last executing test programs: 1.833743249s ago: executing program 4 (id=4813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140000a0000080006400000021c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x20008084) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140000a0000080006400000021c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x20008084) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) 1.686749191s ago: executing program 4 (id=4815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x9, 0x401}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e21, 0x3, @empty, 0x9}}}, &(0x7f00000002c0)=0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40020) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) sendmsg$inet_sctp(r6, &(0x7f0000001000)={&(0x7f0000000b00)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b40)="045599a093", 0x5}], 0x1, &(0x7f0000000fc0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20, 0x4008890}, 0x1) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) 1.623124102s ago: executing program 1 (id=4816): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb8", 0x91}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}], 0x2, 0x20000044) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3b, 0x0, "947116a1a606754bab1cb61212bb07a2bd20df00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb3fafaa8b125736e00"}, 0xd8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000019000109000000002400000002180000000bfd010000000008000100ac14140008"], 0x44}}, 0x0) 1.495078707s ago: executing program 4 (id=4817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xbb) r4 = getuid() sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="c81efcec1330d9c97ea2a0d022736c044016c126be1920015d80d4f1ca7cda1500b526a42ebffb41c68b4e19b0f83800a3a617ca2d9161197f6fe1f7b292d0f2abaf5cd31adc36b2cf38d7b877d258878ec24d94aca22014466bcf64f7371b744d78b61ca34052bf9da130d823477d41f68ebfe629fe43f95a6a75f87073267e37e2a999e26527abd5d018ded2a2e483a2316439e2040800c800", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="050001000004000000000000000084082f6d33ed454f396666f2bcff0f00008d41212fbdd44047c2b5d88c1512bb51e0b428bfb6f1eb06e04f1e148b8095278c6042c06d4dff2dc7fe73c0094279e51c25c90406a6725492781dc90a5608617883a5cc0d961db2e0022c5e860c86d623bc6da4c620af1dc10ba1184831070a4cd3ac601de5426a4563881d681b85729acb0ce0161d063f820f346891f11742d0283623052153127c602df81a39e09ef523a2be00"/191], 0x14cc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff8b, &(0x7f0000000040)={&(0x7f00000006c0)={0x20, 0x2e, 0x200, 0x70bd27, 0x0, {0x5}, [@typed={0x0, 0x68, 0x0, 0x0, @u32=0xf2f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00', 0x3}], 0x1}, 0x0) recvmsg$can_raw(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40010020) 1.492910992s ago: executing program 0 (id=4818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000001740)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x1}}, 0x10) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_BULKSTAT(r5, 0x8040587f, &(0x7f00000016c0)={{0x6, 0x4, 0x84, 0x8, 0x7}, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}]}) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001780)={0x0, 0x1}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001800)={r7, 0x79a, 0x2, [0x3, 0x40]}, 0xc) ioctl$XFS_IOC_BULKSTAT(r6, 0x8040587f, &(0x7f00000001c0)={{0x8, 0x2, 0x2, 0x0, 0xffffffff}, &(0x7f0000000100)=[{}]}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) (async) accept(r5, 0x0, &(0x7f0000000080)) 1.491570651s ago: executing program 3 (id=4819): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c32000000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) 1.457482651s ago: executing program 1 (id=4820): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x69) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.376264088s ago: executing program 4 (id=4821): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xb13f0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r6, 0x0, 0x20000000002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20008800) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8, 0x4000}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r10}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x80000004, 0x20000004, 0x9, 0x1000, r11, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x64}}, 0x24000000) 1.329798932s ago: executing program 1 (id=4823): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0x2, @private1, 0x6}}, 0x0, 0x0, 0x1f, 0x0, "0600aba05ccc4fa0048d9d49fc69f40300000000000000bc00924f2deea371bafa061b0600000000969c2eb11fe4d00d02ab00f7e8a28c790000000000f8ffffff00"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000010862674b9716a10b60ba2279770874d517ceeba9fbd3f79b5dfaa75d78b1f61058f0e28a0cbee8229e3df8e5680264461c33a31d4a7d13155ae18faca5333c11326953ca63de1f670db650f03fd8fbe5e75e9b6"], 0x18}, 0x1, 0x0, 0x0, 0x80d1}, 0x4004006) 1.255837918s ago: executing program 3 (id=4824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x23, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @generic="a4bd3287786fb83200b024a2218a551c6eefd4d20b99fc943ec2a5155330bf4c42d30d325d906765586579dcc6757ba26c505cd68e480e4ca8a48d5be92ef70a963f5d9f97a4ab433c5434479548386587595ed7bc0a9e1dc2", @generic="8bbace5d1edc37a989a24952de7410676bc4e39a53134d659d"]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x810) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.255512347s ago: executing program 0 (id=4825): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8, 0x10000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)="e3bc03a46f", 0x5}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x0, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x2000013, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8, 0x10000000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)="e3bc03a46f", 0x5}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) socket$kcm(0x2, 0x0, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000000040)=0x1, 0x4) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x2000013, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async) 1.180044289s ago: executing program 2 (id=4826): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r0, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000070000006b1135000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x0) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r3, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.157303366s ago: executing program 3 (id=4827): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100003040000050000000000a7122e84ebe06708a3d71915f83f00000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) 1.03167455s ago: executing program 2 (id=4828): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x1, 0x8) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x22, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0xfec5, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r12, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x40000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20005880) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000003c0)) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="00006a0500000000001815000000000000000000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000085000000070000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.022249138s ago: executing program 1 (id=4829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)={0x0, 0x1, [@link_local]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept$alg(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r11, 0x0, 0x0, 0x80800) getsockopt$llc_int(r9, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xa, 0x6, "39edc26bd14e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x25, 0x6, "a953aa1fd5cf7702450ba989e6ba6e6952a27ef6e9c15c64e5010000e29037b97d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf3}]}, @NFT_MSG_DELRULE={0xcc, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xfffffffffffffffb, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "4c5cec567116557c8fb5275ab5addbdf63573bd4f9fe2033def44d96c0af71ae833127e0ade7d0922969404892b3410942ebda571c9b9a8c0a8fc68edcb5bf6ca1a61b69ead0b4ad8ca91b477d0d15f1c4ffc20aa04ed5395cdbdeccf5585193abacef1309c7298dd3d4aca3867393e75a016634179e83ea7359d6d0eb2f56abbbea7351c6ed958e9fa5298106784bef70ea5c18621c03105f1e1837ee047f7673e2e35343c99d2298f7544932797a36aac99867282b6bac4a7f70a41c5554d5f1dcc6618b57b0a1f1b89d743d23ca15980089c3f6c6dc28aaa1189d8f48d377b47e376717a17cd5f22f0013"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "eb3f3535777175fcb11d71fdd7920eff4e60db44c7512a25c7a0497022e2e85dc3c9ec54aabdcdecac9cfcdfcf804b65563feebcb57bdd86b317d70e0a34960468dae1ccb5fc013224b0b07e1394a79fcd71cf63580e3163b3fe483fb7cf"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x11, 0x8, "08caa6cba6cc70e91292aea25d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "9ce9938f2fd431abc890f9b73f3a9b5e53a0ee2632734f80631a182c8781847a6d87e1f0d4a53d7b75ef98b64ad0f7c638b7f01febd1a1ca06994d33a7eebdd1bd1805f2de369cebc030e2b31b54f205bf360e8e18441fc89d3ad806cf"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c944) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 801.983121ms ago: executing program 0 (id=4830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x0, 0xb}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 691.117669ms ago: executing program 1 (id=4831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000035c0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa, 0x1000, 0x8, 0x5, 0x3}, 0xa3}, [{0x6, 0x5, 0x9, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x7, 0x7, 0x3, 0x3}, {0x0, 0x6, 0x324, 0x5, 0x10, 0x5}, {0x80, 0x8, 0xc, 0x7, 0x400, 0x1000}, {0x4, 0x0, 0x4, 0x6, 0xffffffd3, 0x6}, {0xf, 0x2, 0x8001, 0xfffffffa, 0x800, 0xe5d}, {0xf, 0x6d7, 0x7, 0x1000, 0x2, 0xff}, {0x4, 0x0, 0x6, 0x4, 0x7, 0x1}, {0xe8b, 0x8, 0x7, 0x3, 0x8, 0x8}, {0x45ca, 0x8, 0x0, 0x5, 0x0, 0x5}, {0xd0c, 0x4, 0x7, 0x800, 0x4, 0x5}, {0x4, 0x0, 0x7f, 0x8, 0xb4, 0x3}, {0x5, 0x100, 0x2, 0x1ff, 0x10000, 0xffffffff}, {0x6, 0x3, 0x9, 0x6, 0x6, 0xfffffff8}, {0x7fa, 0x3, 0x2, 0x5, 0x563, 0x8}, {0x0, 0x9, 0x87, 0x5, 0x8, 0x800}, {0x5, 0x585e, 0x6, 0x3, 0x400, 0x7}, {0x7, 0x6fc, 0x7fff, 0x6, 0x6, 0x4}, {0x3, 0xef0a, 0x9, 0x4, 0x7c1103b4, 0x5}, {0x7f, 0x4, 0x5, 0x1, 0x6, 0xffff}, {0x80, 0x56, 0x4, 0x9, 0xfffffff4, 0xdff}, {0x7, 0x1, 0x2400, 0x81, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x1, 0xffff8f3e, 0x94e}, {0x0, 0x80, 0x5, 0xc5c3, 0x5, 0xb}, {0xfb, 0x540fb8a0, 0x3, 0x400, 0x8000, 0x8001}, {0xfcf, 0xe0, 0x3, 0x4, 0x1000, 0x4923fb63}, {0x6, 0x5, 0xff, 0x7ff, 0x3, 0x401}, {0x4745c803, 0x9, 0x9, 0x6e, 0x39, 0x9}, {0x0, 0x0, 0x4, 0x3, 0x5, 0x4b9d252f}, {0x40000000, 0x0, 0x7d1, 0xb7, 0x7, 0x8}, {0x9909, 0x3, 0x800, 0x1, 0x7b, 0xffffffc0}, {0x3, 0x200, 0x1, 0x81, 0x10, 0x401}, {0xfffffff4, 0x1, 0x3, 0x10000, 0x5, 0x1}, {0x6, 0xcc6e, 0xee1, 0x3ff, 0xa4f, 0x3}, {0x9, 0x6, 0xc, 0x7, 0x23, 0x200}, {0x5, 0x3, 0x0, 0x6, 0x2, 0x100}, {0x1ff, 0x78d, 0x7, 0x5, 0x942d, 0x8}, {0x6, 0x9, 0xf, 0x401, 0x0, 0xe6}, {0xffffffe8, 0x81, 0x8000, 0x40, 0x0, 0xf192d4b}, {0x5, 0x100, 0x6, 0x4, 0x7, 0x400}, {0x8000, 0x5, 0x4, 0x4, 0x3, 0x8cfa}, {0x0, 0x9, 0x9, 0x2, 0x4, 0x1}, {0x4, 0x7, 0x5, 0x3ff, 0x8, 0x80000000}, {0xb, 0x6, 0x3dcd, 0x5, 0x0, 0x7}, {0x4, 0x7f, 0x8, 0x7, 0xa, 0xdc5}, {0x3, 0x5, 0x6543, 0x8, 0x5, 0x4}, {0x9, 0x1ab, 0xf, 0x7, 0x8001, 0x8}, {0xe, 0x6, 0xfffffc00, 0x9876, 0x81, 0x9}, {0x3, 0x10001, 0xa, 0x400, 0x4c9e, 0xffffff01}, {0x0, 0xce000000, 0xe, 0xfffffff9, 0x401, 0x6}, {0x6, 0xf, 0x2, 0x0, 0x5, 0x2}, {0x80000001, 0x2, 0xf9, 0x9, 0x2, 0x4}, {0x1, 0x400, 0x5, 0x200, 0xed, 0x3}, {0x7, 0x7, 0x899, 0x1000, 0xfff, 0xfffffffb}, {0x3, 0x1, 0xe2, 0x6, 0x160, 0xb8}, {0x3, 0x0, 0xbf6, 0x3, 0x0, 0x81}, {0x2000009, 0x1, 0xed, 0x11e, 0x7fffffff, 0x7}, {0x100, 0xc, 0x7, 0xaa, 0x50000, 0x7fff}, {0x3, 0x19a8, 0x6, 0x529, 0x4, 0x9c2}, {0x4, 0xb, 0x9, 0x3, 0x5, 0x8001}, {0x9, 0x5ad, 0x1, 0x4, 0x10000, 0x25}, {0x0, 0x2, 0x3, 0x1, 0x6, 0x80}, {0x101, 0x1, 0x5, 0xb, 0x1a0d, 0xad47}, {0x9, 0x8, 0x3, 0xb, 0x8, 0xce65}, {0xd, 0x10000000, 0x0, 0x7, 0x7, 0xeee}, {0x9, 0xc8, 0x9e1, 0x55, 0x2, 0x2}, {0x15bd, 0x6, 0x68d, 0x10001, 0xb, 0x5}, {0x1, 0x9, 0x59a, 0x1, 0x6, 0x3ff}, {0x8456, 0x7, 0x3, 0x0, 0x7, 0x2}, {0x759, 0x11, 0x3, 0x9, 0x3, 0x628}, {0x3, 0x4, 0x4, 0x1, 0x9, 0x2}, {0xc71, 0x2, 0x6, 0x7fff, 0x9, 0x5c0}, {0x1, 0x1, 0x5, 0x7, 0xde9, 0x8}, {0x8, 0xfffffffe, 0x1, 0x3, 0x7, 0x36}, {0x0, 0x8, 0x4c6, 0x0, 0x7863, 0x1}, {0x0, 0x8, 0x7152, 0x5, 0x1, 0x6}, {0x0, 0xe08, 0x7, 0x9, 0x7, 0x8}, {0x3, 0xcb86, 0x100, 0x976, 0x935, 0x800}, {0x4, 0x40, 0x0, 0x2, 0x2, 0x80000000}, {0x3, 0x3, 0x0, 0x15, 0x3, 0xa}, {0x4, 0x7fc, 0xb2, 0x7, 0x1}, {0x3, 0x6f15, 0x101, 0x401, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x800, 0x1, 0xfffffe01}, {0x8, 0xa, 0x8000, 0x3, 0x0, 0x6}, {0x6, 0x1, 0x1, 0x46a, 0x5, 0x8001}, {0x0, 0x9a9, 0x4009, 0x29b, 0xfffffffc, 0x5}, {0x9, 0x3e0, 0x4, 0x80000001, 0x6, 0x80000000}, {0x6, 0xd, 0xfffffffc, 0x325, 0x8, 0x1}, {0x7fff, 0x7, 0x3ff, 0x0, 0x6}, {0x100, 0xfffffc00, 0x2e, 0x5, 0xfffffffa, 0x9}, {0x0, 0x8f, 0x100, 0x3, 0x4, 0x7}, {0x7ff, 0x4, 0x435d, 0x126, 0x10, 0xfffffff9}, {0x36, 0x2, 0xf, 0xfffffffd, 0x3, 0x8}, {0x7, 0x7, 0x1, 0x0, 0x6, 0x10001}, {0xd609, 0xcd7, 0x0, 0x3, 0xfffffba5, 0x401}, {0x8, 0x7fff, 0x37, 0x8d45, 0x952f, 0x8}, {0x8, 0x4, 0x8, 0x8, 0x0, 0x5}, {0xffff, 0x80000000, 0x8, 0x3ff, 0xff, 0x2}, {0x6, 0xb, 0x9, 0x6, 0x1, 0x1}, {0x4, 0x8, 0x7, 0x0, 0x4, 0x297efd19}, {0x663e, 0x8, 0x81, 0x1, 0x7, 0x8001}, {0x5, 0x2, 0x4b42, 0x5, 0x5, 0x401}, {0xa20, 0xfffffffa, 0x5, 0x6, 0x0, 0xae}, {0x7fff, 0x800, 0x6, 0x262e, 0x5, 0x2}, {0x7fffffff, 0x4, 0x3, 0x2, 0x5, 0xb339}, {0x96, 0x758, 0x9, 0x400, 0x3ff, 0x5}, {0x3, 0x7, 0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x7, 0x4, 0xb5}, {0x8, 0x0, 0x2, 0x9, 0x2, 0x200}, {0xff, 0xaf9a, 0x0, 0x7, 0x1, 0x6}, {0xe, 0x9, 0xf, 0x1, 0x460, 0x7}, {0x5e82, 0x0, 0x32, 0xffffffff, 0x81, 0x6}, {0x2, 0x2, 0xfff, 0x1728, 0x200, 0x7}, {0x7, 0x3, 0x6, 0x8, 0x1, 0x6}, {0x7f, 0xfff, 0x9, 0xe037, 0x3, 0xfffffff7}, {0xa0000000, 0xd, 0x8000, 0xf05, 0x6, 0x6b}, {0xffffffff, 0x8, 0x5f94, 0xfffff1f5, 0x7fffffff, 0x1000}, {0x0, 0x3e2, 0x9, 0xfffffffb, 0x0, 0x9}, {0x1, 0x5, 0x9, 0x0, 0x800, 0x401}, {0x513f, 0x8, 0x0, 0x80000000, 0x28e, 0x9}, {0x2, 0x8, 0x80, 0x3, 0x9f8, 0x80000001}, {0x80000001, 0xc1, 0x4, 0xeb3, 0x40000005, 0x2568}, {0xc14c, 0x6, 0x2, 0x71, 0x3062, 0x7}, {0x9, 0x2, 0xd920, 0x1, 0x8, 0x1}, {0x7f, 0x9, 0x7, 0x4, 0xdd2b}, {0x0, 0x8000, 0x819, 0x8, 0x81, 0xb8}, {0x5, 0x2, 0x7, 0x0, 0x2, 0x687d7ec1}, {0x8, 0x80, 0xfffffff7, 0x8001, 0x4, 0x6}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7, 0x1}, {}, {0x2}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x6}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x7e76235531e31529}, {0x2}, {0x3, 0x1}, {0xa}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 690.418809ms ago: executing program 3 (id=4832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x34, 0x6, "8e2b2392c0cafbe1526c090b6c6ca41db9844eea8cdcdefadc63b81a9f670a44dcc0c0146170b682af9ce8240faf8e4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000ffe7000000000000000500030003000075ca259090a8cf92801100080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001900030000d47c17dab47f81d20080005696e89f0bbd2a5094af06271af626e20100000080149000fd11fe050000000008000f000900000408000700ac1414aac681ab8981534bec57e8d9660b4c12238dd64883fa16029fe88b15bb8d70154ef8b63ced2e9b1800626046593971404c7980bfa0178558884cefa455d6b4477d2e0eaaff31e833363e0f5de85a4b43e052562389b07fcaf220632108f0012677ddfac5feb313d10d09f3e3f877b3b1499b304a1eef317dccf7c6a6d3bb532d2ae332bdf5977d8b9d290000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000210400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8700000050000000240012800b00010067656e6576650000140002800500080001000000050009"], 0x44}}, 0x800) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r6, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2fcc0b88f7444f674756f4c643cb46a4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4710a4befe2a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 641.469308ms ago: executing program 2 (id=4833): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000400)) ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x20000000000000fc, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @remote, 0x6}, 0x1c) 604.953875ms ago: executing program 0 (id=4834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x69) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 535.648035ms ago: executing program 1 (id=4835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x3, 0xa, 0x60, 0x20, 0x1}, {0x8000, 0x100000001, 0x0, 0x8, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff8, 0x5}, {0x6, 0x885, 0x27, 0x1}, 0x3, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x1, 0x0, 0x8, 0x5, 0xc2b5, 0x7}}, 0xe8) close(0x3) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r11, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1f4}], 0x1}, 0x8169c27e2093e573) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000240000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x6c}}, 0x4004800) 355.368411ms ago: executing program 0 (id=4836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private0, @in=@loopback, 0x4e20, 0x7, 0x4e20, 0x2, 0xa, 0x80, 0x0, 0x3c, r6, r7}, {0x7, 0xad, 0x4, 0x9, 0x1ff, 0x4, 0xefc, 0xd}, {0x3cf4, 0x5, 0x1ff, 0x8}, 0x1, 0x6e6bb7, 0x2}, {{@in=@multicast2, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3506, 0x1, 0x1, 0x2, 0x7f, 0x8, 0x38c}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r4, 0x0, 0xffffffff004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private0, @in=@loopback, 0x4e20, 0x7, 0x4e20, 0x2, 0xa, 0x80, 0x0, 0x3c, r6, r7}, {0x7, 0xad, 0x4, 0x9, 0x1ff, 0x4, 0xefc, 0xd}, {0x3cf4, 0x5, 0x1ff, 0x8}, 0x1, 0x6e6bb7, 0x2}, {{@in=@multicast2, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3506, 0x1, 0x1, 0x2, 0x7f, 0x8, 0x38c}}, 0xe8) (async) 354.882332ms ago: executing program 2 (id=4837): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40040) socket$alg(0x26, 0x5, 0x0) r2 = accept4$rose(r0, &(0x7f0000000440)=@full={0xb, @dev, @default, 0x0, [@rose, @default, @remote, @null, @netrom, @default]}, &(0x7f0000000480)=0x40, 0x800) ioctl$int_out(r2, 0x5462, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf377}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa626}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4051}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv4_getaddr={0x20, 0x16, 0x8, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x28, 0xfe, r9}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'tunl0\x00', r4, 0x40, 0x0, 0x2, 0x0, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x64, 0x0, 0xfb, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, {[@timestamp_addr={0x44, 0x34, 0x43, 0x1, 0x2, [{@remote, 0xca9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x40}, {@private=0xa010101, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xa98}, {@multicast2, 