth: hci1: link tx timeout [ 614.519174][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.521044][ T5622] Bluetooth: hci1: link tx timeout [ 614.521059][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.521074][ T5622] Bluetooth: hci1: link tx timeout [ 614.521084][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.521179][ T5622] Bluetooth: hci1: link tx timeout [ 614.521189][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.521203][ T5622] Bluetooth: hci1: link tx timeout [ 614.521212][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.521500][ T5622] Bluetooth: hci1: link tx timeout [ 614.521511][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.521524][ T5622] Bluetooth: hci1: link tx timeout [ 614.521533][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.523465][ T5622] Bluetooth: hci1: link tx timeout [ 614.523477][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.523491][ T5622] Bluetooth: hci1: link tx timeout [ 614.523501][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.524720][ T5622] Bluetooth: hci1: link tx timeout [ 614.524733][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.524746][ T5622] Bluetooth: hci1: link tx timeout [ 614.524756][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.526985][ T5622] Bluetooth: hci1: link tx timeout [ 614.526998][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.527012][ T5622] Bluetooth: hci1: link tx timeout [ 614.527022][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.531203][ T5622] Bluetooth: hci1: link tx timeout [ 614.531218][ T5622] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 614.531233][ T5622] Bluetooth: hci1: link tx timeout [ 614.531243][ T5622] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 614.564271][T24589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4447'. [ 615.132921][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4450'. [ 615.190435][T24608] netlink: 'syz.0.4451': attribute type 1 has an invalid length. [ 615.244526][T24608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 615.295304][T24615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4452'. [ 615.296068][T24615] siw: device registration error -23 [ 615.299035][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 615.305541][T24608] bond8: (slave gretap1): making interface the new active one [ 615.344811][T24608] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 615.409914][T24617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 615.453943][T24621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4454'. [ 615.456761][T24621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4454'. [ 615.708623][ T50] net_ratelimit: 22 callbacks suppressed [ 615.708646][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 615.818421][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 615.929169][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 615.938745][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 616.039220][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 616.159292][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 616.279396][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 616.388429][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 616.498578][ T5622] Bluetooth: hci1: command 0x0405 tx timeout [ 616.499768][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 616.608639][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 616.720551][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 617.343884][T24688] erspan1: entered promiscuous mode [ 617.431857][T24697] bond3: invalid NS target :: specified for addition [ 617.431889][T24697] bond3: option ns_ip6_target: invalid value (18446744073709551615) [ 617.433566][T24697] bond3 (unregistering): Released all slaves [ 617.483960][T24704] tipc: Enabling of bearer rejected, failed to enable media [ 617.658945][T24716] netlink: 'syz.2.4480': attribute type 1 has an invalid length. [ 618.014386][T24721] syzkaller0: entered promiscuous mode [ 618.014413][T24721] syzkaller0: entered allmulticast mode [ 618.183497][T24738] netlink: 'syz.3.4484': attribute type 2 has an invalid length. [ 618.303255][T24742] __nla_validate_parse: 10 callbacks suppressed [ 618.303275][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'. [ 618.548395][T24745] xt_bpf: check failed: parse error [ 618.590644][ T5622] Bluetooth: hci1: command 0x0405 tx timeout [ 620.729061][T24742] bond0: Unable to set down delay as MII monitoring is disabled [ 620.869836][ T8114] net_ratelimit: 12 callbacks suppressed [ 620.869860][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 620.901975][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4488'. [ 620.902012][T24762] netlink: 'syz.1.4488': attribute type 3 has an invalid length. [ 620.902025][T24762] netlink: 'syz.1.4488': attribute type 5 has an invalid length. [ 620.902036][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'. [ 620.940047][T24762] geneve3: entered promiscuous mode [ 620.940070][T24762] geneve3: entered allmulticast mode [ 620.959041][ T3322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 42302 - 0 [ 620.959696][ T3322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 42302 - 0 [ 620.959790][ T3322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 42302 - 0 [ 620.959824][ T3322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 42302 - 0 [ 620.993064][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 621.038159][T24768] netlink: 'syz.3.4489': attribute type 4 has an invalid length. [ 621.041892][T24768] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4489'. [ 621.101964][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 621.132227][T24769] netlink: 'syz.3.4489': attribute type 12 has an invalid length. [ 621.209630][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 621.328486][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 621.439416][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 621.590644][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4497'. [ 621.725686][T24796] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 621.801909][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 621.911314][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 621.960778][T24808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4501'. [ 621.961193][T24808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4501'. [ 622.020075][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 622.127132][T24817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4503'. [ 622.811935][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4509'. [ 622.811976][T24843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4509'. [ 623.366513][T24874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4518'. [ 623.487388][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4521'. [ 