0x997}]}, @noop]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)={0x26c, r11, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "a9fc658fe15ee3ffbb136485510f104adac1ce69c4660aa81fe7588c8fc92305ea3ab94f2a63fd3ae847a3fff1a2ff824da0bc974f93ae8ead2db31c08f839dbf4d4640537c6b340257137d742f041371e4be58f711160a7a3dcbb4922071a6df016c1d7007962ad8122b9fa8de744da55db9835e58de6ab024c73bfcf09"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "488ee607835f967d4a0d270b6b47cc812f849cbb9772cb8294e85894bc"}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "b79b0a58c040c49a4ba9d231f22b2ea69f56d6c80331eaa41b68b1f43315dd6623a895e9987f3f4e9869e7e33a4adbf94a307d16"}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "b60b86222ced2c01b25804d2de6806b9b7be7b6df63d1eb70cff62c62c0603d16e2a8ba52eeea60cf1fc7b2b1baf533544f01e6e3b2f5a15ce317b9c41ae3d41c3e1cc1a98f3ee06cf7e45520a22fbb2bf881b5ded50d9f4cab649806962fbb152656c7295688ea977d6f1f47c39355a93b0ce72f78d59a8a09459ba3d7d3afa9d17f25d3d78882d1452e3139a00573f6ebe4830615bdb1669bbe2191d3c93db16e7b2dba116e8484849ac7a8845bf1f7d174f9d551ad614f512bf195267aeb4fcf586806615ff212667aca9606bdb01e0dda8acf90b27fe13d4ed296218ffd4526570826a348d50253d67f202035c8f24b6dec784c4da3f"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xd8fc6e175c5a4a83}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}]}, 0x26c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) 351.008097ms ago: executing program 3 (id=4838): r0 = socket(0x23, 0x80805, 0x0) pwrite64(r0, &(0x7f0000000000)="9dfea693ba79125d0bf4833a52d2b0f4adc584477116e61e11f601ba22674ca58a921f2675f96007332e312d5b5598559374185b209b1718f03ec490cd6144e12d90cdb921c9b1ee9f349b48df5b86ca1354486572668de9e35dc9c5cb8e9efe4316b3c2c1fdec191c24f16f0863764a2fad9b1e8c0dd98a89cf3bc3594a2eadb611", 0x82, 0x8000) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="97452a307eb495fe2236000000000000000b00"/28, 0x1c}, {0x0}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20008005) 285.708858ms ago: executing program 2 (id=4839): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25077c0000080001800400fd8008000380040009"], 0x24}}, 0xc010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="19137ead2ada48f0debed264ed7dd8e05735ae848e586f24d3dfc68ad881e604284bdb19a3342880a9bcff1b460e98fbbcc94e5bf269015a30ff17e8b81af0b914170134839b6bbbce53890a45a865bf4a804da6028f8e32af27ed460c1b7ac2f85d373f77ad37791b3a", @ANYRES64=0x0], 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) clock_gettime(0x3, &(0x7f0000000180)={0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r5}) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRES64=r7, @ANYRES32=r3, @ANYRESHEX, @ANYBLOB="e6b4f932e7757571b3278f5a483fa1350c1712c6999c817fc292503e625fdf1634b1ab4560"], 0x50}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) (async) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) 277.324163ms ago: executing program 3 (id=4840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110ae000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$802154_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="07f75907c0abb696e3ef12b158280949fc91d78e2ce3611d94e53525bdfe27349ba9a3c612c0b239db4c06f46eae266e31ac5e2f815341c9edf77f679f6c747174bf6517b470f6ea2da78eeb4e83c0ad98835b3e73a3c463f078a8bf", 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="01ff01029ba80a010bddfb1b61570000001900796733be1f1da775ac0f3587f43347"], 0x57) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="236fa4ba27191f48db970627e8f42c35286f1b6eec8eb01de95d10a4610ba90def6be0132987574b54bb8208957be36bac774c8032af1df8de2f72b688dac67663606d4fd2b28fe425f6f8f9b4a88c62fa071fc1640e573fbd6c688a590c4319f3fe5dea97cd9acc03f900bc59cdf1fd7893c6290f384646753f65d6cd8c7fffed3f67acd9b88e298c6e24d8d74e4dcd17f942b9e2f0ba"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 261.061281ms ago: executing program 4 (id=4841): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r2, @ANYBLOB="08000a0047fc"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000180)) (async, rerun: 64) r4 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0x123}]}]}]}, 0x28}], 0x1}, 0x0) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) (async, rerun: 64) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async, rerun: 64) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r6}, 0x10) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180009007ebd7000000000001c140000fe"], 0x30}}, 0x0) 179.809706ms ago: executing program 0 (id=4842): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x62) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 142.271057ms ago: executing program 4 (id=4843): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x50, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xdc}, @call={0x85, 0x0, 0x0, 0xb8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0xcb, &(0x7f0000000140)=""/203, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x3}, 0xfffffffffffffd54, 0x8346, 0xffffffffffffffff, 0xa, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0x8, 0x8}, {0x1, 0x2, 0xd, 0x2}, {0x3, 0x5, 0x8, 0xa}, {0x5, 0x3, 0xa}, {0x2, 0x5, 0x9, 0x3}, {0x0, 0x3, 0x4, 0x3}, {0x2, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x6, 0x10}, {0x1, 0x5, 0x10, 0x3}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r0, r3}) 0s ago: executing program 2 (id=4844): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x20000, 0x0, {0x81, 0x2}, [@typed={0x8, 0xa2, 0x0, 0x0, @str='#+[\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): amily 0 port 20000 - 0 [ 382.339397][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.442527][ T79] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.455148][ T79] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.479413][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.546547][ T79] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.569468][ T79] netdevsim netdevsim2 eth4: set [1, 1] type 2 family 0 port 20000 - 0 [ 382.762578][T18767] ipt_ECN: cannot use operation on non-tcp rule [ 382.851101][ T5842] Bluetooth: hci0: command tx timeout [ 383.253188][T10132] bond1 (unregistering): Released all slaves [ 383.265745][T10132] bond2 (unregistering): Released all slaves [ 383.280117][T10132] bond3 (unregistering): Released all slaves [ 383.304765][T10132] bond0 (unregistering): Released all slaves [ 383.318077][T10132] bond4 (unregistering): Released all slaves [ 383.331353][T10132] bond5 (unregistering): Released all slaves [ 383.347561][T10132] bond6 (unregistering): Released all slaves [ 383.364279][T10132] bond7 (unregistering): Released all slaves [ 383.376422][T10132] bond8 (unregistering): Released all slaves [ 383.393376][T10132] bond9 (unregistering): Released all slaves [ 383.411706][T10132] bond10 (unregistering): Released all slaves [ 383.426662][T10132] bond11 (unregistering): Released all slaves [ 383.438624][T18669] chnl_net:caif_netlink_parms(): no params data found [ 383.453246][T18752] tipc: Enabling of bearer rejected, failed to enable media [ 383.469450][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.623482][T18768] lo speed is unknown, defaulting to 1000 [ 383.647746][T18768] wg1 speed is unknown, defaulting to 1000 [ 383.706790][T10132] : left promiscuous mode [ 383.797884][T18768] hsr0 speed is unknown, defaulting to 1000 [ 383.857197][T10132] : left promiscuous mode [ 383.910057][T18669] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.917278][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.925180][T18669] bridge_slave_0: entered allmulticast mode [ 383.933857][T18669] bridge_slave_0: entered promiscuous mode [ 383.944369][T18669] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.951895][T18669] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.959131][T18669] bridge_slave_1: entered allmulticast mode [ 383.974041][T18669] bridge_slave_1: entered promiscuous mode [ 383.987723][T10132] tipc: Disabling bearer [ 384.009835][T10132] tipc: Left network mode [ 384.134769][T18669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.188606][T18669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.351726][T18669] team0: Port device team_slave_0 added [ 384.375942][T18669] team0: Port device team_slave_1 added [ 384.475713][T18669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.483170][T18669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.510604][T18669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.539006][T18669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.548614][T18669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.575198][T18669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.757929][T18669] hsr_slave_0: entered promiscuous mode [ 384.766463][T18669] hsr_slave_1: entered promiscuous mode [ 384.773706][T18669] debugfs: 'hsr0' already exists in 'hsr' [ 384.779942][T18669] Cannot create hsr debugfs directory [ 384.932817][ T5842] Bluetooth: hci0: command tx timeout [ 385.568404][T18849] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 385.641254][T18863] syzkaller0: entered promiscuous mode [ 385.672899][T18863] syzkaller0: entered allmulticast mode [ 385.890318][ T79] net_ratelimit: 3 callbacks suppressed [ 385.890336][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 385.909274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 385.917386][ C1] lec:lec_tx_timeout: lec0 [ 385.921981][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.967988][T18865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.980580][T18669] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.995036][T18669] netdevsim netdevsim2 eth4 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.030969][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 386.163012][T18669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.215254][T18669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.257723][T18903] Bluetooth: MGMT ver 1.23 [ 386.281677][T18897] netlink: 'syz.1.3311': attribute type 3 has an invalid length. [ 386.301486][T18897] __nla_validate_parse: 4 callbacks suppressed [ 386.301504][T18897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3311'. [ 386.439833][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 386.556788][T18669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.587505][T18669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.675974][T10132] IPVS: stop unused estimator thread 0... [ 386.744793][T18669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.777980][T18943] xt_l2tp: invalid flags combination: 0 [ 386.789423][T18669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.831220][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.011132][ T5842] Bluetooth: hci0: command tx timeout [ 387.021606][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.095113][T18950] syzkaller0: entered promiscuous mode [ 387.107266][T18950] syzkaller0: entered allmulticast mode [ 387.159883][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.184411][T18669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.450305][T18972] sctp: [Deprecated]: syz.0.3320 (pid 18972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.450305][T18972] Use struct sctp_sack_info instead [ 387.582586][T18978] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 387.591202][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.599740][T18669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.622354][T18669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.635640][T18669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.656029][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3323'. [ 387.670231][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3323'. [ 387.690442][T18981] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3323'. [ 387.699531][T18981] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3323'. [ 387.730630][T18978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.787236][T18978] bond2: (slave gretap2): making interface the new active one [ 387.808965][T18978] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 387.839855][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.921772][T19006] Cannot find set identified by id 0 to match [ 387.961783][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.175627][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.212297][T19025] syzkaller0: entered promiscuous mode [ 388.307800][T18669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.376532][T18669] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.404770][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.411986][T10132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.439192][T19032] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 388.466753][T19032] dvmrp1: linktype set to 804 [ 388.479747][T19039] netlink: 'syz.4.3334': attribute type 10 has an invalid length. [ 388.533869][T19044] netlink: 'syz.4.3334': attribute type 10 has an invalid length. [ 388.564286][T19039] bond0: (slave dummy0): Releasing backup interface [ 388.624017][T19039] team0: Port device dummy0 added [ 388.634814][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.642042][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.694706][T19044] team0: Port device dummy0 removed [ 388.724972][T19044] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 388.776504][T19050] veth0: entered promiscuous mode [ 388.868382][T19056] netlink: 2968 bytes leftover after parsing attributes in process `syz.0.3336'. [ 388.967063][T19064] tipc: Started in network mode [ 388.972030][T19064] tipc: Node identity a6ba5848b61b, cluster identity 4711 [ 388.979459][T19064] tipc: Enabled bearer , priority 0 [ 389.075883][T19063] tipc: Disabling bearer [ 389.101174][ T5842] Bluetooth: hci0: command tx timeout [ 389.312309][T19050] veth0: left promiscuous mode [ 390.054659][T18669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.126628][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 390.274831][T18669] veth0_vlan: entered promiscuous mode [ 390.321036][T18669] veth1_vlan: entered promiscuous mode [ 390.382620][T18669] veth0_macvtap: entered promiscuous mode [ 390.397357][T18669] veth1_macvtap: entered promiscuous mode [ 390.409928][T19110] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3343'. [ 390.514555][T18669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.568300][T18669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.633151][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.646529][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.696791][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.735647][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.905991][T10132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.915522][ T36] net_ratelimit: 17 callbacks suppressed [ 390.915541][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 390.929424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.937545][ C1] lec:lec_tx_timeout: lec0 [ 390.942225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.950483][T10132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.065756][T10138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.094644][T10138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.103145][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 391.219731][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 391.305875][T19137] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3349'. [ 391.339694][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 391.459757][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 391.533379][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 391.620808][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 391.754441][T19150] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.038269][T19177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3358'. [ 392.067798][T19177] nbd: must specify at least one socket [ 392.608808][T19150] virt_wifi0: left promiscuous mode [ 392.646861][T19164] netlink: 'syz.2.3358': attribute type 3 has an invalid length. [ 392.659473][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.698494][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.737265][ T79] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.772506][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.794468][ T79] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.822124][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.930002][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.121689][T19206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3363'. [ 393.131690][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3363'. [ 393.141414][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 393.149867][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.270401][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.475029][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3367'. [ 393.774712][T19242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3371'. [ 394.709096][T19294] lo speed is unknown, defaulting to 1000 [ 394.731969][T19294] wg1 speed is unknown, defaulting to 1000 [ 394.746038][T19294] hsr0 speed is unknown, defaulting to 1000 [ 395.011066][T19309] FAULT_INJECTION: forcing a failure. [ 395.011066][T19309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.026102][T19310] Bluetooth: MGMT ver 1.23 [ 395.026555][T19310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3389'. [ 395.082494][T19309] CPU: 1 UID: 0 PID: 19309 Comm: syz.3.3388 Not tainted syzkaller #0 PREEMPT(full) [ 395.082519][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.082535][T19309] Call Trace: [ 395.082542][T19309] [ 395.082550][T19309] dump_stack_lvl+0xe8/0x150 [ 395.082580][T19309] should_fail_ex+0x412/0x560 [ 395.082611][T19309] _copy_from_iter+0x1d3/0x1670 [ 395.082633][T19309] ? rcu_is_watching+0x15/0xb0 [ 395.082663][T19309] ? __pfx__copy_from_iter+0x10/0x10 [ 395.082689][T19309] ? netlink_sendmsg+0x650/0xb40 [ 395.082708][T19309] ? skb_put+0x11b/0x210 [ 395.082732][T19309] netlink_sendmsg+0x6c0/0xb40 [ 395.082760][T19309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.082783][T19309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.082811][T19309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.082835][T19309] ____sys_sendmsg+0x972/0x9f0 [ 395.082867][T19309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.082898][T19309] ? import_iovec+0x73/0xa0 [ 395.082922][T19309] ___sys_sendmsg+0x2a5/0x360 [ 395.082949][T19309] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.083021][T19309] ? __fget_files+0x2a/0x420 [ 395.083037][T19309] ? __fget_files+0x3a0/0x420 [ 395.083062][T19309] __x64_sys_sendmsg+0x1bd/0x2a0 [ 395.083088][T19309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.083119][T19309] ? __pfx_ksys_write+0x10/0x10 [ 395.083156][T19309] do_syscall_64+0x14d/0xf80 [ 395.083178][T19309] ? trace_irq_disable+0x3b/0x150 [ 395.083193][T19309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.083211][T19309] ? clear_bhb_loop+0x40/0x90 [ 395.083232][T19309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.083252][T19309] RIP: 0033:0x7fbd1939c819 [ 395.083271][T19309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.083286][T19309] RSP: 002b:00007fbd175f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.083305][T19309] RAX: ffffffffffffffda RBX: 00007fbd19616090 RCX: 00007fbd1939c819 [ 395.083318][T19309] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000008 [ 395.083329][T19309] RBP: 00007fbd175f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.083340][T19309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.083350][T19309] R13: 00007fbd19616128 R14: 00007fbd19616090 R15: 00007fff60819ff8 [ 395.083379][T19309] [ 395.814641][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3395'. [ 395.835232][T19325] lo speed is unknown, defaulting to 1000 [ 395.856687][T19325] wg1 speed is unknown, defaulting to 1000 [ 395.932624][T19325] hsr0 speed is unknown, defaulting to 1000 [ 395.949311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.957338][ C1] lec:lec_tx_timeout: lec0 [ 395.962024][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 395.968622][T10138] net_ratelimit: 17 callbacks suppressed [ 395.968638][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.143312][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.279337][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.393782][T19353] lo speed is unknown, defaulting to 1000 [ 396.493534][T19353] wg1 speed is unknown, defaulting to 1000 [ 396.505831][T19353] hsr0 speed is unknown, defaulting to 1000 [ 396.512008][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.693327][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.819349][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.942260][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 396.954348][T19402] __nla_validate_parse: 1 callbacks suppressed [ 396.954366][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 397.059450][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 397.113500][T19408] lo speed is unknown, defaulting to 1000 [ 397.121666][T19408] wg1 speed is unknown, defaulting to 1000 [ 397.131243][T19408] hsr0 speed is unknown, defaulting to 1000 [ 397.214269][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 397.252497][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'. [ 397.282222][T19422] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3417'. [ 397.294911][T19423] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:1726 [ 397.311275][T19423] bond0: (slave dummy0): Releasing backup interface [ 397.327926][T19423] bridge_slave_0: left allmulticast mode [ 397.340386][T19423] bridge_slave_0: left promiscuous mode [ 397.354686][T19423] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.381481][T19423] bridge_slave_1: left allmulticast mode [ 397.394698][T19423] bridge_slave_1: left promiscuous mode [ 397.407209][T19423] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.419768][T19423] bond0: (slave bond_slave_0): Releasing backup interface [ 397.428636][T19423] bond0: (slave bond_slave_1): Releasing backup interface [ 397.439397][T19423] team0: Port device team_slave_0 removed [ 397.446571][T19423] team0: Port device team_slave_1 removed [ 397.453103][T19423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.461007][T19423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.468761][T19423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.514195][T19431] pim6reg1: entered promiscuous mode [ 397.519723][T19431] pim6reg1: entered allmulticast mode [ 397.746316][T19444] netlink: 'syz.3.3426': attribute type 15 has an invalid length. [ 397.868402][T19448] netlink: 'syz.1.3428': attribute type 6 has an invalid length. [ 397.886783][T19448] netlink: 'syz.1.3428': attribute type 7 has an invalid length. [ 397.904623][T19448] netlink: 'syz.1.3428': attribute type 8 has an invalid length. [ 397.929364][T19448] netlink: 'syz.1.3428': attribute type 15 has an invalid length. [ 398.215511][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 398.232528][T19482] vlan2: entered promiscuous mode [ 398.237757][T19482] syz_tun: entered promiscuous mode [ 398.794445][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 398.805455][T19534] sctp: [Deprecated]: syz.4.3450 (pid 19534) Use of int in maxseg socket option. [ 398.805455][T19534] Use struct sctp_assoc_value instead [ 399.233711][T19554] FAULT_INJECTION: forcing a failure. [ 399.233711][T19554] name failslab, interval 1, probability 0, space 0, times 0 [ 399.246548][T19554] CPU: 0 UID: 0 PID: 19554 Comm: syz.4.3456 Not tainted syzkaller #0 PREEMPT(full) [ 399.246564][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.246570][T19554] Call Trace: [ 399.246575][T19554] [ 399.246581][T19554] dump_stack_lvl+0xe8/0x150 [ 399.246600][T19554] should_fail_ex+0x412/0x560 [ 399.246619][T19554] should_failslab+0xa8/0x100 [ 399.246636][T19554] __kmalloc_cache_noprof+0x88/0x660 [ 399.246657][T19554] ? cls_bpf_init+0x50/0x130 [ 399.246682][T19554] cls_bpf_init+0x50/0x130 [ 399.246701][T19554] tcf_proto_create+0x248/0x330 [ 399.246729][T19554] tc_new_tfilter+0x12ff/0x1780 [ 399.246773][T19554] ? __pfx_tc_new_tfilter+0x10/0x10 [ 399.246802][T19554] ? __pfx_tc_new_tfilter+0x10/0x10 [ 399.246814][T19554] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 399.246828][T19554] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 399.246839][T19554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.246851][T19554] ? ref_tracker_free+0x693/0x840 [ 399.246860][T19554] ? __copy_skb_header+0xa3/0x4a0 [ 399.246874][T19554] ? __pfx_ref_tracker_free+0x10/0x10 [ 399.246889][T19554] netlink_rcv_skb+0x232/0x4b0 [ 399.246901][T19554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.246913][T19554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.246929][T19554] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.246943][T19554] netlink_unicast+0x80f/0x9b0 [ 399.246958][T19554] ? __pfx_netlink_unicast+0x10/0x10 [ 399.246968][T19554] ? netlink_sendmsg+0x650/0xb40 [ 399.246978][T19554] ? skb_put+0x11b/0x210 [ 399.246991][T19554] netlink_sendmsg+0x813/0xb40 [ 399.247006][T19554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.247019][T19554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.247035][T19554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.247048][T19554] ____sys_sendmsg+0x972/0x9f0 [ 399.247066][T19554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.247083][T19554] ? import_iovec+0x73/0xa0 [ 399.247104][T19554] ___sys_sendmsg+0x2a5/0x360 [ 399.247120][T19554] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.247151][T19554] ? __fget_files+0x2a/0x420 [ 399.247159][T19554] ? __fget_files+0x3a0/0x420 [ 399.247173][T19554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 399.247188][T19554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.247205][T19554] ? __pfx_ksys_write+0x10/0x10 [ 399.247222][T19554] do_syscall_64+0x14d/0xf80 [ 399.247235][T19554] ? trace_irq_disable+0x3b/0x150 [ 399.247244][T19554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.247254][T19554] ? clear_bhb_loop+0x40/0x90 [ 399.247266][T19554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.247276][T19554] RIP: 0033:0x7fccecb9c819 [ 399.247286][T19554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.247295][T19554] RSP: 002b:00007fccedaf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.247306][T19554] RAX: ffffffffffffffda RBX: 00007fccece15fa0 RCX: 00007fccecb9c819 [ 399.247313][T19554] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000008 [ 399.247319][T19554] RBP: 00007fccedaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 399.247325][T19554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.247331][T19554] R13: 00007fccece16038 R14: 00007fccece15fa0 R15: 00007fffa2f56588 [ 399.247347][T19554] [ 399.903354][T19571] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3461'. [ 399.915848][T19571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 399.981258][T19569] lo speed is unknown, defaulting to 1000 [ 399.988771][T19569] wg1 speed is unknown, defaulting to 1000 [ 400.026720][T19569] hsr0 speed is unknown, defaulting to 1000 [ 400.030403][T19566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3460'. [ 400.147931][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3466'. [ 400.160316][T19590] netlink: 'syz.0.3463': attribute type 39 has an invalid length. [ 400.201665][T19594] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3466'. [ 400.492897][T19589] ipvlan2: entered allmulticast mode [ 400.498421][T19589] syz_tun: entered allmulticast mode [ 400.775538][T19618] IPVS: length: 35 != 24 [ 400.969261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 400.977324][ C1] lec:lec_tx_timeout: lec0 [ 400.982045][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.013171][T10138] net_ratelimit: 21 callbacks suppressed [ 401.013188][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.203358][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.237063][T19642] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 401.349525][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.529392][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.639337][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.700081][T19666] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 401.780483][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.792918][T19676] sctp: [Deprecated]: syz.4.3488 (pid 19676) Use of int in max_burst socket option. [ 401.792918][T19676] Use struct sctp_assoc_value instead [ 401.919415][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.996986][T19683] syzkaller0: entered promiscuous mode [ 402.031474][T19683] syzkaller0: entered allmulticast mode [ 402.059486][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.586051][T19703] __nla_validate_parse: 9 callbacks suppressed [ 402.586070][T19703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3498'. [ 402.599797][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 402.611715][T19704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3498'. [ 403.741145][T19699] vlan2: entered promiscuous mode [ 403.746216][T19699] veth1_to_hsr: entered promiscuous mode [ 403.856710][T19697] lo speed is unknown, defaulting to 1000 [ 403.868765][T19697] wg1 speed is unknown, defaulting to 1000 [ 403.871463][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.902460][T19697] hsr0 speed is unknown, defaulting to 1000 [ 403.905714][T19708] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 403.919828][T19711] FAULT_INJECTION: forcing a failure. [ 403.919828][T19711] name failslab, interval 1, probability 0, space 0, times 0 [ 403.932637][T19711] CPU: 0 UID: 0 PID: 19711 Comm: syz.4.3501 Not tainted syzkaller #0 PREEMPT(full) [ 403.932662][T19711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.932672][T19711] Call Trace: [ 403.932679][T19711] [ 403.932686][T19711] dump_stack_lvl+0xe8/0x150 [ 403.932714][T19711] should_fail_ex+0x412/0x560 [ 403.932747][T19711] should_failslab+0xa8/0x100 [ 403.932772][T19711] __kmalloc_cache_noprof+0x88/0x660 [ 403.932794][T19711] ? tcf_exts_init_ex+0x10e/0x7c0 [ 403.932818][T19711] tcf_exts_init_ex+0x10e/0x7c0 [ 403.932837][T19711] ? __kmalloc_cache_noprof+0x31c/0x660 [ 403.932858][T19711] ? __kmalloc_cache_noprof+0x15b/0x660 [ 403.932882][T19711] cls_bpf_change+0x2a4/0xd90 [ 403.932903][T19711] ? __pfx___mutex_lock+0x10/0x10 [ 403.932936][T19711] ? __pfx_cls_bpf_change+0x10/0x10 [ 403.932979][T19711] tc_new_tfilter+0xff8/0x1780 [ 403.933039][T19711] ? __pfx_tc_new_tfilter+0x10/0x10 [ 403.933093][T19711] ? __pfx_tc_new_tfilter+0x10/0x10 [ 403.933114][T19711] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 403.933139][T19711] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 403.933158][T19711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.933176][T19711] ? ref_tracker_free+0x693/0x840 [ 403.933192][T19711] ? __copy_skb_header+0xa3/0x4a0 [ 403.933218][T19711] ? __pfx_ref_tracker_free+0x10/0x10 [ 403.933253][T19711] netlink_rcv_skb+0x232/0x4b0 [ 403.933274][T19711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.933296][T19711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.933325][T19711] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.933350][T19711] netlink_unicast+0x80f/0x9b0 [ 403.933389][T19711] ? __pfx_netlink_unicast+0x10/0x10 [ 403.933408][T19711] ? netlink_sendmsg+0x650/0xb40 [ 403.933433][T19711] ? skb_put+0x11b/0x210 [ 403.933457][T19711] netlink_sendmsg+0x813/0xb40 [ 403.933485][T19711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.933508][T19711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.933536][T19711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.933558][T19711] ____sys_sendmsg+0x972/0x9f0 [ 403.933588][T19711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.933619][T19711] ? import_iovec+0x73/0xa0 [ 403.933643][T19711] ___sys_sendmsg+0x2a5/0x360 [ 403.933672][T19711] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.933728][T19711] ? __fget_files+0x2a/0x420 [ 403.933744][T19711] ? __fget_files+0x3a0/0x420 [ 403.933770][T19711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.933796][T19711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.933829][T19711] ? __pfx_ksys_write+0x10/0x10 [ 403.933860][T19711] do_syscall_64+0x14d/0xf80 [ 403.933882][T19711] ? trace_irq_disable+0x3b/0x150 [ 403.933897][T19711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.933916][T19711] ? clear_bhb_loop+0x40/0x90 [ 403.933937][T19711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.933954][T19711] RIP: 0033:0x7fccecb9c819 [ 403.933972][T19711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.933987][T19711] RSP: 002b:00007fccedaf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.934006][T19711] RAX: ffffffffffffffda RBX: 00007fccece15fa0 RCX: 00007fccecb9c819 [ 403.934019][T19711] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000008 [ 403.934030][T19711] RBP: 00007fccedaf1090 R08: 0000000000000000 R09: 0000000000000000 [ 403.934041][T19711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.934052][T19711] R13: 00007fccece16038 R14: 00007fccece15fa0 R15: 00007fffa2f56588 [ 403.934081][T19711] [ 404.387048][T19721] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 404.463547][ T13] vlan2: left promiscuous mode [ 404.468535][ T13] bridge_slave_0: left promiscuous mode [ 404.480162][ T13] bridge0: port 1(vlan2) entered disabled state [ 404.514291][ T13] lo: left allmulticast mode [ 404.791048][ T13] erspan0 (unregistering): left promiscuous mode [ 404.841982][ T13] ve (unregistering): left promiscuous mode [ 404.890614][ T13] bond3 (unregistering): (slave gretap1): Releasing active interface [ 405.030832][T19751] rdma_rxe: rxe_newlink: failed to add wg1 [ 405.157507][ T13] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 405.170482][ T13] bridge3 (unregistering): left promiscuous mode [ 405.187308][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3514'. [ 405.202773][ T13] bond1 (unregistering): Released all slaves [ 405.215826][ T13] bond2 (unregistering): Released all slaves [ 405.228427][ T13] bond3 (unregistering): Released all slaves [ 405.247009][ T13] bond4 (unregistering): Released all slaves [ 405.261719][ T13] bond5 (unregistering): Released all slaves [ 405.274612][ T13] bond6 (unregistering): Released all slaves [ 405.294294][ T13] bond7 (unregistering): Released all slaves [ 405.376748][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 405.517160][T19764] FAULT_INJECTION: forcing a failure. [ 405.517160][T19764] name failslab, interval 1, probability 0, space 0, times 0 [ 405.573621][T19764] CPU: 0 UID: 0 PID: 19764 Comm: syz.3.3516 Not tainted syzkaller #0 PREEMPT(full) [ 405.573645][T19764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.573656][T19764] Call Trace: [ 405.573662][T19764] [ 405.573670][T19764] dump_stack_lvl+0xe8/0x150 [ 405.573699][T19764] should_fail_ex+0x412/0x560 [ 405.573729][T19764] should_failslab+0xa8/0x100 [ 405.573749][T19764] ? radix_tree_node_alloc+0x7e/0x3a0 [ 405.573770][T19764] kmem_cache_alloc_noprof+0x87/0x650 [ 405.573788][T19764] ? radix_tree_node_alloc+0x7e/0x3a0 [ 405.573806][T19764] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 405.573828][T19764] radix_tree_node_alloc+0x7e/0x3a0 [ 405.573854][T19764] idr_get_free+0x2b3/0xa70 [ 405.573884][T19764] idr_alloc_u32+0x18d/0x320 [ 405.573911][T19764] ? __pfx_idr_alloc_u32+0x10/0x10 [ 405.573934][T19764] ? tcf_exts_init_ex+0x414/0x7c0 [ 405.573951][T19764] ? __kmalloc_cache_noprof+0x31c/0x660 [ 405.573977][T19764] cls_bpf_change+0x413/0xd90 [ 405.573991][T19764] ? __pfx___mutex_lock+0x10/0x10 [ 405.574015][T19764] ? __pfx_cls_bpf_change+0x10/0x10 [ 405.574045][T19764] tc_new_tfilter+0xff8/0x1780 [ 405.574081][T19764] ? __pfx_tc_new_tfilter+0x10/0x10 [ 405.574095][T19764] ? is_bpf_text_address+0x26/0x2b0 [ 405.574133][T19764] ? __pfx_tc_new_tfilter+0x10/0x10 [ 405.574148][T19764] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 405.574166][T19764] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 405.574180][T19764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.574197][T19764] ? __lock_acquire+0x6b5/0x2cf0 [ 405.574221][T19764] netlink_rcv_skb+0x232/0x4b0 [ 405.574237][T19764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.574252][T19764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.574275][T19764] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.574294][T19764] netlink_unicast+0x80f/0x9b0 [ 405.574313][T19764] ? __pfx_netlink_unicast+0x10/0x10 [ 405.574327][T19764] ? netlink_sendmsg+0x650/0xb40 [ 405.574386][T19764] ? skb_put+0x11b/0x210 [ 405.574405][T19764] netlink_sendmsg+0x813/0xb40 [ 405.574426][T19764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.574444][T19764] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.574465][T19764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.574484][T19764] ____sys_sendmsg+0x972/0x9f0 [ 405.574510][T19764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.574535][T19764] ? import_iovec+0x73/0xa0 [ 405.574556][T19764] ___sys_sendmsg+0x2a5/0x360 [ 405.574577][T19764] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.574621][T19764] ? __fget_files+0x2a/0x420 [ 405.574634][T19764] ? __fget_files+0x3a0/0x420 [ 405.574653][T19764] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.574672][T19764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.574699][T19764] ? __pfx_ksys_write+0x10/0x10 [ 405.574724][T19764] do_syscall_64+0x14d/0xf80 [ 405.574742][T19764] ? trace_irq_disable+0x3b/0x150 [ 405.574755][T19764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.574771][T19764] ? clear_bhb_loop+0x40/0x90 [ 405.574788][T19764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.574803][T19764] RIP: 0033:0x7fbd1939c819 [ 405.574819][T19764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.574832][T19764] RSP: 002b:00007fbd1a16e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.574848][T19764] RAX: ffffffffffffffda RBX: 00007fbd19615fa0 RCX: 00007fbd1939c819 [ 405.574859][T19764] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000008 [ 405.574869][T19764] RBP: 00007fbd1a16e090 R08: 0000000000000000 R09: 0000000000000000 [ 405.574879][T19764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.574888][T19764] R13: 00007fbd19616038 R14: 00007fbd19615fa0 R15: 00007fff60819ff8 [ 405.574912][T19764] [ 405.996887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.004961][ C1] lec:lec_tx_timeout: lec0 [ 406.010185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.022527][ T13] IPVS: stopping backup sync thread 6125 ... [ 406.135814][T19781] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 406.141561][T19781] dvmrp1: linktype set to 804 [ 406.245149][T19784] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 