623.561436][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4522'. [ 623.639722][T24892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4523'. [ 623.643987][T24894] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4524'. [ 623.833113][T24903] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4528'. [ 623.833285][T24902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4528'. [ 623.870463][T24902] gre1: entered promiscuous mode [ 623.894536][T24905] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 623.941149][T24905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.944430][T24898] syzkaller0: entered promiscuous mode [ 623.944467][T24898] syzkaller0: entered allmulticast mode [ 624.001203][T24905] bond3: (slave dummy0): making interface the new active one [ 624.003625][T24905] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 624.066397][T24905] : renamed from dummy0 (while UP) [ 624.120639][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'. [ 624.132940][T24909] netlink: 'syz.0.4530': attribute type 1 has an invalid length. [ 624.132962][T24909] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4530'. [ 624.148688][T24909] ip6t_rt: unknown flags 1F [ 624.196535][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'. [ 624.262316][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.391940][T24898] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.395028][T24898] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.272702][T24961] netlink: 'syz.3.4541': attribute type 1 has an invalid length. [ 625.289744][T24961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 625.294074][T24961] netlink: 'syz.3.4541': attribute type 9 has an invalid length. [ 625.951483][ T12] net_ratelimit: 26 callbacks suppressed [ 625.951505][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.059294][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 626.169082][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 626.288768][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.405640][T25020] bond6: option tlb_dynamic_lb: invalid value (4) [ 626.407263][T25020] bond6 (unregistering): Released all slaves [ 626.436693][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.539126][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.651627][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.769571][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 626.879505][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 626.937396][T25044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.993458][T25041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.018318][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 627.045829][T25044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.424337][ T8114] IPVS: starting estimator thread 0... [ 627.528393][T25070] IPVS: using max 34 ests per chain, 81600 per kthread [ 627.576898][T25079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.595356][T25079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.597313][T25079] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 627.608852][T25079] bond0 (unregistering): Released all slaves [ 627.627337][T25082] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 627.629767][T25082] SET target dimension over the limit! [ 627.811656][T25084] lo speed is unknown, defaulting to 1000 [ 627.813673][T25084] wg2 speed is unknown, defaulting to 1000 [ 628.387648][T25114] netlink: 'syz.3.4577': attribute type 3 has an invalid length. [ 628.639023][T25124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.645130][T25129] __nla_validate_parse: 102 callbacks suppressed [ 628.645153][T25129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4582'. [ 628.646576][T25124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.985764][T25144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4585'. [ 629.067239][T25145] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4585'. [ 629.382167][ C1] openvswitch: cpu_id mismatch with handler threads [ 629.613979][T25165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4588'. [ 630.030381][T25183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4594'. [ 630.052556][T25183] xt_hashlimit: size too large, truncated to 1048576 [ 630.066759][T25184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4591'. [ 630.146439][T25187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4595'. [ 630.164965][T25187] netlink: 'syz.0.4595': attribute type 11 has an invalid length. [ 630.164991][T25187] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4595'. [ 630.394903][T25205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4597'. [ 630.395153][T25205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4597'. [ 630.550222][T25198] lo speed is unknown, defaulting to 1000 [ 630.573226][T25198] wg2 speed is unknown, defaulting to 1000 [ 630.924789][T25226] netlink: 'syz.0.4600': attribute type 1 has an invalid length. [ 630.997977][T25226] bond9: option mode: invalid value (8) [ 631.049326][T25226] bond9 (unregistering): Released all slaves [ 631.160630][T25229] dummy0: left promiscuous mode [ 631.161021][T25232] : renamed from dummy0 [ 631.217253][T25225] syzkaller0: entered promiscuous mode [ 631.217287][T25225] syzkaller0: entered allmulticast mode [ 631.235341][ T8114] net_ratelimit: 41 callbacks suppressed [ 631.235395][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 631.297365][T25243] netlink: 'syz.4.4602': attribute type 7 has an invalid length. [ 631.298414][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 631.361819][T25243] netlink: 'syz.4.4602': attribute type 7 has an invalid length. [ 631.531463][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 631.659378][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 631.833027][T25261] bridge5: entered promiscuous mode [ 631.849035][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 632.004930][T25269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.006491][T25269] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.029398][T25269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.151561][T21554] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 632.163378][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.163504][T11555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.165999][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.166096][T11555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.200731][T25275] veth0_macvtap: left promiscuous mode [ 632.330339][T25273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 632.422103][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 632.531017][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 632.531143][T25283] netlink: 'syz.0.4614': attribute type 32 has an invalid length. [ 632.578383][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 632.686395][T25289] batman_adv: batadv0: Removing interface: ipvlan2 [ 632.821231][T21552] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 632.979566][T25303] bond9: ARP target 9.0.0.0 is already present [ 632.979599][T25303] bond9: option arp_ip_target: invalid value (9) [ 633.035704][T25303] bond9 (unregistering): Released all slaves [ 633.167648][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 633.182014][T25324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.271484][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 633.643456][ T5279] veth0_macvtap: entered promiscuous mode [ 633.724823][T25347] netlink: 'syz.2.4629': attribute type 1 has an invalid length. [ 633.760648][T25351] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 633.791441][T25353] __nla_validate_parse: 20 callbacks suppressed [ 633.791461][T25353] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4631'. [ 633.797420][T25345] gretap1: entered allmulticast mode [ 633.931228][T25358] netlink: 'syz.0.4632': attribute type 3 has an invalid length. [ 634.069092][T25359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4632'. [ 634.069432][T25359] 8021q: VLANs not supported on ip6tnl0 [ 634.093495][T25362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4637'. [ 634.911889][T25400] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4642'. [ 635.263190][T25405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4643'. [ 635.472271][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4644'. [ 636.263895][ T50] net_ratelimit: 24 callbacks suppressed [ 636.263918][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 636.362105][T25461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.372781][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 636.518682][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 636.640486][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 636.685108][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4658'. [ 636.779545][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 636.889271][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 636.906953][T25482] Cannot find map_set index 2 as target [ 636.999538][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 637.027386][T25480] Cannot find set identified by id 0 to match [ 637.050592][T25480] nbd5: detected capacity change from 0 to 1791 [ 637.127366][T25491] syzkaller0: entered promiscuous mode [ 637.127391][T25491] syzkaller0: entered allmulticast mode [ 637.309291][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 637.314628][T25480] lo speed is unknown, defaulting to 1000 [ 637.334957][T25480] wg2 speed is unknown, defaulting to 1000 [ 637.460104][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 637.569203][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 637.643986][ T52] block nbd5: Receive control failed (result -104) [ 637.724047][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 637.820706][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4666'. [ 637.941254][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 639.274409][T25570] nbd: nbd4 already in use [ 639.309528][T25572] __nla_validate_parse: 6 callbacks suppressed [ 639.309543][T25572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 639.376823][T25570] netlink: 'syz.4.4685': attribute type 1 has an invalid length. [ 639.403730][T25570] 8021q: adding VLAN 0 to HW filter on device bond7 [ 639.522180][T25575] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4685'. [ 639.522236][T25575] netlink: 'syz.4.4685': attribute type 9 has an invalid length. [ 639.522251][T25575] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4685'. [ 639.522265][T25575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4685'. [ 639.524995][T25570] bond7: (slave veth3): Enslaving as an active interface with a down link [ 639.616835][T25582] syzkaller0: entered promiscuous mode [ 639.616851][T25582] syzkaller0: entered allmulticast mode [ 639.662566][T25582] simple: /dev/video#_74 [ 639.662589][T25582] simple: /dev/video#_148 [ 639.662601][T25582] simple: /dev/video#_222 [ 639.662611][T25582] simple: /dev/video#_296 [ 639.662622][T25582] simple: /dev/video#_370 [ 639.662632][T25582] simple: /dev/video#_444 [ 639.662642][T25582] simple: /dev/video#_518 [ 639.662653][T25582] simple: /dev/video#_592 [ 639.662662][T25582] simple: /dev/video#_666 [ 639.662673][T25582] simple: /dev/video#_740 [ 639.662683][T25582] simple: /dev/video#_814 [ 639.662693][T25582] simple: /dev/video#_888 [ 639.662703][T25582] simple: /dev/video#_962 [ 639.662713][T25582] simple: /dev/video#_1036 [ 639.662723][T25582] simple: /dev/video#_1110 [ 639.662733][T25582] simple: /dev/video#_1184 [ 639.662744][T25582] simple: /dev/video#_1258 [ 639.662753][T25582] simple: /dev/video#_1332 [ 639.662764][T25582] simple: /dev/video#_1406 [ 639.662774][T25582] simple: /dev/video#_1480 [ 639.662784][T25582] simple: /dev/video#_1554 [ 639.662794][T25582] simple: /dev/video#_1628 [ 639.662805][T25582] simple: /dev/video#_1702 [ 639.662815][T25582] simple: /dev/video#_1776 [ 639.662825][T25582] simple: /dev/video#_1850 [ 639.662835][T25582] simple: /dev/video#_1924 [ 639.662846][T25582] simple: /dev/video#_1998 [ 639.662856][T25582] simple: /dev/video#_2072 [ 639.662866][T25582] simple: /dev/video#_2146 [ 639.662876][T25582] simple: /dev/video#_2220 [ 639.662886][T25582] simple: /dev/video#_2294 [ 639.662896][T25582] simple: /dev/video#_2368 [ 640.236377][T25611] syzkaller0: entered promiscuous mode [ 640.236400][T25611] syzkaller0: entered allmulticast mode [ 640.408114][T25619] netlink: 'syz.3.4699': attribute type 1 has an invalid length. [ 640.526967][T25619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 640.553397][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4699'. [ 640.651991][T25626] bond6: (slave veth5): Enslaving as an active interface with a down link [ 640.653583][T25631] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4703'. [ 640.653606][T25631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4703'. [ 640.653623][T25631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4703'. [ 640.653638][T25631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4703'. [ 640.672505][T25619] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 640.672745][T25619] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 641.037924][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4707'. [ 641.428531][ T3322] net_ratelimit: 26 callbacks suppressed [ 641.428553][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 641.540109][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 641.649159][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 641.759408][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 641.869927][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 641.978498][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 