406.253102][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.309668][T19788] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 406.360513][T19786] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 406.449969][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.474880][T19791] netlink: 'syz.4.3525': attribute type 10 has an invalid length. [ 406.518393][T19795] netlink: 'syz.0.3526': attribute type 2 has an invalid length. [ 406.521050][T19791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.619430][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.671436][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3529'. [ 406.683875][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'. [ 406.707921][T19799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3528'. [ 406.719494][ T13] hsr_slave_0: left promiscuous mode [ 407.003456][ T13] hsr_slave_1: left promiscuous mode [ 407.034333][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 407.503659][T19798] bridge0: port 2(vlan2) entered blocking state [ 407.522147][T19798] bridge0: port 2(vlan2) entered disabled state [ 407.528619][T19798] vlan2: entered allmulticast mode [ 407.535904][T19798] geneve0: entered allmulticast mode [ 407.545699][T19798] vlan2: entered promiscuous mode [ 407.553055][T19798] geneve0: entered promiscuous mode [ 407.562528][ T6070] lo speed is unknown, defaulting to 1000 [ 407.568307][ T6070] infiniband syz2: ib_query_port failed (-19) [ 407.607186][T19827] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.636731][T19831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.781559][T19824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.793465][T19824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.854285][T19824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.865604][T19824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.921320][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.019079][T19824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.048403][T19824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.094226][T19872] syz.4.3540 uses old SIOCAX25GETINFO [ 408.140188][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.239761][T19884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3545'. [ 408.274722][T19824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.296263][T19824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.322011][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 408.379393][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.505970][ T79] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.521546][ T79] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.539434][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.576607][ T79] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.591946][ T79] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.623266][ T13] IPVS: stop unused estimator thread 0... [ 408.645378][ T79] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.654518][ T79] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.687310][ T79] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.697386][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.719392][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 408.946876][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 409.033118][T19922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3556'. [ 409.679897][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 409.697565][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 409.786402][T19976] netlink: 'syz.4.3568': attribute type 13 has an invalid length. [ 410.387618][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3576'. [ 410.433878][T20016] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3578'. [ 410.462911][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 410.469419][ T5842] Bluetooth: hci4: link tx timeout [ 410.478267][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 410.534235][T20012] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 410.739329][T20028] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3580'. [ 410.763592][ T51] Bluetooth: hci4: link tx timeout [ 410.768897][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 410.791490][ T51] Bluetooth: hci4: link tx timeout [ 410.796643][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 410.799472][T20032] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 410.822962][T20033] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 410.958984][T20033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.050586][ T51] Bluetooth: hci4: link tx timeout [ 411.055867][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.179382][T20059] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 411.231301][ T51] Bluetooth: hci4: link tx timeout [ 411.236508][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.409491][ T79] net_ratelimit: 16 callbacks suppressed [ 411.409509][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.550234][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.565123][T20081] syzkaller0: entered promiscuous mode [ 411.600710][T20081] syzkaller0: entered allmulticast mode [ 411.759373][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.809246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 411.817309][ C1] lec:lec_tx_timeout: lec0 [ 411.822790][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.869695][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 411.989601][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 412.099433][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 412.414979][T20129] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 412.539633][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 412.725279][T20129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.779904][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 412.945499][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 412.992631][T20142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.089390][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 413.202009][T20145] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 413.223848][T20149] wg1 speed is unknown, defaulting to 1000 [ 413.239368][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 413.341225][T20158] netlink: 'syz.0.3609': attribute type 10 has an invalid length. [ 413.636517][T20173] wg1 speed is unknown, defaulting to 1000 [ 413.681803][T20176] __nla_validate_parse: 10 callbacks suppressed [ 413.681823][T20176] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3613'. [ 413.787218][T20186] bond0: option miimon: invalid value (18446744071562067968) [ 413.801854][T20186] bond0: option miimon: allowed values 0 - 2147483647 [ 413.876019][T20189] bond1: option fail_over_mac: invalid value (127) [ 413.884482][T20189] bond1 (unregistering): Released all slaves [ 413.943662][ T797] IPVS: starting estimator thread 0... [ 414.040389][T20194] IPVS: using max 35 ests per chain, 84000 per kthread [ 414.163108][T20186] wg1 speed is unknown, defaulting to 1000 [ 414.407451][T20213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3624'. [ 414.610679][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'. [ 414.851735][T20236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3633'. [ 415.247846][T20252] wg1 speed is unknown, defaulting to 1000 [ 415.350266][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 415.428463][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'. [ 415.490819][T20261] bond5: entered promiscuous mode [ 415.497078][T20261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.533634][T20261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.549861][T20261] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 415.561344][T20261] bond5: (slave vcan1): Error -95 calling set_mac_address [ 415.582834][T20266] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3638'. [ 415.610675][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'. [ 415.887636][T20286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3646'. [ 416.106436][T20301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'. [ 416.254872][T20299] wg1 speed is unknown, defaulting to 1000 [ 416.633792][T20321] netem: change failed [ 416.709647][T10138] net_ratelimit: 16 callbacks suppressed [ 416.709668][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.829247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.829548][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.837268][ C1] lec:lec_tx_timeout: lec0 [ 416.838074][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.992267][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.259422][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.389346][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.400751][T20365] netlink: 'syz.0.3666': attribute type 4 has an invalid length. [ 417.502440][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.553885][T20372] wg1 speed is unknown, defaulting to 1000 [ 417.668880][T20382] bond0: entered promiscuous mode [ 417.694924][T20382] bond_slave_0: entered promiscuous mode [ 417.702022][T20382] bond_slave_1: entered promiscuous mode [ 417.719664][T20382] bond0: left promiscuous mode [ 417.724623][T20382] bond_slave_0: left promiscuous mode [ 417.741964][T20382] bond_slave_1: left promiscuous mode [ 417.793818][T20387] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 417.801937][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 417.929356][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 418.059726][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 418.068692][T20406] FAULT_INJECTION: forcing a failure. [ 418.068692][T20406] name failslab, interval 1, probability 0, space 0, times 0 [ 418.081739][T20406] CPU: 1 UID: 0 PID: 20406 Comm: syz.1.3676 Not tainted syzkaller #0 PREEMPT(full) [ 418.081764][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.081775][T20406] Call Trace: [ 418.081782][T20406] [ 418.081790][T20406] dump_stack_lvl+0xe8/0x150 [ 418.081820][T20406] should_fail_ex+0x412/0x560 [ 418.081851][T20406] should_failslab+0xa8/0x100 [ 418.081876][T20406] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 418.081897][T20406] ? __alloc_skb+0x1d0/0x7d0 [ 418.081917][T20406] ? __local_bh_enable_ip+0xd0/0x130 [ 418.081944][T20406] __alloc_skb+0x1d0/0x7d0 [ 418.081964][T20406] ? netlink_ack_tlv_len+0x6c/0x210 [ 418.081986][T20406] netlink_ack+0x146/0xa50 [ 418.082003][T20406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.082029][T20406] ? __lock_acquire+0x6b5/0x2cf0 [ 418.082062][T20406] netlink_rcv_skb+0x2b6/0x4b0 [ 418.082082][T20406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.082107][T20406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.082143][T20406] ? down_read+0x272/0x2e0 [ 418.082166][T20406] ? genl_rcv+0xd/0x40 [ 418.082189][T20406] genl_rcv+0x28/0x40 [ 418.082210][T20406] netlink_unicast+0x80f/0x9b0 [ 418.082236][T20406] ? __pfx_netlink_unicast+0x10/0x10 [ 418.082255][T20406] ? netlink_sendmsg+0x650/0xb40 [ 418.082272][T20406] ? skb_put+0x11b/0x210 [ 418.082297][T20406] netlink_sendmsg+0x813/0xb40 [ 418.082324][T20406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.082347][T20406] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.082375][T20406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.082406][T20406] ____sys_sendmsg+0x972/0x9f0 [ 418.082439][T20406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.082480][T20406] ? import_iovec+0x73/0xa0 [ 418.082502][T20406] ___sys_sendmsg+0x2a5/0x360 [ 418.082528][T20406] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.082580][T20406] ? __fget_files+0x2a/0x420 [ 418.082597][T20406] ? __fget_files+0x3a0/0x420 [ 418.082622][T20406] __x64_sys_sendmsg+0x1bd/0x2a0 [ 418.082647][T20406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.082680][T20406] ? __pfx_ksys_write+0x10/0x10 [ 418.082715][T20406] do_syscall_64+0x14d/0xf80 [ 418.082736][T20406] ? trace_irq_disable+0x3b/0x150 [ 418.082752][T20406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.082770][T20406] ? clear_bhb_loop+0x40/0x90 [ 418.082791][T20406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.082809][T20406] RIP: 0033:0x7f09f039c819 [ 418.082825][T20406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.082839][T20406] RSP: 002b:00007f09f11c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.082857][T20406] RAX: ffffffffffffffda RBX: 00007f09f0615fa0 RCX: 00007f09f039c819 [ 418.082870][T20406] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 418.082881][T20406] RBP: 00007f09f11c8090 R08: 0000000000000000 R09: 0000000000000000 [ 418.082892][T20406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.082902][T20406] R13: 00007f09f0616038 R14: 00007f09f0615fa0 R15: 00007ffcdaba4848 [ 418.082931][T20406] [ 418.117147][T20396] macsec1: entered promiscuous mode [ 418.450427][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 418.927600][T20425] syzkaller0: entered promiscuous mode [ 418.938753][T20425] syzkaller0: entered allmulticast mode [ 418.971376][T20442] __nla_validate_parse: 13 callbacks suppressed [ 418.971395][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 418.992627][T20443] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 420.618705][T20464] bond3: option mode: unable to set because the bond device has slaves [ 420.729495][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'. [ 420.800385][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 420.822999][T20472] team0: Mode changed to "activebackup" [ 421.180030][T20496] vlan2: entered allmulticast mode [ 421.185223][T20496] bond0: entered allmulticast mode [ 421.260597][T20496] bond_slave_0: entered allmulticast mode [ 421.266371][T20496] bond_slave_1: entered allmulticast mode [ 421.502229][T20504] syzkaller0: entered promiscuous mode [ 421.521291][T20504] syzkaller0: entered allmulticast mode [ 421.686193][T20490] sctp: [Deprecated]: syz.1.3696 (pid 20490) Use of int in max_burst socket option deprecated. [ 421.686193][T20490] Use struct sctp_assoc_value instead [ 421.772620][T20502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3696'. [ 421.779369][ T1157] net_ratelimit: 13 callbacks suppressed [ 421.779387][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.859284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.867451][ C1] lec:lec_tx_timeout: lec0 [ 421.872383][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.927157][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.051632][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'. [ 422.060977][T20514] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3706'. [ 422.061777][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.199337][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.274664][T20523] netlink: 'syz.1.3710': attribute type 1 has an invalid length. [ 422.288726][T20523] netlink: 'syz.1.3710': attribute type 2 has an invalid length. [ 422.529475][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.639331][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.717098][T20549] x_tables: unsorted entry at hook 2 [ 422.770108][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.880343][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 422.895904][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 422.999957][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.157042][T20561] bond1: option resend_igmp: invalid value (2878) [ 423.203545][T20561] bond1: option resend_igmp: allowed values 0 - 255 [ 423.235367][T20561] bond1 (unregistering): Released all slaves [ 423.271531][T20573] xt_limit: Overflow, try lower: 268435456/134217728 [ 423.299388][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 423.541121][T20584] tipc: Started in network mode [ 423.546037][T20584] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 423.555290][T20584] tipc: Enabling of bearer rejected, failed to enable media [ 423.713006][T20590] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 423.720355][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3726'. [ 423.983010][T20588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.057895][T20595] ip6gre1: entered promiscuous mode [ 424.069421][T20595] ip6gre1: entered allmulticast mode [ 424.131646][T20595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.239867][T20611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3729'. [ 424.392299][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 424.465864][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3732'. [ 424.970334][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.979798][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.003560][ T6274] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.189768][T20660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3737'. [ 425.227090][T20660] vlan3: entered promiscuous mode [ 425.243049][T20660] gretap0: entered promiscuous mode [ 425.454061][T20674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3739'. [ 425.479495][ T6270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.487610][T20675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.499409][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3739'. [ 425.524015][T20675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.536427][T20682] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 425.553382][T20675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.583659][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 425.583739][T20675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.613055][T20682] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 425.737785][T20675] syzkaller1: entered promiscuous mode [ 425.758721][T20675] syzkaller1: entered allmulticast mode [ 425.781260][T20691] Cannot find del_set index 4 as target [ 425.797477][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'. [ 425.810404][ T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.832008][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3742'. [ 425.931840][T20691] team_slave_0: entered promiscuous mode [ 425.937890][T20691] team_slave_1: entered promiscuous mode [ 425.961155][T20691] team0: Device macsec1 is already an upper device of the team interface [ 426.009905][T20691] team_slave_0: left promiscuous mode [ 426.015555][T20691] team_slave_1: left promiscuous mode [ 426.055934][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 426.343758][T20720] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 426.365724][T20718] syzkaller0: entered promiscuous mode [ 426.378724][T20718] syzkaller0: entered allmulticast mode [ 426.403041][T20719] 8021q: VLANs not supported on vxcan1 [ 426.409095][T20718] 8021q: VLANs not supported on vxcan1 [ 426.417701][T20724] syzkaller0: entered promiscuous mode [ 426.425244][T20724] syzkaller0: entered allmulticast mode [ 426.693918][T20730] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 426.806588][ T1157] net_ratelimit: 22 callbacks suppressed [ 426.806607][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.879249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 426.887280][ C1] lec:lec_tx_timeout: lec0 [ 426.891884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.938059][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.050580][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 427.174608][T20747] syzkaller0: entered promiscuous mode [ 427.182780][T20747] syzkaller0: entered allmulticast mode [ 427.190965][ T1157] syzkaller0: tun_net_xmit 48 [ 427.902024][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 428.377841][T20775] netlink: 'syz.1.3765': attribute type 2 has an invalid length. [ 428.851353][T10138] wlan1: Trigger new scan to find an IBSS to join [ 429.139960][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.155606][T20755] bridge0: port 3(vlan3) entered blocking state [ 429.162920][T20755] bridge0: port 3(vlan3) entered disabled state [ 429.170448][T20755] vlan3: entered allmulticast mode [ 429.175789][T20755] dummy0: entered allmulticast mode [ 429.185407][T20755] vlan3: entered promiscuous mode [ 429.193555][T20755] dummy0: entered promiscuous mode [ 429.273330][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.357072][T20790] __nla_validate_parse: 10 callbacks suppressed [ 429.357091][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'. [ 429.367528][T20793] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3771'. [ 429.401010][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.529348][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.662019][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.779974][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 429.790623][T20809] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3777'. [ 429.904408][T20815] vlan0: entered allmulticast mode [ 429.911089][T20815] bond0: entered allmulticast mode [ 429.916241][T20815] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 429.928609][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 429.967863][T20817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.985342][T20821] bond3: option ad_select: unable to set because the bond device is up [ 430.004267][T20817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3780'. [ 430.019874][T20818] wg1 speed is unknown, defaulting to 1000 [ 430.070550][T20826] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:21 [ 430.089845][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.098342][T20823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3781'. [ 430.336232][T20844] x_tables: duplicate underflow at hook 1 [ 430.863976][T20868] netlink: 'syz.0.3796': attribute type 61 has an invalid length. [ 430.983327][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3798'. [ 431.025748][T20882] netlink: 261 bytes leftover after parsing attributes in process `syz.1.3798'. [ 431.089901][ T6270] IPVS: starting estimator thread 0... [ 431.199885][T20889] IPVS: using max 28 ests per chain, 67200 per kthread [ 431.747129][T20936] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3811'. [ 431.810139][ T36] wlan1: Trigger new scan to find an IBSS to join [ 431.827291][ T36] net_ratelimit: 12 callbacks suppressed [ 431.827307][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.899232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.907322][ C1] lec:lec_tx_timeout: lec0 [ 431.912464][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.942394][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3815'. [ 431.998271][T20953] netlink: 'syz.2.3816': attribute type 8 has an invalid length. [ 432.007002][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.023417][T20953] bond0: entered promiscuous mode [ 432.028592][T20953] bond_slave_0: entered promiscuous mode [ 432.035302][T20953] bond_slave_1: entered promiscuous mode [ 432.045412][T20953] gretap0: entered promiscuous mode [ 432.057640][T20953] bond0: left promiscuous mode [ 432.065416][T20953] bond_slave_0: left promiscuous mode [ 432.080058][T20953] bond_slave_1: left promiscuous mode [ 432.100244][T20953] gretap0: left promiscuous mode [ 432.113707][T20957] ip6tnl0: Caught tx_queue_len zero misconfig [ 432.125458][T20961] macsec2: entered promiscuous mode [ 432.159862][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.257057][T20967] x_tables: duplicate underflow at hook 2 [ 432.291253][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.412520][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.541084][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.560510][T20987] : entered promiscuous mode [ 432.652298][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 432.722420][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.742177][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.792110][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.830602][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.384746][T21032] No such timeout policy "syz0" [ 434.581829][T21022] wg1 speed is unknown, defaulting to 1000 [ 434.645411][T21039] __nla_validate_parse: 7 callbacks suppressed [ 434.645435][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 434.699501][T21039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3843'. [ 434.718133][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.770110][ T1157] wlan1: Trigger new scan to find an IBSS to join [ 434.929899][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.987967][T21055] C: renamed from team_slave_0 [ 434.992565][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 435.014242][T21055] netlink: 'syz.1.3844': attribute type 8 has an invalid length. [ 435.030398][T21055] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 435.047111][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3848'. [ 435.524702][T21101] IPVS: set_ctl: invalid protocol: 60 172.20.20.62:20000 [ 435.652145][ T13] wlan1: Creating new IBSS network, BSSID 56:9f:d9:05:54:c0 [ 435.695821][T21113] syzkaller0: entered promiscuous mode [ 435.718840][T21113] syzkaller0: entered allmulticast mode [ 436.011443][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3869'. [ 436.482359][T21155] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3879'. [ 436.754328][T21167] vlan3: entered promiscuous mode [ 436.770365][T21167] virt_wifi0: entered promiscuous mode [ 436.839642][ T1157] net_ratelimit: 13 callbacks suppressed [ 436.839662][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.929242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 436.937314][ C1] lec:lec_tx_timeout: lec0 [ 436.942887][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.969798][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.989690][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 437.008929][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 437.043763][T21179] SET target dimension over the limit! [ 437.080151][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.130675][T21191] syzkaller1: entered promiscuous mode [ 437.136444][T21191] syzkaller1: entered allmulticast mode [ 437.189961][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.299965][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.320454][T21202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3890'. [ 437.409417][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 437.409437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.410370][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.542266][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.587407][T21224] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.594933][T21224] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.648801][T21224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.663602][T21224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.744259][T21224] vlan2: left allmulticast mode [ 437.749131][T21224] bond0: left allmulticast mode [ 437.754269][T21224] bond_slave_0: left allmulticast mode [ 437.759958][T21224] bond_slave_1: left allmulticast mode [ 437.769083][T21224] vlan3: left promiscuous mode [ 437.776022][T21224] virt_wifi0: left promiscuous mode [ 437.783566][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.793225][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.802567][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.815431][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.825038][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.834089][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.845218][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.854735][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.864535][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 437.979460][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.089790][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.751749][T21169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.896361][T21232] netlink: 'syz.1.3899': attribute type 1 has an invalid length. [ 439.940260][T21239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3903'. [ 440.062645][T21244] ip6gre1: entered promiscuous mode [ 440.078980][T21244] ip6gre1: entered allmulticast mode [ 440.092675][T21249] No such timeout policy "syz1" [ 440.184375][T21252] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3908'. [ 440.261510][T21257] netlink: 'syz.4.3910': attribute type 1 has an invalid length. [ 440.385789][T21263] bond1: (slave bridge3): making interface the new active one [ 440.416911][T21263] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 440.480285][T21270] netlink: 'syz.1.3915': attribute type 8 has an invalid length. [ 440.490322][T21268] netlink: 'syz.2.3914': attribute type 8 has an invalid length. [ 440.498076][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 440.525379][T21257] bond1: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 440.566542][T21271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3913'. [ 440.605591][T21268] bond0: entered promiscuous mode [ 440.612210][T21268] bond_slave_0: entered promiscuous mode [ 440.618309][T21268] bond_slave_1: entered promiscuous mode [ 440.633799][T21268] gretap0: entered promiscuous mode [ 440.682180][T21268] hsr1: entered promiscuous mode [ 440.704603][T21274] atomic_op ffff88806ef8f998 conn xmit_atomic 0000000000000000 [ 441.004078][T21296] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3924'. [ 441.168318][T21301] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3926'. [ 441.188523][T21304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3925'. [ 441.395316][T21321] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 441.456089][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.477623][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.499870][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.524284][T21324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3931'. [ 441.582855][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.634620][T21329] geneve2: entered promiscuous mode [ 441.662168][T10138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.671948][T10138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.690292][T10138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.711871][T10138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.797271][T21342] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 441.959299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 441.964547][ T36] net_ratelimit: 31 callbacks suppressed [ 441.964600][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.967381][ C1] lec:lec_tx_timeout: lec0 [ 441.985714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.079865][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.211405][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.321766][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.323218][T21375] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 442.417041][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'. [ 442.438349][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.569571][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.601133][T21395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3952'. [ 442.692502][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.819817][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.931780][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 442.953917][T21414] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 442.964915][T21413] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 443.008883][T21414] team0: Port device dummy0 added [ 443.016336][T21414] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 443.055289][T21414] team0: Port device dummy0 removed [ 443.087452][T21414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 443.127738][T21421] C: renamed from team_slave_0 [ 443.139868][T21421] netlink: 'syz.2.3959': attribute type 4 has an invalid length. [ 443.157551][T21421] netlink: 'syz.2.3959': attribute type 1 has an invalid length. [ 443.177696][T21421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 443.497194][T21443] team0: Port device team_slave_0 removed [ 443.617192][T21452] veth3: entered promiscuous mode [ 443.636800][T21455] batman_adv: batadv0: Adding interface: macsec0 [ 443.646712][T21455] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.675577][T21455] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 443.800106][T21468] xt_l2tp: v2 doesn't support IP mode [ 443.873836][T21475] wg1 speed is unknown, defaulting to 1000 [ 444.007446][T21486] pim6reg1: entered promiscuous mode [ 444.030497][T21486] pim6reg1: entered allmulticast mode [ 444.638827][T21536] veth0_virt_wifi: entered allmulticast mode [ 444.841957][T21541] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 444.897531][T21541] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 445.182003][T21567] validate_nla: 1 callbacks suppressed [ 445.182022][T21567] netlink: 'syz.3.4004': attribute type 2 has an invalid length. [ 445.202788][T21567] __nla_validate_parse: 8 callbacks suppressed [ 445.202806][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'. [ 445.238132][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'. [ 445.413635][T21581] xt_hashlimit: size too large, truncated to 1048576 [ 445.432955][T21580] xt_hashlimit: size too large, truncated to 1048576 [ 445.833078][T21604] wg1 speed is unknown, defaulting to 1000 [ 446.066306][T21633] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4017'. [ 446.193787][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'. [ 446.488970][T21657] netlink: 'syz.4.4026': attribute type 10 has an invalid length. [ 446.501825][T21657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4026'. [ 446.524079][T21657] team0: Port device geneve0 added [ 446.533386][T10132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.544941][T10132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.561977][T10132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.575376][T10132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.599061][T21659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'. [ 446.620019][T21659] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 446.800560][T21670] delete_channel: no stack [ 446.846279][T21664] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4030'. [ 446.859398][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 446.903771][T21671] wg1 speed is unknown, defaulting to 1000 [ 446.911678][T21676] netlink: 'syz.2.4034': attribute type 2 has an invalid length. [ 446.939957][T21665] wg1 speed is unknown, defaulting to 1000 [ 447.080966][T10132] net_ratelimit: 28 callbacks suppressed [ 447.080984][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.240719][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.403817][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 447.413510][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.448935][T21710] bridge4: entered promiscuous mode [ 447.460822][T21710] bridge4: entered allmulticast mode [ 447.472341][T21710] team0: Port device bridge4 added [ 447.539563][ T6270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.578261][T21710] bridge0: port 1(team0) entered blocking state [ 447.585665][T21710] bridge0: port 1(team0) entered disabled state [ 447.592925][T21710] team0: entered allmulticast mode [ 447.598158][T21710] geneve0: entered allmulticast mode [ 447.611383][T21710] team0: entered promiscuous mode [ 447.617369][T21710] bridge0: port 1(team0) entered blocking state [ 447.623784][T21710] bridge0: port 1(team0) entered forwarding state [ 447.633965][T21699] wg1 speed is unknown, defaulting to 1000 [ 447.651364][T21704] netlink: 'syz.3.4043': attribute type 1 has an invalid length. [ 447.681459][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.700338][ T6270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.736885][T21705] wg1 speed is unknown, defaulting to 1000 [ 447.809239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 447.817384][ C1] lec:lec_tx_timeout: lec0 [ 447.822300][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.903450][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.110087][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.164516][T21744] tipc: Enabling of bearer rejected, failed to enable media [ 448.358110][T21751] macvlan2: entered promiscuous mode [ 448.373352][T21751] vlan1: entered promiscuous mode [ 448.388624][T21751] team0: Port device macvlan2 added [ 448.399581][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.510599][T21756] syzkaller0: entered promiscuous mode [ 448.516210][T21756] syzkaller0: entered allmulticast mode [ 448.525226][T21760] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 448.537440][T21756] tipc: Enabled bearer , priority 0 [ 448.562029][T21763] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4058'. [ 448.562940][T21760] team0: Port device dummy0 added [ 448.596760][T21761] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 448.631171][T21761] team0: Port device dummy0 removed [ 448.650735][T21761] dummy0: entered promiscuous mode [ 448.673436][T21755] tipc: Resetting bearer [ 448.733010][T21755] tipc: Disabling bearer [ 448.811491][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.838763][T21779] tipc: Started in network mode [ 448.844194][T21779] tipc: Node identity 5ebf1918a244, cluster identity 7 [ 448.859958][T21779] tipc: Enabled bearer , priority 0 [ 448.880447][T21779] syzkaller0: entered promiscuous mode [ 448.889521][T21779] syzkaller0: entered allmulticast mode [ 448.910633][T21781] hsr_slave_0: left promiscuous mode [ 448.917779][T21781] hsr_slave_1: left promiscuous mode [ 448.962746][T21779] tipc: Resetting bearer [ 449.003959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.012452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.074470][T21778] tipc: Resetting bearer [ 449.118756][T21778] tipc: Disabling bearer [ 449.716692][T21835] syzkaller0: entered promiscuous mode [ 449.730929][T21835] syzkaller0: entered allmulticast mode [ 450.001057][T21851] erspan0: entered promiscuous mode [ 450.035234][T21851] erspan0: left promiscuous mode [ 450.355948][T21883] No such timeout policy "syz1" [ 450.462845][T21882] wg1 speed is unknown, defaulting to 1000 [ 450.467564][T21871] __nla_validate_parse: 5 callbacks suppressed [ 450.467584][T21871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4086'. [ 450.567049][T21888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 450.678992][T21894] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 450.902922][T21904] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.914057][T21904] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 451.000806][T21894] macvlan3: entered promiscuous mode [ 451.009613][T21894] macvlan3: entered allmulticast mode [ 451.016710][T21909] ipt_ECN: cannot use operation on non-tcp rule [ 451.033140][T21894] bond5: entered promiscuous mode [ 451.050259][T21894] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 451.082138][T21894] bond5: left promiscuous mode [ 451.174572][T21920] xt_hashlimit: overflow, rate too high: 0 [ 451.181154][T21913] wg1 speed is unknown, defaulting to 1000 [ 451.313861][T21930] netlink: 'syz.0.4099': attribute type 33 has an invalid length. [ 451.323156][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 451.342471][T21930] lo: entered allmulticast mode [ 451.560877][T21941] ip6t_srh: unknown srh invflags BA61 [ 451.583479][T21941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4103'. [ 451.613839][T21942] vlan1: entered promiscuous mode [ 451.619261][T21942] bridge0: entered promiscuous mode [ 451.725987][T21946] wg1 speed is unknown, defaulting to 1000 [ 451.781609][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4104'. [ 451.820687][T21953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4104'. [ 451.838111][T21953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4104'. [ 451.917699][T21955] syzkaller0: entered promiscuous mode [ 451.929345][T21955] syzkaller0: entered allmulticast mode [ 452.066026][T21964] delete_channel: no stack [ 452.121395][ T49] net_ratelimit: 21 callbacks suppressed [ 452.121417][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.253963][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.265977][T21977] wg1 speed is unknown, defaulting to 1000 [ 452.284246][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4109'. [ 452.297593][T21983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4109'. [ 452.314550][T21979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4111'. [ 452.389829][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.504121][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.596441][T21991] Bluetooth: MGMT ver 1.23 [ 452.640017][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.735361][T21994] wg1 speed is unknown, defaulting to 1000 [ 452.829225][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.837294][ C1] lec:lec_tx_timeout: lec0 [ 452.842303][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.909813][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.040508][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.149896][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.359800][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.390563][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'. [ 453.445340][T22042] netlink: 'syz.2.4124': attribute type 27 has an invalid length. [ 453.471103][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.500120][T22042] hsr1: left promiscuous mode [ 453.575646][T22042] geneve2: left promiscuous mode [ 453.594482][T22042] veth3: left promiscuous mode [ 453.610379][T22042] vlan1: left promiscuous mode [ 453.618511][T22042] macvlan2: left promiscuous mode [ 453.716879][T22046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.736856][T22055] IPVS: Scheduler module ip_vs_sip not found [ 453.754757][T22046] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.766016][T22046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.799812][T10132] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.829530][T10132] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.942469][T10132] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.960623][T10132] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.042813][T22075] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 454.051209][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.222270][ T30] audit: type=1107 audit(1775540997.874:16): pid=22079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 454.256854][T22082] veth0: entered promiscuous mode [ 454.263024][T22082] veth0: entered allmulticast mode [ 454.465167][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.931006][T22125] x_tables: duplicate underflow at hook 2 [ 455.102209][T22132] wg1 speed is unknown, defaulting to 1000 [ 455.367709][T22149] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 455.585570][T22152] wg1 speed is unknown, defaulting to 1000 [ 456.339127][T22191] pim6reg1: entered allmulticast mode [ 456.481080][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b6efc00: rx timeout, send abort [ 456.516476][T22194] __nla_validate_parse: 8 callbacks suppressed [ 456.516490][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 456.678401][T22198] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 456.732374][T22200] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.764108][T22200] bond3: (slave lo): Enslaving as an active interface with an up link [ 456.787372][T22204] batadv_slave_1: entered promiscuous mode [ 456.810514][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 456.876437][T22205] batadv_slave_1 (unregistering): left promiscuous mode [ 456.890307][T22211] netlink: 'syz.4.4174': attribute type 2 has an invalid length. [ 456.902159][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4174'. [ 456.907856][T22211] !9: entered promiscuous mode [ 456.990653][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b6efc00: abort rx timeout. Force session deactivation [ 457.151528][ T13] net_ratelimit: 24 callbacks suppressed [ 457.151547][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.309802][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.344776][T22245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.419657][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.540280][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.572468][T22253] netlink: 'syz.2.4186': attribute type 1 has an invalid length. [ 457.651047][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.772573][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.795773][T22267] syzkaller1: entered promiscuous mode [ 457.804583][T22267] syzkaller1: entered allmulticast mode [ 457.823876][T22282] netlink: 'syz.3.4193': attribute type 32 has an invalid length. [ 457.849223][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.857388][ C1] lec:lec_tx_timeout: lec0 [ 457.934830][T22288] tipc: Enabled bearer , priority 0 [ 457.964641][T22288] syzkaller0: entered promiscuous mode [ 457.977097][T22288] syzkaller0: entered allmulticast mode [ 458.000516][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.016988][T22283] tipc: Resetting bearer [ 458.067892][T22283] tipc: Disabling bearer [ 458.110649][ T1157] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.189754][T22300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4199'. [ 458.240586][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.268250][T22309] netlink: 'syz.3.4202': attribute type 11 has an invalid length. [ 458.300123][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4202'. [ 458.319130][T22309] "syz.3.4202" (22309) uses obsolete ecb(arc4) skcipher [ 458.456064][T22321] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4205'. [ 458.489002][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4209'. [ 458.497583][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4205'. [ 458.555090][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4208'. [ 458.862707][T22362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4217'. [ 458.873814][T22362] syzkaller0: entered promiscuous mode [ 458.880758][T22362] syzkaller0: entered allmulticast mode [ 459.403401][T22384] wg1 speed is unknown, defaulting to 1000 [ 459.870002][T22418] netlink: 'syz.2.4228': attribute type 1 has an invalid length. [ 459.923502][T22421] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 460.115504][T22421] dvmrp0: entered allmulticast mode [ 460.160382][T22419] wg1 speed is unknown, defaulting to 1000 [ 460.893859][T22456] wg1 speed is unknown, defaulting to 1000 [ 461.172502][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b6de400: rx timeout, send abort [ 461.343238][T22483] wg1 speed is unknown, defaulting to 1000 [ 461.560144][T22493] __nla_validate_parse: 4 callbacks suppressed [ 461.560163][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4244'. [ 461.665745][T22501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4247'. [ 461.680794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b6de400: abort rx timeout. Force session deactivation [ 461.713492][T22501] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 461.722574][T22501] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 461.738924][T22501] bond0 (unregistering): Released all slaves [ 461.753632][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 462.023994][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 462.026644][T22516] pim6reg: entered allmulticast mode [ 462.088445][T22530] netlink: 'syz.2.4255': attribute type 10 has an invalid length. [ 462.140600][T22534] netlink: 'syz.2.4255': attribute type 10 has an invalid length. [ 462.154231][T22530] team0: Port device dummy0 added [ 462.194858][T22530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4255'. [ 462.204404][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 462.222165][T22534] team0: Port device dummy0 removed [ 462.260832][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 462.310214][ T49] net_ratelimit: 29 callbacks suppressed [ 462.310231][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 462.441059][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 462.534520][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 462.559318][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 462.675145][T22560] wg1 speed is unknown, defaulting to 1000 [ 462.780205][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 462.806727][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 462.816307][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 462.874279][T22569] netlink: 'syz.1.4265': attribute type 5 has an invalid length. [ 462.892720][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 462.971235][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.078917][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.118369][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.128894][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.139992][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.148058][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.158209][T22583] netlink: 'syz.1.4267': attribute type 9 has an invalid length. [ 463.229977][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.364425][T22597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.372774][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.464468][T22608] syzkaller0: entered promiscuous mode [ 463.472687][T22608] syzkaller0: entered allmulticast mode [ 463.519369][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.588865][T22613] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 463.653797][T22613] tipc: Enabling of bearer rejected, failed to enable media [ 463.684168][T22615] wg1 speed is unknown, defaulting to 1000 [ 463.820721][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.890501][ T8098] udevd[8098]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 464.051107][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.076248][T22634] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 464.100913][T22634] syzkaller1: linktype set to 1 [ 464.238265][T22651] lo: Caught tx_queue_len zero misconfig [ 465.306307][T22699] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 465.651535][T22722] xt_hashlimit: size too large, truncated to 1048576 [ 465.661150][T22715] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 465.675224][T22715] bond5 (unregistering): Released all slaves [ 465.777614][T22725] SET target dimension over the limit! [ 466.504586][T22767] bond5: entered promiscuous mode [ 466.509852][T22767] bond5: entered allmulticast mode [ 466.515372][T22767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.531734][T22772] gretap2: entered allmulticast mode [ 466.648879][T22776] syzkaller0: entered promiscuous mode [ 466.893661][T22788] __nla_validate_parse: 29 callbacks suppressed [ 466.893679][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 466.916015][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 466.928005][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 466.940537][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 466.970580][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 466.983895][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4329'. [ 467.009710][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 467.027780][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 467.054531][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 467.076558][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 467.334430][T22802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.380492][T22800] sit0: entered promiscuous mode [ 467.416916][T10132] net_ratelimit: 26 callbacks suppressed [ 467.416935][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.587971][T22818] wg1 speed is unknown, defaulting to 1000 [ 467.599972][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.617770][T22819] bridge_slave_0: left allmulticast mode [ 467.642826][T22819] bridge_slave_0: left promiscuous mode [ 467.658906][T22819] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.699944][T22819] bond0: (slave bond_slave_0): Releasing backup interface [ 467.733741][T22819] bond0: (slave bond_slave_1): Releasing backup interface [ 467.744259][T22819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.829718][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.887104][T22830] validate_nla: 2 callbacks suppressed [ 467.887124][T22830] netlink: 'syz.1.4342': attribute type 61 has an invalid length. [ 468.022644][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.038001][T22830] wg1 speed is unknown, defaulting to 1000 [ 468.260027][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.514210][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.684743][T22855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.750200][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.877518][T22868] bond6 (unregistering): Released all slaves [ 468.939372][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.209388][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.552282][T22917] bond0: entered promiscuous mode [ 469.564435][T22917] bond_slave_0: entered promiscuous mode [ 469.569544][T22922] netlink: 'syz.2.4369': attribute type 1 has an invalid length. [ 469.573191][T22917] bond_slave_1: entered promiscuous mode [ 469.588270][T22917] dummy0: entered promiscuous mode [ 469.597448][T22917] batadv0: entered promiscuous mode [ 469.608993][T22917] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 469.623395][T22917] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 469.642216][T22917] bond0: left promiscuous mode [ 469.686144][T22917] bond_slave_0: left promiscuous mode [ 469.701189][T22936] netlink: 'syz.4.4372': attribute type 1 has an invalid length. [ 469.719422][T22936] netlink: 'syz.4.4372': attribute type 6 has an invalid length. [ 469.727712][T22936] netlink: 'syz.4.4372': attribute type 3 has an invalid length. [ 469.740016][T22917] bond_slave_1: left promiscuous mode [ 469.745794][T22917] dummy0: left promiscuous mode [ 469.754323][T22917] batadv0: left promiscuous mode [ 469.766564][T22919] veth1_to_team: Caught tx_queue_len zero misconfig [ 470.298180][T22962] tipc: Enabled bearer , priority 0 [ 470.306893][T22962] syzkaller0: entered promiscuous mode [ 470.313976][T22962] syzkaller0: entered allmulticast mode [ 470.352690][T22962] tipc: Resetting bearer [ 470.370389][T22959] tipc: Resetting bearer [ 470.410944][T22959] tipc: Disabling bearer [ 470.577027][T22974] wg1 speed is unknown, defaulting to 1000 [ 470.958810][T22978] bond7: entered allmulticast mode [ 470.965651][T22978] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.247831][T22985] bond7: Removing last arp target with arp_interval on [ 471.858691][T23024] syzkaller0: entered promiscuous mode [ 471.865965][T23024] syzkaller0: entered allmulticast mode [ 471.933367][T23029] __nla_validate_parse: 65 callbacks suppressed [ 471.933388][T23029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4404'. [ 471.954931][T23024] netlink: 'syz.1.4402': attribute type 10 has an invalid length. [ 472.135605][ T6271] IPVS: starting estimator thread 0... [ 472.240120][T23045] IPVS: using max 55 ests per chain, 132000 per kthread [ 472.285320][T23048] wg1 speed is unknown, defaulting to 1000 [ 472.423174][T23057] x_tables: duplicate underflow at hook 3 [ 472.434425][T23057] 8021q: VLANs not supported on ip6gre0 [ 472.480028][ T63] net_ratelimit: 20 callbacks suppressed [ 472.480047][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 472.538719][T23059] wg1 speed is unknown, defaulting to 1000 [ 472.838768][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'. [ 472.886307][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 472.933023][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 472.986069][T23079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'. [ 473.002274][T23079] netlink: 'syz.3.4422': attribute type 21 has an invalid length. [ 474.479053][ T51] Bluetooth: hci4: link tx timeout [ 474.485469][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 474.494568][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.511350][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'. [ 474.549317][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'. [ 474.670177][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.702430][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'. [ 474.713235][T23101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4428'. [ 474.727525][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'. [ 474.734379][T23105] netlink: 'syz.1.4429': attribute type 30 has an invalid length. [ 474.766722][T23101] ip6gre2: entered promiscuous mode [ 474.773479][T23101] ip6gre2: entered allmulticast mode [ 474.793086][T23107] netlink: 'syz.1.4429': attribute type 30 has an invalid length. [ 474.801896][T23111] batadv_slave_0: entered promiscuous mode [ 474.809640][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.823328][T23101] netlink: 'syz.4.4428': attribute type 6 has an invalid length. [ 474.841360][T23101] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4428'. [ 474.871017][T23113] batadv_slave_0: left promiscuous mode [ 475.073480][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.111691][T23128] pim6reg: entered allmulticast mode [ 475.170985][T23126] pim6reg: left allmulticast mode [ 475.229362][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.341160][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.469350][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.626419][T23155] bridge0: port 1(team0) entered disabled state [ 475.703990][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.717474][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.727222][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.736941][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.747986][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.758136][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.771293][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.781860][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.822655][T23164] syzkaller0: entered promiscuous mode [ 475.830318][T23164] syzkaller0: entered allmulticast mode [ 475.880882][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 476.000735][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 476.282233][T23189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.304517][T23189] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 476.530284][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 476.964812][T23218] netlink: 'syz.0.4462': attribute type 1 has an invalid length. [ 477.067273][T23218] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 477.161350][T23218] __nla_validate_parse: 2 callbacks suppressed [ 477.161372][T23218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4462'. [ 477.221788][T23221] veth9: entered promiscuous mode [ 477.240972][T23221] bond8: (slave veth9): Enslaving as a backup interface with a down link [ 477.302122][T23218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.408337][T23225] wg1 speed is unknown, defaulting to 1000 [ 477.477043][T23234] wg1 speed is unknown, defaulting to 1000 [ 477.608459][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4461'. [ 477.614912][T23240] syzkaller0: entered promiscuous mode [ 477.634484][T23240] syzkaller0: entered allmulticast mode [ 477.710016][ T13] net_ratelimit: 14 callbacks suppressed [ 477.710034][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 477.909540][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.030611][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.661091][T11031] lec:lec_start_xmit: lec0:No lecd attached [ 480.131702][T23310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4471'. [ 480.871075][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.139350][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.182993][T23327] netlink: 'syz.0.4474': attribute type 1 has an invalid length. [ 481.214202][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'. [ 481.317656][T23337] netlink: 'syz.3.4477': attribute type 3 has an invalid length. [ 481.337567][T23327] bond9: entered promiscuous mode [ 481.351871][T23337] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4477'. [ 481.362747][T23327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 481.382778][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 481.399649][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.423656][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4480'. [ 481.490222][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 481.595100][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 481.604782][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4480'. [ 481.614143][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.614328][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.678385][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.730225][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.752352][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.839666][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.950567][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 482.120332][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 482.383553][T23394] __nla_validate_parse: 1 callbacks suppressed [ 482.383572][T23394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4489'. [ 482.650690][T23407] netlink: 'syz.0.4494': attribute type 2 has an invalid length. [ 482.728469][T23407] hmac(sha224: entered promiscuous mode [ 482.791241][ T745] net_ratelimit: 5 callbacks suppressed [ 482.791259][ T745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 482.903093][T23423] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4495'. [ 482.940085][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.011245][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 483.049341][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.206218][T23439] syzkaller0: entered promiscuous mode [ 483.219033][T23439] syzkaller0: entered allmulticast mode [ 483.229790][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.250472][T23446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4502'. [ 483.812012][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 483.820107][ C1] lec:lec_tx_timeout: lec0 [ 485.141257][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.259593][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.402865][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.434571][T23492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4508'. [ 485.757256][T23496] tun0: tun_chr_ioctl cmd 1074025677 [ 485.788668][T23496] tun0: linktype set to 822 [ 485.801253][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.980273][T23522] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 486.028507][T23522] bond1 (unregistering): Released all slaves [ 486.129979][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 486.297806][T23559] netlink: 'syz.2.4522': attribute type 1 has an invalid length. [ 486.392191][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 486.457536][T23564] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 486.503696][T23564] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 486.625056][T23559] bond1: (slave gretap2): making interface the new active one [ 486.688028][T23559] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 486.801548][T23577] macvlan3: entered promiscuous mode [ 486.827197][T23577] macvlan3: entered allmulticast mode [ 486.854143][T23577] bond1: entered promiscuous mode [ 486.875701][T23577] gretap2: entered promiscuous mode [ 486.905158][T23577] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 486.938015][T23577] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 486.966550][T23577] bond1: left promiscuous mode [ 486.971654][T23577] gretap2: left promiscuous mode [ 487.004524][T23597] tipc: Started in network mode [ 487.019309][T23597] tipc: Node identity ae1b420d38a6, cluster identity 4711 [ 487.035109][T23597] tipc: Enabled bearer , priority 0 [ 487.054079][T23591] syzkaller0: entered promiscuous mode [ 487.060695][T23591] syzkaller0: entered allmulticast mode [ 487.091850][T23579] vti0: entered promiscuous mode [ 487.107219][T23601] netlink: 'syz.0.4531': attribute type 1 has an invalid length. [ 487.131477][T23591] tipc: Resetting bearer [ 487.138122][T23601] netlink: 'syz.0.4531': attribute type 5 has an invalid length. [ 487.167263][T23590] tipc: Resetting bearer [ 487.174431][T23601] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4531'. [ 487.264866][T23590] tipc: Disabling bearer [ 487.535581][T23633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4536'. [ 487.570369][T23629] netlink: 'syz.3.4537': attribute type 2 has an invalid length. [ 487.601314][T23641] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4538'. [ 487.605490][T23629] : entered promiscuous mode [ 487.616439][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4539'. [ 487.653807][T23639] wg1 speed is unknown, defaulting to 1000 [ 487.840342][T10140] net_ratelimit: 5 callbacks suppressed [ 487.840362][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 487.878349][T23658] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4546'. [ 487.957176][T23664] x_tables: ip_tables: ah match: only valid for protocol 51 [ 487.975728][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 487.993191][T23656] wg1 speed is unknown, defaulting to 1000 [ 488.079855][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.240667][T23675] tipc: Enabling of bearer rejected, failed to enable media [ 488.260050][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.278147][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4550'. [ 488.394613][T10129] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.509609][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.528029][T23699] wg1 speed is unknown, defaulting to 1000 [ 488.547248][T23667] lec:lec_atm_close: lec0: Shut down! [ 488.564051][T23702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4554'. [ 488.609450][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.640400][T23704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4555'. [ 488.669463][T23704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4555'. [ 488.685150][T23704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4555'. [ 488.805352][T23707] bridge_slave_1: Caught tx_queue_len zero misconfig [ 488.834768][T23717] bond3: option mode: unable to set because the bond device has slaves [ 488.925115][T23717] bond8: option updelay: invalid value (18446744073709493611) [ 488.942786][T23717] bond8: option updelay: allowed values 0 - 2147483647 [ 488.981763][T23717] bond8 (unregistering): Released all slaves [ 488.996892][T23733] netlink: 'syz.4.4560': attribute type 1 has an invalid length. [ 489.093800][T23738] bond0: Unable to set up delay as MII monitoring is disabled [ 489.118417][T23738] bond0 (unregistering): Released all slaves [ 489.149842][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.204325][T23733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.254494][T23741] bond0: (slave ip6gretap0): making interface the new active one [ 489.264464][T23741] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 489.387528][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.500348][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.611766][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.769931][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.087042][T23794] tipc: Enabling of bearer rejected, failed to enable media [ 491.976134][T23831] bond2: entered allmulticast mode [ 491.982539][T23831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.482610][T23872] chnl_net:caif_netlink_parms(): no params data found [ 492.627267][T23880] bond6: option primary_reselect: invalid value (4) [ 492.638387][T23880] bond6 (unregistering): Released all slaves [ 492.726699][T23873] wg1 speed is unknown, defaulting to 1000 [ 492.826664][T23893] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 492.866685][T23893] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 492.890056][ T1043] net_ratelimit: 10 callbacks suppressed [ 492.890076][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.049709][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.170269][T10132] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.183040][T23924] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 493.276762][T23930] x_tables: unsorted entry at hook 2 [ 493.282720][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.285936][T23908] netlink: 'syz.2.4610': attribute type 58 has an invalid length. [ 493.307180][T23921] wg1 speed is unknown, defaulting to 1000 [ 493.314446][T23908] __nla_validate_parse: 408 callbacks suppressed [ 493.314463][T23908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4610'. [ 493.335142][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4614'. [ 493.368732][T23926] bond6: entered promiscuous mode [ 493.385747][T23926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 493.404072][T23939] xt_socket: unknown flags 0x4 [ 493.416778][T23939] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4618'. [ 493.520188][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.699522][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4623'. [ 493.710078][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.792627][T23965] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4624'. [ 493.809256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 493.817353][ C1] lec:lec_tx_timeout: lec0 [ 493.832703][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4623'. [ 493.856670][T23685] bond8: (slave ip6gretap2): link status up again after 0 ms [ 493.891309][T23685] bond8: (slave ip6gretap2): link status up again after 0 ms [ 493.919552][T23685] bond8: (slave ip6gretap2): link status up again after 0 ms [ 493.927448][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'. [ 493.959728][T23685] bond8: (slave ip6gretap2): link status up again after 0 ms [ 494.028681][T23973] dvmrp1: entered allmulticast mode [ 494.053302][T23970] hsr_slave_0: left promiscuous mode [ 494.071494][T23970] hsr_slave_1: left promiscuous mode [ 494.100194][T23974] dvmrp1: left allmulticast mode [ 494.114496][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 494.128450][T23983] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4630'. [ 494.143431][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 495.107233][T24038] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 495.170227][T24038] bond9 (unregistering): Released all slaves [ 495.466173][T24064] netlink: 'syz.3.4653': attribute type 2 has an invalid length. [ 495.480892][T24066] x_tables: ip_tables: ah match: only valid for protocol 51 [ 495.491745][T24064] pim6reg: left allmulticast mode [ 495.666249][T24074] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 495.684232][T24074] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 496.406504][T24123] bond0 (unregistering): left promiscuous mode [ 496.415276][T24123] bond_slave_0: left promiscuous mode [ 496.426933][T24123] bond_slave_1: left promiscuous mode [ 496.442421][T24123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.456280][T24123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.473400][T24123] bond0 (unregistering): Released all slaves [ 496.496706][T24132] xt_bpf: check failed: parse error [ 496.526249][T24121] team0: Caught tx_queue_len zero misconfig [ 496.643884][T24137] wg1 speed is unknown, defaulting to 1000 [ 497.342855][T24172] syzkaller1: entered promiscuous mode [ 497.348412][T24172] syzkaller1: entered allmulticast mode [ 497.929951][ T1043] net_ratelimit: 47 callbacks suppressed [ 497.929972][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 497.959575][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 498.070420][T23694] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.199353][T23694] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 498.231909][T23694] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.329036][T24227] __nla_validate_parse: 19 callbacks suppressed [ 498.329053][T24227] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4703'. [ 498.335521][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 498.387172][T24231] vlan0: entered promiscuous mode [ 498.432978][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.460450][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 498.560573][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 498.591517][ T49] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 498.753947][T24263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4709'. [ 498.766127][T24259] wg1 speed is unknown, defaulting to 1000 [ 498.780971][T24265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4709'. [ 498.913404][T24270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4713'. [ 499.046829][T24274] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 499.058752][T24277] netlink: 'syz.3.4716': attribute type 2 has an invalid length. [ 499.138184][T24277] hmac(sha224: entered promiscuous mode [ 499.379923][T24301] netlink: 'syz.2.4724': attribute type 1 has an invalid length. [ 499.400422][T24301] netlink: 'syz.2.4724': attribute type 1 has an invalid length. [ 499.423726][T24301] netlink: 'syz.2.4724': attribute type 1 has an invalid length. [ 499.535466][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4726'. [ 499.553946][T24311] x_tables: duplicate entry at hook 2 [ 499.790954][T24321] netlink: 'syz.4.4730': attribute type 21 has an invalid length. [ 500.080598][T24329] wg2: Caught tx_queue_len zero misconfig [ 500.242478][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4734'. [ 500.352387][T24337] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4735'. [ 501.020807][T24381] netlink: 'syz.4.4750': attribute type 2 has an invalid length. [ 501.310846][T24397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4756'. [ 501.350579][T24399] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 501.360522][T24405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4759'. [ 501.416710][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.438054][T24409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4760'. [ 502.278434][T24454] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 502.284756][T24454] syzkaller1: linktype set to 0 [ 502.301748][T24463] 8021q: VLANs not supported on vcan0 [ 502.621902][T24474] netlink: 'syz.3.4781': attribute type 13 has an invalid length. [ 502.634599][T24474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.945455][T24504] xt_hashlimit: size too large, truncated to 1048576 [ 502.973137][T24507] --map-set only usable from mangle table [ 503.000312][ T745] net_ratelimit: 73 callbacks suppressed [ 503.000331][ T745] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 503.030256][T23687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.085768][T24515] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 503.129594][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 503.156271][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.239316][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 503.281394][T10138] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.349282][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 503.395081][T23687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.490921][ T745] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 503.531300][T24527] wg1 speed is unknown, defaulting to 1000 [ 503.542722][T23687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.681712][T24543] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 503.700137][T24543] bond9 (unregistering): Released all slaves [ 503.801761][T24557] netlink: 'syz.0.4802': attribute type 4 has an invalid length. [ 503.811031][T24557] __nla_validate_parse: 7 callbacks suppressed [ 503.811049][T24557] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4802'. [ 503.853955][T24556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.024632][T24563] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 504.131036][T24571] bond7: entered promiscuous mode [ 504.246499][T24573] wg1 speed is unknown, defaulting to 1000 [ 504.308581][T24579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4808'. [ 504.422890][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4806'. [ 504.711180][T24593] xt_CT: No such helper "syz0" [ 505.275013][T24641] lo: left allmulticast mode [ 505.295591][T24640] wg1 speed is unknown, defaulting to 1000 [ 505.381120][T24646] netlink: 'syz.3.4827': attribute type 1 has an invalid length. [ 505.408298][T24641] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4825'. [ 505.466493][T24652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 505.476828][T24646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 505.507271][T24641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.527648][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 505.540214][T24641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.556419][T24641] bond0 (unregistering): Released all slaves [ 505.640331][T24652] bond7: entered