642.108357][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 642.218934][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 642.349502][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 642.478553][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 643.543333][T25631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.857390][T25701] syzkaller0: entered promiscuous mode [ 643.857413][T25701] syzkaller0: entered allmulticast mode [ 643.867690][T25697] syzkaller0: entered promiscuous mode [ 643.867712][T25697] syzkaller0: entered allmulticast mode [ 643.876716][T25697] simple: /dev/video#_74 [ 643.876736][T25697] simple: /dev/video#_148 [ 643.876745][T25697] simple: /dev/video#_222 [ 643.876755][T25697] simple: /dev/video#_296 [ 643.876765][T25697] simple: /dev/video#_370 [ 643.876774][T25697] simple: /dev/video#_444 [ 643.876784][T25697] simple: /dev/video#_518 [ 643.876794][T25697] simple: /dev/video#_592 [ 643.876804][T25697] simple: /dev/video#_666 [ 643.876813][T25697] simple: /dev/video#_740 [ 643.876824][T25697] simple: /dev/video#_814 [ 643.876833][T25697] simple: /dev/video#_888 [ 643.876842][T25697] simple: /dev/video#_962 [ 643.876852][T25697] simple: /dev/video#_1036 [ 643.876861][T25697] simple: /dev/video#_1110 [ 643.876871][T25697] simple: /dev/video#_1184 [ 643.876881][T25697] simple: /dev/video#_1258 [ 643.876890][T25697] simple: /dev/video#_1332 [ 643.876900][T25697] simple: /dev/video#_1406 [ 643.876909][T25697] simple: /dev/video#_1480 [ 643.876920][T25697] simple: /dev/video#_1554 [ 643.876929][T25697] simple: /dev/video#_1628 [ 643.876946][T25697] simple: /dev/video#_1702 [ 643.876956][T25697] simple: /dev/video#_1776 [ 643.876966][T25697] simple: /dev/video#_1850 [ 643.876976][T25697] simple: /dev/video#_1924 [ 643.876986][T25697] simple: /dev/video#_1998 [ 643.876996][T25697] simple: /dev/video#_2072 [ 643.877005][T25697] simple: /dev/video#_2146 [ 643.877015][T25697] simple: /dev/video#_2220 [ 643.877024][T25697] simple: /dev/video#_2294 [ 643.877034][T25697] simple: /dev/video#_2368 [ 643.907563][T25703] netlink: 'syz.0.4718': attribute type 21 has an invalid length. [ 643.907623][T25703] netlink: 'syz.0.4718': attribute type 5 has an invalid length. [ 644.111809][T25714] netlink: 'syz.3.4719': attribute type 2 has an invalid length. [ 644.181701][T25716] netlink: 'syz.3.4719': attribute type 10 has an invalid length. [ 644.198333][T25714] ¿: entered promiscuous mode [ 644.257408][T25716] geneve2: entered promiscuous mode [ 644.257431][T25716] geneve2: entered allmulticast mode [ 644.278540][T25722] netlink: 'syz.0.4722': attribute type 30 has an invalid length. [ 644.331300][T25722] netlink: 'syz.0.4722': attribute type 30 has an invalid length. [ 644.509437][T25735] Bluetooth: MGMT ver 1.23 [ 644.706171][T25750] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 644.707122][T25736] xt_CT: No such helper "netbios-ns" [ 644.764672][T25750] __nla_validate_parse: 13 callbacks suppressed [ 644.764693][T25750] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4729'. [ 644.776816][T25750] netlink: 'syz.0.4729': attribute type 5 has an invalid length. [ 644.921349][T25761] syzkaller0: entered promiscuous mode [ 644.921371][T25761] syzkaller0: entered allmulticast mode [ 644.933949][T25761] simple: /dev/video#_74 [ 644.933968][T25761] simple: /dev/video#_148 [ 644.933979][T25761] simple: /dev/video#_222 [ 644.933988][T25761] simple: /dev/video#_296 [ 644.933997][T25761] simple: /dev/video#_370 [ 644.934007][T25761] simple: /dev/video#_444 [ 644.934016][T25761] simple: /dev/video#_518 [ 644.934027][T25761] simple: /dev/video#_592 [ 644.934036][T25761] simple: /dev/video#_666 [ 644.934046][T25761] simple: /dev/video#_740 [ 644.934056][T25761] simple: /dev/video#_814 [ 644.934065][T25761] simple: /dev/video#_888 [ 644.934075][T25761] simple: /dev/video#_962 [ 644.934084][T25761] simple: /dev/video#_1036 [ 644.934093][T25761] simple: /dev/video#_1110 [ 644.934102][T25761] simple: /dev/video#_1184 [ 644.934111][T25761] simple: /dev/video#_1258 [ 644.935012][T25761] simple: /dev/video#_1332 [ 644.935026][T25761] simple: /dev/video#_1406 [ 644.935036][T25761] simple: /dev/video#_1480 [ 644.935046][T25761] simple: /dev/video#_1554 [ 644.935055][T25761] simple: /dev/video#_1628 [ 644.935065][T25761] simple: /dev/video#_1702 [ 644.935075][T25761] simple: /dev/video#_1776 [ 644.935084][T25761] simple: /dev/video#_1850 [ 644.935094][T25761] simple: /dev/video#_1924 [ 644.935104][T25761] simple: /dev/video#_1998 [ 644.935113][T25761] simple: /dev/video#_2072 [ 644.935127][T25761] simple: /dev/video#_2146 [ 644.935136][T25761] simple: /dev/video#_2220 [ 644.935145][T25761] simple: /dev/video#_2294 [ 644.935154][T25761] simple: /dev/video#_2368 [ 645.125278][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4734'. [ 645.306252][T25775] netlink: 'syz.2.4738': attribute type 39 has an invalid length. [ 645.355854][T25776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 645.560592][T25788] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4742'. [ 645.596185][T25788] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.596483][T25788] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.651325][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 645.663924][T25793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4744'. [ 645.751148][T25795] syzkaller0: entered promiscuous mode [ 645.751179][T25795] syzkaller0: entered allmulticast mode [ 645.878079][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4748'. [ 645.909935][T25804] veth1_to_team: entered promiscuous mode [ 645.925239][T25804] veth1_to_team: left promiscuous mode [ 645.994796][T25816] netlink: 'syz.4.4749': attribute type 10 has an invalid length. [ 646.007268][T25816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.016561][T25816] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 646.036222][T25816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.052719][T25816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.070466][T25816] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 646.077549][T25816] bond0 (unregistering): Released all slaves [ 646.102216][T25804] tipc: New replicast peer: 255.255.255.255 [ 646.103073][T25804] tipc: Enabled bearer , priority 10 [ 646.104313][T25804] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 646.104325][T25804] pim6reg0: persist disabled [ 646.104518][T25804] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 646.212285][T25821] netlink: 826 bytes leftover after parsing attributes in process `syz.0.4751'. [ 646.377395][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4750'. [ 646.594684][ T3322] net_ratelimit: 28 callbacks suppressed [ 646.594706][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 646.699039][ T3322] bond2: (slave gretap1): failed to get link speed/duplex [ 646.783298][T25846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4754'. [ 646.819811][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 646.930368][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 647.038766][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 647.125162][T25872] netlink: 'syz.3.4758': attribute type 1 has an invalid length. [ 647.277357][T25872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 647.288146][T25873] syzkaller0: entered promiscuous mode [ 647.288440][T25873] syzkaller0: entered allmulticast mode [ 647.311764][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 647.346155][ T83] IPVS: starting estimator thread 0... [ 647.431183][T25890] IPVS: using max 32 ests per chain, 76800 per kthread [ 647.441067][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 647.548387][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 647.657193][T25907] ip_tables: iptables: counters copy to user failed while replacing table [ 647.718556][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 647.793351][T25914] netlink: 'syz.3.4763': attribute type 16 has an invalid length. [ 647.793374][T25914] netlink: 'syz.3.4763': attribute type 17 has an invalid length. [ 647.837749][T25907] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.867482][T25920] netlink: 'syz.3.4763': attribute type 16 has an invalid length. [ 647.867503][T25920] netlink: 'syz.3.4763': attribute type 17 has an invalid length. [ 647.870021][T25907] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.093883][T25914] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.094024][T25914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.097281][T25914] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.097398][T25914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.115483][T25914] batadv_slave_0: left allmulticast mode [ 648.160382][T25914] ip6erspan0: left allmulticast mode [ 648.184335][T25914] bond3: left promiscuous mode [ 648.184359][T25914] erspan1: left promiscuous mode [ 648.184513][T25914] bond3: left allmulticast mode [ 648.185650][T25914] erspan1: left allmulticast mode [ 648.189720][T21551] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 648.192204][T25914] bond4: left allmulticast mode [ 648.226934][T25914] geneve2: left promiscuous mode [ 648.229594][T25914] geneve2: left allmulticast mode [ 648.271340][T11557] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 648.271773][T11557] bond6: (slave veth5): making interface the new active one [ 648.297967][T11557] bond6: active interface up! [ 648.399690][T25919] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.407505][T25919] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.524039][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.524160][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.544659][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.544772][T25920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.619467][T21508] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 648.731258][T21508] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 648.910461][T25943] syzkaller0: entered promiscuous mode [ 648.910487][T25943] syzkaller0: entered allmulticast mode [ 649.163395][T25983] ip6t_srh: unknown srh match flags 4000 [ 649.923517][T26002] __nla_validate_parse: 5 callbacks suppressed [ 649.923538][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4779'. [ 650.152784][T26007] netlink: 'syz.1.4780': attribute type 23 has an invalid length. [ 650.152805][T26007] netlink: 'syz.1.4780': attribute type 21 has an invalid length. [ 650.152820][T26007] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.329572][ T8114] net_ratelimit: 3 callbacks suppressed [ 652.329595][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 652.439550][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 652.471780][T26022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4784'. [ 652.569641][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 652.581781][T26029] netlink: 'syz.2.4787': attribute type 32 has an invalid length. [ 652.664022][T26031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 652.664058][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4788'. [ 652.699130][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 652.702083][T26027] netlink: 'syz.3.4786': attribute type 4 has an invalid length. [ 652.763668][T26045] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 652.786013][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 652.810116][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 652.918974][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 652.983957][T26055] Bluetooth: MGMT ver 1.23 [ 653.028952][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 653.150258][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 653.260162][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 653.293790][T26072] x_tables: duplicate underflow at hook 1 [ 654.588515][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 654.690720][T26087] netlink: 'syz.2.4805': attribute type 2 has an invalid length. [ 654.775585][T26094] netlink: 'syz.1.4807': attribute type 1 has an invalid length. [ 654.777625][T26095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4806'. [ 654.817446][T26093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4810'. [ 654.901933][T26094] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 654.907200][T26094] bond8 (unregistering): Released all slaves [ 655.010764][T26107] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 655.017922][T26107] bond8 (unregistering): Released all slaves [ 655.093902][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4810'. [ 655.095200][T26116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'. [ 655.131164][T26094] bridge6: entered promiscuous mode [ 655.132386][T26093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4810'. [ 655.133694][T26093] netlink: 'syz.2.4810': attribute type 13 has an invalid length. [ 655.263665][T26124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4813'. [ 655.294548][T26124] veth7: entered allmulticast mode [ 655.306853][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4814'. [ 655.380899][T26129] syzkaller0: entered promiscuous mode [ 655.380922][T26129] syzkaller0: entered allmulticast mode [ 655.384860][T26129] tipc: Enabled bearer , priority 0 [ 655.403269][T26129] tipc: Resetting bearer [ 655.416804][T26128] tipc: Resetting bearer [ 655.453689][T26128] tipc: Disabling bearer [ 655.628929][T26143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4820'. [ 655.752843][T26148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 655.762860][T26143] 8021q: adding VLAN 0 to HW filter on device bond9 [ 655.769155][T26143] bond8: (slave bond9): Enslaving as an active interface with an up link [ 655.782182][T26148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 