promiscuous mode [ 505.646725][T24652] bond7: entered allmulticast mode [ 505.758424][T24669] netlink: 'syz.3.4832': attribute type 1 has an invalid length. [ 505.767427][T24669] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4832'. [ 505.781857][T24669] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4832'. [ 505.792279][T24669] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4832'. [ 506.183367][T24680] syzkaller0: entered promiscuous mode [ 506.188885][T24680] syzkaller0: entered allmulticast mode [ 506.383261][ T51] block nbd2: Receive control failed (result -107) [ 506.394582][ T51] block nbd2: Receive control failed (result -32) [ 506.419739][T24689] nbd2: detected capacity change from 0 to 77309411391 [ 506.437245][T23732] [ 506.439618][T23732] ====================================================== [ 506.446647][T23732] WARNING: possible circular locking dependency detected [ 506.453679][T23732] syzkaller #0 Not tainted [ 506.458096][T23732] ------------------------------------------------------ [ 506.465115][T23732] udevd/23732 is trying to acquire lock: [ 506.470743][T23732] ffff888035ddce70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 506.479769][T23732] [ 506.479769][T23732] but task is already holding lock: [ 506.487114][T23732] ffff888050708180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 506.495649][T23732] [ 506.495649][T23732] which lock already depends on the new lock. [ 506.495649][T23732] [ 506.506125][T23732] [ 506.506125][T23732] the existing dependency chain (in reverse order) is: [ 506.515122][T23732] [ 506.515122][T23732] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 506.522324][T23732] __mutex_lock+0x19f/0x1300 [ 506.527426][T23732] nbd_queue_rq+0xc6/0x1100 [ 506.532437][T23732] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 506.538485][T23732] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 506.545318][T23732] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 506.551806][T23732] blk_mq_run_hw_queue+0x348/0x4f0 [ 506.557425][T23732] blk_mq_dispatch_list+0xd16/0xe10 [ 506.563130][T23732] blk_mq_flush_plug_list+0x48d/0x570 [ 506.569005][T23732] __blk_flush_plug+0x3ed/0x4d0 [ 506.574359][T23732] __submit_bio+0x28d/0x580 [ 506.579367][T23732] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 506.585506][T23732] block_read_full_folio+0x599/0x830 [ 506.591295][T23732] filemap_read_folio+0x137/0x3b0 [ 506.596826][T23732] do_read_cache_folio+0x358/0x590 [ 506.602447][T23732] read_part_sector+0xb6/0x2b0 [ 506.607715][T23732] adfspart_check_ICS+0xa5/0xa40 [ 506.613418][T23732] bdev_disk_changed+0x7ba/0x1550 [ 506.618946][T23732] blkdev_get_whole+0x380/0x510 [ 506.624302][T23732] bdev_open+0x31e/0xd30 [ 506.629049][T23732] blkdev_open+0x470/0x610 [ 506.633969][T23732] do_dentry_open+0x785/0x14e0 [ 506.639265][T23732] vfs_open+0x3b/0x340 [ 506.643865][T23732] path_openat+0x2e08/0x3860 [ 506.649050][T23732] do_file_open+0x23e/0x4a0 [ 506.654055][T23732] do_sys_openat2+0x113/0x200 [ 506.659328][T23732] __x64_sys_openat+0x138/0x170 [ 506.664698][T23732] do_syscall_64+0x14d/0xf80 [ 506.669794][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.676193][T23732] [ 506.676193][T23732] -> #5 (set->srcu){.+.+}-{0:0}: [ 506.683300][T23732] __synchronize_srcu+0xca/0x300 [ 506.688834][T23732] elevator_switch+0x1e8/0x7a0 [ 506.694281][T23732] elevator_change+0x2cc/0x450 [ 506.699553][T23732] elevator_set_default+0x36c/0x430 [ 506.705289][T23732] blk_register_queue+0x366/0x430 [ 506.710820][T23732] __add_disk+0x677/0xd50 [ 506.715668][T23732] add_disk_fwnode+0xfb/0x480 [ 506.720853][T23732] nbd_dev_add+0x72c/0xb50 [ 506.725773][T23732] nbd_init+0x168/0x1f0 [ 506.730453][T23732] do_one_initcall+0x250/0x8d0 [ 506.735815][T23732] do_initcall_level+0x104/0x190 [ 506.741268][T23732] do_initcalls+0x59/0xa0 [ 506.746105][T23732] kernel_init_freeable+0x2a6/0x3e0 [ 506.751816][T23732] kernel_init+0x1d/0x1d0 [ 506.756655][T23732] ret_from_fork+0x51e/0xb90 [ 506.761765][T23732] ret_from_fork_asm+0x1a/0x30 [ 506.767036][T23732] [ 506.767036][T23732] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 506.774864][T23732] __mutex_lock+0x19f/0x1300 [ 506.779960][T23732] elevator_change+0x1b3/0x450 [ 506.785255][T23732] elevator_set_none+0xb5/0x140 [ 506.789329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 506.790612][T23732] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 506.798577][ C1] lec:lec_tx_timeout: lec0 [ 506.804875][T23732] nbd_start_device+0x17f/0xb10 [ 506.804893][T23732] nbd_genl_connect+0x165b/0x1cf0 [ 506.804908][T23732] genl_family_rcv_msg_doit+0x22a/0x330 [ 506.804930][T23732] genl_rcv_msg+0x61c/0x7a0 [ 506.831302][T23732] netlink_rcv_skb+0x232/0x4b0 [ 506.836578][T23732] genl_rcv+0x28/0x40 [ 506.841076][T23732] netlink_unicast+0x80f/0x9b0 [ 506.846340][T23732] netlink_sendmsg+0x813/0xb40 [ 506.851696][T23732] ____sys_sendmsg+0x972/0x9f0 [ 506.856971][T23732] ___sys_sendmsg+0x2a5/0x360 [ 506.862157][T23732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.867604][T23732] do_syscall_64+0x14d/0xf80 [ 506.872701][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.879196][T23732] [ 506.879196][T23732] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 506.887803][T23732] blk_alloc_queue+0x546/0x680 [ 506.893088][T23732] __blk_mq_alloc_disk+0x197/0x390 [ 506.898714][T23732] nbd_dev_add+0x499/0xb50 [ 506.903641][T23732] nbd_init+0x168/0x1f0 [ 506.908303][T23732] do_one_initcall+0x250/0x8d0 [ 506.913580][T23732] do_initcall_level+0x104/0x190 [ 506.919027][T23732] do_initcalls+0x59/0xa0 [ 506.923872][T23732] kernel_init_freeable+0x2a6/0x3e0 [ 506.929632][T23732] kernel_init+0x1d/0x1d0 [ 506.934465][T23732] ret_from_fork+0x51e/0xb90 [ 506.939564][T23732] ret_from_fork_asm+0x1a/0x30 [ 506.945024][T23732] [ 506.945024][T23732] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 506.952216][T23732] fs_reclaim_acquire+0x71/0x100 [ 506.957662][T23732] __kmalloc_noprof+0x9d/0x760 [ 506.962928][T23732] sock_kmalloc+0xd6/0x160 [ 506.967948][T23732] __ip_mc_join_group+0x372/0x500 [ 506.973482][T23732] start_sync_thread+0x13eb/0x2860 [ 506.979098][T23732] do_ip_vs_set_ctl+0x497/0xb00 [ 506.984506][T23732] nf_setsockopt+0x26f/0x290 [ 506.989607][T23732] do_sock_setsockopt+0x17c/0x1b0 [ 506.995148][T23732] __x64_sys_setsockopt+0x13d/0x1b0 [ 507.000851][T23732] do_syscall_64+0x14d/0xf80 [ 507.005956][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.012351][T23732] [ 507.012351][T23732] -> #1 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 507.020156][T23732] lock_sock_nested+0x41/0x100 [ 507.025432][T23732] inet_shutdown+0x6a/0x390 [ 507.030439][T23732] nbd_mark_nsock_dead+0x2e9/0x560 [ 507.036055][T23732] recv_work+0x1c7f/0x1d90 [ 507.040977][T23732] process_scheduled_works+0xb6e/0x18c0 [ 507.047031][T23732] worker_thread+0xa53/0xfc0 [ 507.052130][T23732] kthread+0x388/0x470 [ 507.056701][T23732] ret_from_fork+0x51e/0xb90 [ 507.061797][T23732] ret_from_fork_asm+0x1a/0x30 [ 507.067070][T23732] [ 507.067070][T23732] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 507.074694][T23732] __lock_acquire+0x15a5/0x2cf0 [ 507.080052][T23732] lock_acquire+0xf0/0x2e0 [ 507.084973][T23732] __mutex_lock+0x19f/0x1300 [ 507.090070][T23732] nbd_queue_rq+0x37b/0x1100 [ 507.095168][T23732] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 507.101218][T23732] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 507.108139][T23732] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 507.114626][T23732] blk_mq_run_hw_queue+0x348/0x4f0 [ 507.120238][T23732] blk_mq_dispatch_list+0xd16/0xe10 [ 507.125945][T23732] blk_mq_flush_plug_list+0x48d/0x570 [ 507.131820][T23732] __blk_flush_plug+0x3ed/0x4d0 [ 507.137178][T23732] __submit_bio+0x28d/0x580 [ 507.142190][T23732] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 507.148341][T23732] block_read_full_folio+0x599/0x830 [ 507.154269][T23732] filemap_read_folio+0x137/0x3b0 [ 507.159804][T23732] do_read_cache_folio+0x358/0x590 [ 507.165429][T23732] read_part_sector+0xb6/0x2b0 [ 507.170699][T23732] adfspart_check_ICS+0xa5/0xa40 [ 507.176157][T23732] bdev_disk_changed+0x7ba/0x1550 [ 507.181687][T23732] blkdev_get_whole+0x380/0x510 [ 507.187045][T23732] bdev_open+0x31e/0xd30 [ 507.191794][T23732] blkdev_open+0x470/0x610 [ 507.196821][T23732] do_dentry_open+0x785/0x14e0 [ 507.202107][T23732] vfs_open+0x3b/0x340 [ 507.206692][T23732] path_openat+0x2e08/0x3860 [ 507.211790][T23732] do_file_open+0x23e/0x4a0 [ 507.216799][T23732] do_sys_openat2+0x113/0x200 [ 507.221984][T23732] __x64_sys_openat+0x138/0x170 [ 507.227342][T23732] do_syscall_64+0x14d/0xf80 [ 507.232437][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.238831][T23732] [ 507.238831][T23732] other info that might help us debug this: [ 507.238831][T23732] [ 507.249036][T23732] Chain exists of: [ 507.249036][T23732] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 507.249036][T23732] [ 507.261101][T23732] Possible unsafe locking scenario: [ 507.261101][T23732] [ 507.268556][T23732] CPU0 CPU1 [ 507.273900][T23732] ---- ---- [ 507.279253][T23732] lock(&cmd->lock); [ 507.283217][T23732] lock(set->srcu); [ 507.289703][T23732] lock(&cmd->lock); [ 507.296188][T23732] lock(&nsock->tx_lock); [ 507.300592][T23732] [ 507.300592][T23732] *** DEADLOCK *** [ 507.300592][T23732] [ 507.308717][T23732] 3 locks held by udevd/23732: [ 507.313459][T23732] #0: ffff888026745358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 507.322672][T23732] #1: ffff888025fbc118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 507.332152][T23732] #2: ffff888050708180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 507.341100][T23732] [ 507.341100][T23732] stack backtrace: [ 507.346973][T23732] CPU: 0 UID: 0 PID: 23732 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 507.346988][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.346997][T23732] Call Trace: [ 507.347002][T23732] [ 507.347007][T23732] dump_stack_lvl+0xe8/0x150 [ 507.347026][T23732] print_circular_bug+0x2e1/0x300 [ 507.347047][T23732] check_noncircular+0x12e/0x150 [ 507.347067][T23732] __lock_acquire+0x15a5/0x2cf0 [ 507.347084][T23732] ? irqentry_exit+0x59e/0x620 [ 507.347099][T23732] ? lockdep_hardirqs_on+0x7a/0x110 [ 507.347115][T23732] ? __pfx___schedule+0x10/0x10 [ 507.347132][T23732] lock_acquire+0xf0/0x2e0 [ 507.347147][T23732] ? nbd_queue_rq+0x37b/0x1100 [ 507.347164][T23732] __mutex_lock+0x19f/0x1300 [ 507.347179][T23732] ? nbd_queue_rq+0x37b/0x1100 [ 507.347194][T23732] ? is_bpf_text_address+0x292/0x2b0 [ 507.347207][T23732] ? is_bpf_text_address+0x26/0x2b0 [ 507.347221][T23732] ? kernel_text_address+0xa5/0xe0 [ 507.347235][T23732] ? nbd_queue_rq+0x37b/0x1100 [ 507.347248][T23732] ? __kernel_text_address+0xd/0x30 [ 507.347261][T23732] ? unwind_get_return_address+0x4d/0x90 [ 507.347280][T23732] ? __pfx___mutex_lock+0x10/0x10 [ 507.347301][T23732] nbd_queue_rq+0x37b/0x1100 [ 507.347317][T23732] ? add_lock_to_list+0xc7/0x100 [ 507.347335][T23732] ? __pfx_nbd_queue_rq+0x10/0x10 [ 507.347350][T23732] ? irqentry_exit+0x59e/0x620 [ 507.347365][T23732] ? lockdep_hardirqs_on+0x7a/0x110 [ 507.347379][T23732] ? irqentry_exit+0x59e/0x620 [ 507.347396][T23732] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 507.347417][T23732] ? sbitmap_get+0x229/0x390 [ 507.347432][T23732] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 507.347447][T23732] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 507.347463][T23732] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 507.347486][T23732] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 507.347509][T23732] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 507.347526][T23732] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 507.347540][T23732] blk_mq_run_hw_queue+0x348/0x4f0 [ 507.347554][T23732] blk_mq_dispatch_list+0xd16/0xe10 [ 507.347570][T23732] ? bdev_count_inflight+0x1cf/0x210 [ 507.347588][T23732] ? blk_mq_dispatch_list+0x180/0xe10 [ 507.347604][T23732] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 507.347621][T23732] ? rcu_is_watching+0x15/0xb0 [ 507.347638][T23732] blk_mq_flush_plug_list+0x48d/0x570 [ 507.347654][T23732] ? blk_add_rq_to_plug+0x300/0x450 [ 507.347669][T23732] ? blk_mq_submit_bio+0xef8/0x2810 [ 507.347683][T23732] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 507.347702][T23732] __blk_flush_plug+0x3ed/0x4d0 [ 507.347719][T23732] ? __pfx___blk_flush_plug+0x10/0x10 [ 507.347737][T23732] __submit_bio+0x28d/0x580 [ 507.347760][T23732] ? __pfx___submit_bio+0x10/0x10 [ 507.347777][T23732] ? bio_associate_blkg+0x6d/0x230 [ 507.347795][T23732] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 507.347812][T23732] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 507.347827][T23732] ? bio_alloc_bioset+0xbe2/0x11b0 [ 507.347851][T23732] block_read_full_folio+0x599/0x830 [ 507.347869][T23732] ? __pfx_blkdev_get_block+0x10/0x10 [ 507.347887][T23732] filemap_read_folio+0x137/0x3b0 [ 507.347902][T23732] ? __pfx_blkdev_read_folio+0x10/0x10 [ 507.347918][T23732] ? __pfx_filemap_read_folio+0x10/0x10 [ 507.347933][T23732] ? filemap_add_folio+0x356/0x530 [ 507.347947][T23732] do_read_cache_folio+0x358/0x590 [ 507.347962][T23732] ? __pfx_blkdev_read_folio+0x10/0x10 [ 507.347979][T23732] read_part_sector+0xb6/0x2b0 [ 507.347995][T23732] adfspart_check_ICS+0xa5/0xa40 [ 507.348011][T23732] ? snprintf+0xe8/0x140 [ 507.348023][T23732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.348039][T23732] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 507.348058][T23732] bdev_disk_changed+0x7ba/0x1550 [ 507.348075][T23732] ? bdev_open+0xe0/0xd30 [ 507.348092][T23732] ? __pfx_bdev_disk_changed+0x10/0x10 [ 507.348109][T23732] blkdev_get_whole+0x380/0x510 [ 507.348126][T23732] bdev_open+0x31e/0xd30 [ 507.348143][T23732] blkdev_open+0x470/0x610 [ 507.348161][T23732] ? __pfx_blkdev_open+0x10/0x10 [ 507.348176][T23732] do_dentry_open+0x785/0x14e0 [ 507.348209][T23732] vfs_open+0x3b/0x340 [ 507.348224][T23732] ? path_openat+0x2df0/0x3860 [ 507.348239][T23732] path_openat+0x2e08/0x3860 [ 507.348256][T23732] ? __pfx_stack_trace_save+0x10/0x10 [ 507.348270][T23732] ? stack_depot_save_flags+0x33/0x810 [ 507.348291][T23732] ? __pfx_path_openat+0x10/0x10 [ 507.348303][T23732] ? __x64_sys_openat+0x138/0x170 [ 507.348320][T23732] ? do_syscall_64+0x14d/0xf80 [ 507.348335][T23732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.348350][T23732] ? __lock_acquire+0x6b5/0x2cf0 [ 507.348367][T23732] do_file_open+0x23e/0x4a0 [ 507.348382][T23732] ? __pfx_do_file_open+0x10/0x10 [ 507.348402][T23732] ? _raw_spin_unlock+0x28/0x50 [ 507.348415][T23732] ? alloc_fd+0x64b/0x6c0 [ 507.348435][T23732] do_sys_openat2+0x113/0x200 [ 507.348452][T23732] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 507.348470][T23732] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.348489][T23732] ? rcu_is_watching+0x15/0xb0 [ 507.348508][T23732] __x64_sys_openat+0x138/0x170 [ 507.348527][T23732] do_syscall_64+0x14d/0xf80 [ 507.348541][T23732] ? trace_irq_disable+0x3b/0x150 [ 507.348553][T23732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.348565][T23732] ? clear_bhb_loop+0x40/0x90 [ 507.348579][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.348591][T23732] RIP: 0033:0x7f6d063e3407 [ 507.348604][T23732] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 507.348615][T23732] RSP: 002b:00007fff6d58b690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 507.348629][T23732] RAX: ffffffffffffffda RBX: 00007f6d06357880 RCX: 00007f6d063e3407 [ 507.348639][T23732] RDX: 00000000000a0800 RSI: 000055e4de292430 RDI: ffffffffffffff9c [ 507.348648][T23732] RBP: 000055e4de291910 R08: 0000000000000000 R09: 0000000000000000 [ 507.348656][T23732] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e4de2aef10 [ 507.348664][T23732] R13: 000055e4de29f190 R14: 0000000000000000 R15: 000055e4de2aef10 [ 507.348678][T23732] [ 507.957045][T23732] block nbd2: Dead connection, failed to find a fallback [ 507.964254][T23732] block nbd2: shutting down sockets [ 507.969920][T23732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 507.979568][T23732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 507.987474][T23732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 507.997180][T23732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 508.009077][T23732] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.018757][T23732] Buffer I/O error on dev nbd2, logical block 2, async page read [ 508.033108][T23732] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.043301][T23732] Buffer I/O error on dev nbd2, logical block 3, async page read [ 508.051397][T23732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.060909][T23732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 508.068702][T23732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.078453][T23732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 508.086314][T23732] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.096264][T23732] Buffer I/O error on dev nbd2, logical block 2, async page read [ 508.104116][T23732] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.113830][T23732] Buffer I/O error on dev nbd2, logical block 3, async page read [ 508.121684][T23732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.131485][T23732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 508.139322][T23732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.148982][T23732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 508.157399][T23732] ldm_validate_partition_table(): Disk read failed. [ 508.164374][T23732] Dev nbd2: unable to read RDB block 0 [ 508.170396][T23732] nbd2: unable to read partition table [ 508.179455][T23732] ldm_validate_partition_table(): Disk read failed. [ 508.186419][T23732] Dev nbd2: unable to read RDB block 0 [ 508.192401][T23732] nbd2: unable to read partition table [ 508.249970][ T63] net_ratelimit: 479 callbacks suppressed [ 508.249990][ T63] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 508.271016][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.369808][ T63] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 508.379738][ T79] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.479697][ T63] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 508.499601][T23687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.589319][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 508.610054][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.699819][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 508.719964][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.259853][T23687] net_ratelimit: 78 callbacks suppressed [ 513.259874][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 513.273227][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.379919][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 513.389901][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.489924][T23687] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 513.509324][ T63] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.609590][ T63] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 513.629443][T23687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.719495][ T1043] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 513.739401][ T1043] bond3: (slave ip6gretap1): failed to get link speed/duplex