655.860353][T26143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4820'. [ 655.860390][T26143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4820'. [ 655.861611][T26143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4820'. [ 656.579841][ T52] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 656.884173][T26200] syzkaller1: entered promiscuous mode [ 656.884199][T26200] syzkaller1: entered allmulticast mode [ 657.342755][ T83] net_ratelimit: 34 callbacks suppressed [ 657.342777][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 657.549879][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 657.557285][T26230] syzkaller0: entered promiscuous mode [ 657.557328][T26230] syzkaller0: entered allmulticast mode [ 657.606163][T26230] netlink: 'syz.1.4841': attribute type 10 has an invalid length. [ 657.718972][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 657.746213][T26238] xt_HMARK: proto mask must be zero with L3 mode [ 657.827782][T26243] bond0: entered promiscuous mode [ 657.838088][T26243] bond0: left promiscuous mode [ 657.899549][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 657.961238][T26243] bridge6: entered promiscuous mode [ 657.961261][T26243] bridge6: entered allmulticast mode [ 657.967667][T26243] team0: Port device bridge6 added [ 658.009321][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 658.118672][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 658.249841][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 658.360011][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 658.483268][ T8114] bond2: (slave gretap1): failed to get link speed/duplex [ 658.608775][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 659.914694][T26315] erspan0: left allmulticast mode [ 659.914719][T26315] erspan0: left promiscuous mode [ 659.914998][T26315] bridge4: port 1(erspan0) entered disabled state [ 659.940498][T26315] bridge_slave_0: left allmulticast mode [ 659.940523][T26315] bridge_slave_0: left promiscuous mode [ 659.940761][T26315] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.978872][T26315] bridge_slave_1: left allmulticast mode [ 659.978896][T26315] bridge_slave_1: left promiscuous mode [ 659.979095][T26315] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.085108][T26315] team0: Port device team_slave_0 removed [ 660.086905][T26315] team0: Port device team_slave_1 removed [ 660.087137][T26315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.087615][T26315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.116834][T26318] netlink: 'syz.1.4866': attribute type 16 has an invalid length. [ 660.116854][T26318] netlink: 'syz.1.4866': attribute type 17 has an invalid length. [ 660.118621][T26319] netlink: 'syz.1.4866': attribute type 16 has an invalid length. [ 660.118639][T26319] netlink: 'syz.1.4866': attribute type 17 has an invalid length. [ 660.186957][T26318] bridge0: left promiscuous mode [ 660.195341][T26318] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.201957][T26318] batadv0: left promiscuous mode [ 660.205254][T26318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.241200][T26318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.241226][T26318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.242131][T26318] veth1_macvtap: left promiscuous mode [ 660.242946][T26318] veth0_macvtap: left promiscuous mode [ 660.243792][T26318] veth0_macvtap: entered promiscuous mode [ 660.244586][T26318] veth1_macvtap: entered promiscuous mode [ 660.291033][T26318] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 660.291440][T26318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.293419][T26318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.294691][T26318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.296009][T26318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.313479][T26318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.330416][T26318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.345541][T26318] bridge0: port 3(vlan3) entered blocking state [ 660.345661][T26318] bridge0: port 3(vlan3) entered listening state [ 660.346472][T26318] batadv0: entered promiscuous mode [ 660.346878][T26318] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 660.348037][T26318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.354658][T26318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.356017][T26318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 660.367996][T26317] bridge0: entered promiscuous mode [ 660.389343][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.389378][ T50] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 660.390889][T11557] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.390918][T11557] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 660.391026][T11557] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.391053][T11557] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 660.391088][T11557] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.391113][T11557] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 660.475065][T26323] bond10: option downdelay: invalid value (18446744073709551494) [ 660.475089][T26323] bond10: option downdelay: allowed values 0 - 2147483647 [ 660.476316][T26323] bond10 (unregistering): Released all slaves [ 660.660538][ T52] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 660.660644][ T52] Bluetooth: hci5: Injecting HCI hardware error event [ 660.662493][ T52] Bluetooth: hci5: hardware error 0x00 [ 660.673862][T26331] __nla_validate_parse: 6 callbacks suppressed [ 660.673880][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 660.673895][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 660.709663][ T52] [ 660.735809][ T52] ====================================================== [ 660.742810][ T52] WARNING: possible circular locking dependency detected [ 660.749828][ T52] syzkaller #0 Not tainted [ 660.754226][ T52] ------------------------------------------------------ [ 660.761235][ T52] kworker/u9:0/52 is trying to acquire lock: [ 660.767193][ T52] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 660.777460][ T52] [ 660.777460][ T52] but task is already holding lock: [ 660.784815][ T52] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 660.795686][ T52] [ 660.795686][ T52] which lock already depends on the new lock. [ 660.795686][ T52] [ 660.806071][ T52] [ 660.806071][ T52] the existing dependency chain (in reverse order) is: [ 660.815066][ T52] [ 660.815066][ T52] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 660.823756][ T52] down_read+0x4a/0x330 [ 660.828435][ T52] kernfs_remove_by_name_ns+0x3f/0x140 [ 660.834401][ T52] internal_create_group+0x58e/0x1180 [ 660.840287][ T52] sysfs_update_groups+0x60/0x130 [ 660.845817][ T52] pmu_dev_alloc+0x29b/0x300 [ 660.850918][ T52] perf_event_sysfs_init+0x76/0x100 [ 660.856739][ T52] do_one_initcall+0x250/0x870 [ 660.862017][ T52] do_initcall_level+0x10a/0x1a0 [ 660.867511][ T52] do_initcalls+0x59/0xa0 [ 660.872345][ T52] kernel_init_freeable+0x29d/0x3e0 [ 660.878835][ T52] kernel_init+0x22/0x1d0 [ 660.883679][ T52] ret_from_fork+0x514/0xb70 [ 660.888773][ T52] ret_from_fork_asm+0x1a/0x30 [ 660.894053][ T52] [ 660.894053][ T52] -> #9 (pmus_lock){+.+.}-{4:4}: [ 660.901164][ T52] __mutex_lock+0x19d/0x1550 [ 660.906262][ T52] perf_event_init_cpu+0x1d1/0x7a0 [ 660.911887][ T52] cpuhp_invoke_callback+0x434/0x810 [ 660.917684][ T52] cpuhp_thread_fun+0x362/0x780 [ 660.923050][ T52] smpboot_thread_fn+0x565/0xa70 [ 660.928510][ T52] kthread+0x38b/0x480 [ 660.933088][ T52] ret_from_fork+0x514/0xb70 [ 660.938183][ T52] ret_from_fork_asm+0x1a/0x30 [ 660.943465][ T52] [ 660.943465][ T52] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 660.951010][ T52] cpuhp_thread_fun+0x127/0x780 [ 660.956374][ T52] smpboot_thread_fn+0x565/0xa70 [ 660.961825][ T52] kthread+0x38b/0x480 [ 660.966403][ T52] ret_from_fork+0x514/0xb70 [ 660.971499][ T52] ret_from_fork_asm+0x1a/0x30 [ 660.976785][ T52] [ 660.976785][ T52] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 660.984501][ T52] cpus_read_lock+0x42/0x160 [ 660.989599][ T52] static_key_slow_inc+0x12/0x30 [ 660.995059][ T52] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 661.001361][ T52] nbd_genl_foreach_sock+0x265/0x450 [ 661.007157][ T52] nbd_genl_reconfigure+0xbbb/0x1040 [ 661.012967][ T52] genl_family_rcv_msg_doit+0x233/0x340 [ 661.019039][ T52] genl_rcv_msg+0x614/0x7a0 [ 661.024066][ T52] netlink_rcv_skb+0x226/0x4a0 [ 661.029349][ T52] genl_rcv+0x28/0x40 [ 661.033842][ T52] netlink_unicast+0x7bd/0x940 [ 661.039118][ T52] netlink_sendmsg+0x813/0xb40 [ 661.044404][ T52] sock_sendmsg_nosec+0x13a/0x180 [ 661.049945][ T52] ____sys_sendmsg+0x54e/0x850 [ 661.055218][ T52] ___sys_sendmsg+0x2a5/0x360 [ 661.060410][ T52] __x64_sys_sendmsg+0x1b1/0x290 [ 661.065859][ T52] do_syscall_64+0x166/0x520 [ 661.070959][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.077371][ T52] [ 661.077371][ T52] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 661.085003][ T52] __mutex_lock+0x19d/0x1550 [ 661.090105][ T52] nbd_queue_rq+0x373/0xff0 [ 661.095114][ T52] blk_mq_dispatch_rq_list+0x499/0x1990 [ 661.101245][ T52] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 661.108122][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 661.114608][ T52] blk_mq_run_work_fn+0x16c/0x300 [ 661.120145][ T52] process_scheduled_works+0xc3d/0x1630 [ 661.126204][ T52] worker_thread+0xa47/0xfb0 [ 661.131309][ T52] kthread+0x38b/0x480 [ 661.135945][ T52] ret_from_fork+0x514/0xb70 [ 661.141039][ T52] ret_from_fork_asm+0x1a/0x30 [ 661.146318][ T52] [ 661.146318][ T52] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 661.153513][ T52] __mutex_lock+0x19d/0x1550 [ 661.158616][ T52] nbd_queue_rq+0xc1/0xff0 [ 661.163542][ T52] blk_mq_dispatch_rq_list+0x499/0x1990 [ 661.169597][ T52] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 661.176440][ T52] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 661.182935][ T52] blk_mq_run_work_fn+0x16c/0x300 [ 661.188485][ T52] process_scheduled_works+0xc3d/0x1630 [ 661.194543][ T52] worker_thread+0xa47/0xfb0 [ 661.199643][ T52] kthread+0x38b/0x480 [ 661.204221][ T52] ret_from_fork+0x514/0xb70 [ 661.209317][ T52] ret_from_fork_asm+0x1a/0x30 [ 661.214598][ T52] [ 661.214598][ T52] -> #4 (set->srcu){.+.+}-{0:0}: [ 661.221795][ T52] __synchronize_srcu+0xc9/0x2f0 [ 661.227246][ T52] elevator_switch+0x1e8/0x7b0 [ 661.232583][ T52] elevator_change+0x2fa/0x480 [ 661.237865][ T52] elevator_set_default+0x375/0x440 [ 661.243570][ T52] blk_register_queue+0x3f3/0x4e0 [ 661.249157][ T52] __add_disk+0x6b8/0xdb0 [ 661.253996][ T52] add_disk_fwnode+0x100/0x3a0 [ 661.259272][ T52] nbd_dev_add+0x733/0xb60 [ 661.264197][ T52] nbd_init+0x168/0x1f0 [ 661.268952][ T52] do_one_initcall+0x250/0x870 [ 661.274229][ T52] do_initcall_level+0x10a/0x1a0 [ 661.279674][ T52] do_initcalls+0x59/0xa0 [ 661.284508][ T52] kernel_init_freeable+0x29d/0x3e0 [ 661.290220][ T52] kernel_init+0x22/0x1d0 [ 661.295062][ T52] ret_from_fork+0x514/0xb70 [ 661.300156][ T52] ret_from_fork_asm+0x1a/0x30 [ 661.305437][ T52] [ 661.305437][ T52] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 661.313240][ T52] __mutex_lock+0x19d/0x1550 [ 661.318339][ T52] elevator_change+0x1af/0x480 [ 661.323616][ T52] elevator_set_none+0xb5/0x140 [ 661.328978][ T52] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 661.335300][ T52] nbd_start_device+0x189/0xb30 [ 661.340659][ T52] nbd_genl_connect+0x167d/0x1cd0 [ 661.346276][ T52] genl_family_rcv_msg_doit+0x233/0x340 [ 661.352338][ T52] genl_rcv_msg+0x614/0x7a0 [ 661.357368][ T52] netlink_rcv_skb+0x226/0x4a0 [ 661.362660][ T52] genl_rcv+0x28/0x40 [ 661.367157][ T52] netlink_unicast+0x7bd/0x940 [ 661.372431][ T52] netlink_sendmsg+0x813/0xb40 [ 661.377715][ T52] sock_sendmsg_nosec+0x13a/0x180 [ 661.383252][ T52] ____sys_sendmsg+0x54e/0x850 [ 661.388524][ T52] ___sys_sendmsg+0x2a5/0x360 [ 661.393710][ T52] __x64_sys_sendmsg+0x1b1/0x290 [ 661.399156][ T52] do_syscall_64+0x166/0x520 [ 661.404255][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.410654][ T52] [ 661.410654][ T52] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 661.419256][ T52] blk_alloc_queue+0x544/0x690 [ 661.424534][ T52] __blk_mq_alloc_disk+0x194/0x390 [ 661.430157][ T52] nbd_dev_add+0x494/0xb60 [ 661.435082][ T52] nbd_init+0x168/0x1f0 [ 661.439751][ T52] do_one_initcall+0x250/0x870 [ 661.445026][ T52] do_initcall_level+0x10a/0x1a0 [ 661.450467][ T52] do_initcalls+0x59/0xa0 [ 661.455303][ T52] kernel_init_freeable+0x29d/0x3e0 [ 661.461014][ T52] kernel_init+0x22/0x1d0 [ 661.465860][ T52] ret_from_fork+0x514/0xb70 [ 661.470955][ T52] ret_from_fork_asm+0x1a/0x30 [ 661.476240][ T52] [ 661.476240][ T52] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 661.483448][ T52] fs_reclaim_acquire+0x71/0x100 [ 661.488893][ T52] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 661.495128][ T52] alloc_inode+0xb8/0x1b0 [ 661.499971][ T52] iget_locked+0x131/0x6a0 [ 661.504902][ T52] kernfs_get_inode+0x4f/0x770 [ 661.510176][ T52] kernfs_get_tree+0x5cd/0x980 [ 661.515451][ T52] vfs_get_tree+0x92/0x2a0 [ 661.520372][ T52] do_new_mount+0x319/0xdc0 [ 661.525387][ T52] __se_sys_mount+0x31d/0x420 [ 661.530578][ T52] do_syscall_64+0x166/0x520 [ 661.535691][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.542101][ T52] [ 661.542101][ T52] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 661.550099][ T52] __lock_acquire+0x164c/0x2de0 [ 661.555471][ T52] lock_acquire+0x115/0x350 [ 661.560480][ T52] down_write+0x96/0x200 [ 661.565238][ T52] kernfs_remove_by_name_ns+0x4e/0x140 [ 661.571211][ T52] sysfs_unmerge_group+0xd3/0x140 [ 661.576755][ T52] dpm_sysfs_remove+0x5f/0xd0 [ 661.582050][ T52] device_del+0x250/0x8f0 [ 661.586923][ T52] device_unregister+0x21/0xf0 [ 661.592197][ T52] hci_conn_del+0xc3d/0x1200 [ 661.597351][ T52] hci_conn_hash_flush+0x189/0x260 [ 661.602979][ T52] hci_dev_close_sync+0x7fc/0x10c0 [ 661.608699][ T52] hci_error_reset+0x127/0x4c0 [ 661.614014][ T52] process_scheduled_works+0xc3d/0x1630 [ 661.620075][ T52] worker_thread+0xa47/0xfb0 [ 661.625183][ T52] kthread+0x38b/0x480 [ 661.629770][ T52] ret_from_fork+0x514/0xb70 [ 661.634871][ T52] ret_from_fork_asm+0x1a/0x30 [ 661.640156][ T52] [ 661.640156][ T52] other info that might help us debug this: [ 661.640156][ T52] [ 661.650384][ T52] Chain exists of: [ 661.650384][ T52] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 661.650384][ T52] [ 661.664196][ T52] Possible unsafe locking scenario: [ 661.664196][ T52] [ 661.671634][ T52] CPU0 CPU1 [ 661.676988][ T52] ---- ---- [ 661.682334][ T52] rlock(&root->kernfs_supers_rwsem); [ 661.687782][ T52] lock(pmus_lock); [ 661.694182][ T52] lock(&root->kernfs_supers_rwsem); [ 661.702058][ T52] lock(&root->kernfs_rwsem); [ 661.706811][ T52] [ 661.706811][ T52] *** DEADLOCK *** [ 661.706811][ T52] [ 661.714937][ T52] locks held by kworker/u9:0/52: 5, last CPU#0: [ 661.721166][ T52] #0: ffff888045d19140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 661.731965][ T52] #1: ffffc90000bd7c40 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 661.744309][ T52] #2: ffff88803256cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_error_reset+0x11f/0x4c0 [ 661.753969][ T52] #3: ffff88803256c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10c0 [ 661.763625][ T52] #4: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 661.774927][ T52] [ 661.774927][ T52] stack backtrace: [ 661.780799][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 661.790069][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.800117][ T52] Workqueue: hci5 hci_error_reset [ 661.805159][ T52] Call Trace: [ 661.808439][ T52] [ 661.811365][ T52] dump_stack_lvl+0xe8/0x150 [ 661.815954][ T52] print_circular_bug+0x2e2/0x300 [ 661.820976][ T52] check_noncircular+0x12f/0x150 [ 661.825924][ T52] __lock_acquire+0x164c/0x2de0 [ 661.830764][ T52] ? __lock_acquire+0x1511/0x2de0 [ 661.835789][ T52] lock_acquire+0x115/0x350 [ 661.840285][ T52] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 661.845919][ T52] down_write+0x96/0x200 [ 661.850163][ T52] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 661.855914][ T52] ? __pfx_down_write+0x10/0x10 [ 661.860771][ T52] kernfs_remove_by_name_ns+0x4e/0x140 [ 661.866234][ T52] sysfs_unmerge_group+0xd3/0x140 [ 661.871249][ T52] dpm_sysfs_remove+0x5f/0xd0 [ 661.875922][ T52] device_del+0x250/0x8f0 [ 661.880242][ T52] ? klist_iter_exit+0xc1/0x100 [ 661.885188][ T52] ? work_grab_pending+0x3d1/0x930 [ 661.890291][ T52] ? __pfx_device_del+0x10/0x10 [ 661.895133][ T52] ? lockdep_hardirqs_on+0x7b/0x110 [ 661.900323][ T52] device_unregister+0x21/0xf0 [ 661.905109][ T52] hci_conn_del+0xc3d/0x1200 [ 661.909692][ T52] ? hci_conn_hash_flush+0x105/0x260 [ 661.914970][ T52] hci_conn_hash_flush+0x189/0x260 [ 661.920075][ T52] hci_dev_close_sync+0x7fc/0x10c0 [ 661.925177][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 661.930211][ T52] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 661.935745][ T52] ? process_scheduled_works+0x97a/0x1630 [ 661.941458][ T52] ? process_scheduled_works+0x97a/0x1630 [ 661.947168][ T52] hci_error_reset+0x127/0x4c0 [ 661.951926][ T52] ? process_scheduled_works+0x97a/0x1630 [ 661.957640][ T52] process_scheduled_works+0xc3d/0x1630 [ 661.963188][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.969160][ T52] ? assign_work+0x3cf/0x5d0 [ 661.973740][ T52] worker_thread+0xa47/0xfb0 [ 661.978336][ T52] kthread+0x38b/0x480 [ 661.982395][ T52] ? __pfx_worker_thread+0x10/0x10 [ 661.987493][ T52] ? __pfx_kthread+0x10/0x10 [ 661.992068][ T52] ret_from_fork+0x514/0xb70 [ 661.996646][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 662.001748][ T52] ? __switch_to+0xc89/0x1420 [ 662.006419][ T52] ? __pfx_kthread+0x10/0x10 [ 662.010997][ T52] ret_from_fork_asm+0x1a/0x30 [ 662.015771][ T52] [ 662.049809][T26333] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4872'. [ 662.120460][T21554] openvswitch: cpu_id mismatch with handler threads [ 662.438531][ T50] net_ratelimit: 19 callbacks suppressed [ 662.438549][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 662.548442][ T83] bond2: (slave gretap1): failed to get link speed/duplex [ 662.718380][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 662.828376][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 662.958543][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 663.059970][T21552] openvswitch: cpu_id mismatch with handler threads [ 663.064196][T11557] openvswitch: cpu_id mismatch with handler threads [ 663.069905][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 663.178456][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 663.288482][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 663.299006][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 663.398317][T11557] bond2: (slave gretap1): failed to get link speed/duplex [ 663.508434][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 664.099538][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 664.109756][ T8114] openvswitch: cpu_id mismatch with handler threads [ 664.109974][ T8114] openvswitch: cpu_id mismatch with handler threads [ 664.298394][T21554] openvswitch: cpu_id mismatch with handler threads [ 666.498364][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.139456][ T2006] block nbd5: Possible stuck request ffff8880269a5080: control (read@0,1024B). Runtime 30 seconds [ 667.139485][ T2006] block nbd5: Possible stuck request ffff8880269a5240: control (read@1024,1024B). Runtime 30 seconds [ 667.139499][ T2006] block nbd5: Possible stuck request ffff8880269a5400: control (read@2048,1024B). Runtime 30 seconds [ 667.139512][ T2006] block nbd5: Possible stuck request ffff8880269a55c0: control (read@3072,1024B). Runtime 30 seconds [ 667.508495][ T12] net_ratelimit: 30 callbacks suppressed [ 667.508518][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 667.638385][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 667.748375][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 667.858589][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 667.938596][ C1] openvswitch: cpu_id mismatch with handler threads [ 667.998447][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 668.109100][ T50] bond2: (slave gretap1): failed to get link speed/duplex [ 668.238325][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 668.348342][T11555] bond2: (slave gretap1): failed to get link speed/duplex [ 668.459138][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 668.568292][ T12] bond2: (slave gretap1): failed to get link speed/duplex