last executing test programs: 5.449667563s ago: executing program 0 (id=4708): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000a70855992d121e900001000c002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 2.755706232s ago: executing program 1 (id=4731): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x30000}, 0x94) 2.454354042s ago: executing program 1 (id=4734): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.17307095s ago: executing program 1 (id=4736): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001400)=@generic={0x0, 0x0, 0x10}, 0x18) accept$alg(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2d}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0xf, @mcast2, 0x8b99}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @empty}], 0x88) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000081) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000700)="e2ad", 0x2, 0x40000, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getgid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.621839318s ago: executing program 0 (id=4741): accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80800) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xc011, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="0006010100000000fc010000000000000000000000000000fc0100000200"/56], 0x38) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={r5, &(0x7f0000000240)='-,%^]:/@@\x00', 0x40, &(0x7f0000000280)={@_ha_fsid={[0x558f, 0x9]}, {0xfff5, 0x6a4, 0x6, 0x9}}, 0x0, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x7}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xd, '\x00', 0x0, r7, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r7, r8}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000000c0403000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x4000000) 1.540208087s ago: executing program 3 (id=4743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000030000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.460854654s ago: executing program 4 (id=4744): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xeb8e, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x16, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x6c, @private=0xa010101, 0x4e21, 0x3, 'nq\x00', 0xc, 0x81, 0x5d}, {@broadcast, 0x4e24, 0x1, 0x4, 0xbad7, 0x6}}, 0x44) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x48}}, 0x4000) 1.260584007s ago: executing program 3 (id=4746): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.187479027s ago: executing program 1 (id=4747): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 1.179198633s ago: executing program 4 (id=4748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.079410334s ago: executing program 2 (id=4749): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000702010008ffffffd503010017740040950000000000000069163a0000000064bf67000000000000350602000fff07201706000020191800160600000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.078138468s ago: executing program 3 (id=4750): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x20000000}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="0bffff30", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1a00000000000000000000000000000004000000", @ANYRES32, @ANYBLOB="1a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x4}, {0x6, 0x1}]}) write(r5, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f00000005c0), 0x10000000000003c6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) 928.623014ms ago: executing program 4 (id=4751): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01051800000000000000180000001800000004000000020000000000000c0200004cd10583ae17894fca00000000000000000d0000000000006700"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0xa000000b, 0x3f00}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x8000001c}) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)="fc725ff66ee69261ba61796c2775509787320095914a6ede414304a28ce749b7ab3ca6705cd84e4337f86763110f45c87cf7ebae51aafe8c114e7bffbc0b4186d7fb64269122a5419f2b13c4a2ec6da6aa4a4f0971f58c28364e78340b55c6d26e", 0x61, 0x4}, 0x44840) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 928.423119ms ago: executing program 2 (id=4752): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80, &(0x7f00000001c0)={@_ha_fsid={[0x80000001, 0x9]}, {0x8, 0xe03d, 0x101, 0x400}}, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xb4}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRESOCT, @ANYRES32, @ANYRES8=0x0], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300030081000800010004"], 0x44}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014020000b7030000000000008500000005000000bf0900000000f7006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb7020700080006000000009ffe00000056000000060000002c93000000000000b5030000000000008500000076050000b7000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 889.405815ms ago: executing program 2 (id=4753): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32) close(r1) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 792.775919ms ago: executing program 3 (id=4754): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fff3b7030000020000f98500000072000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1407, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8010) 697.082542ms ago: executing program 4 (id=4755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000440)=0x69, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="20020000110001002abd7000fcdbdf257f000001000000000000000000000000000004d30a00ff00"], 0x220}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x8, 0x0}, {[@lsrr={0x83, 0xf, 0x73, [@broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xe5}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 659.381484ms ago: executing program 2 (id=4756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000020000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 648.178947ms ago: executing program 0 (id=4757): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x198, 0x20a, 0x278, 0x198, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0x807fffff], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x25}, @loopback, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xffffff00], 'nicvf0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x6, 0x68}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000180)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r10, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x2b, "d504cabed35599fdc204ce6513d6b3b41e1670b64c324b768f3a23e4ca8686fd11ccbc37e563aba1c0a954"}, &(0x7f00000002c0)=0x33) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000300)={r11, 0x8}, &(0x7f0000000340)=0x8) (async) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000040)=0xdd7, 0x4) (async) recvmmsg(r10, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x7, 0x5, 0x9, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500200000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 537.781637ms ago: executing program 3 (id=4758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020f08000a00000000000000fedbdf25f8ff040000000000020000a000000000000000000000000005000600002000000a004e240000ffffffffffd5328b13614012bd00"], 0x50}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e7bdd191486e8e3bf0795161b2"}]}, 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 465.192361ms ago: executing program 4 (id=4759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000d44100fbffffffffffffff000000000000000000000600000000000000000000000002000000000000000000000002"], 0xb8}}, 0x2c000010) 401.941088ms ago: executing program 2 (id=4760): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) unshare(0x400) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}]}}]}, 0x38}}, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x601, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000240)={0x2, 'ip6gre0\x00', {0x1}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8804) 392.456245ms ago: executing program 1 (id=4761): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 293.789704ms ago: executing program 0 (id=4762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_PLIMIT, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}, @qdisc_kind_options=@q_htb={{}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x20008910) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 293.424083ms ago: executing program 3 (id=4763): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@local, @loopback, 0x1}, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000840)={r3, r6}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}, {&(0x7f0000000040)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2090) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r7, 0x0) close(0x3) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="a99ec62b51cb7e08116721902ac9db7f4ce2c67d4702d9143867b79ba7c5bd55d31c25494dfa1b6a23ffa4afcdaf3a6ecfaa44b3772f3d8d0f1fa4079d70b7475a29f0986f8e621994951b287a1cb5fa8d149a25057c5a47d212affa161be948c98720dc25e6083ebcd9bd27c58d6ffdf903b7c245fbdadcc9082bcda9122a5f576abecf50a18388b85146d2d62810120e9c0a1f60b60c928df1c6ea7ec10b1b842b62b838ca36eedf31b600a89a4e423e4a734c9ee71eb44df07b", 0xbb}, {&(0x7f0000000180)="32b83626d7d68c36721d3b56bcb8fd0d3b58a6aca2d7e678991303b083c5236f420936b541fbc8e59f0103c8efb176c8d85271e8ad9c4a1688f057d2cfe42a46bd114fde0a796a1616995a2ef2fc4e6375ec928b7d49dbc66b21e51be756884437783fdbe4506d2e7bce1d84f668", 0x6e}, {&(0x7f0000000200)="986cb5c2b5b4dd7e2b7b0d80b996a6786fdc0c2e2deebad4f3a08147727c552710caab3c0c624447e4dcb4a0d74d49430558c75a1c0126f0799f3b1ec3cb966c395036938b117de327fb9ee8509f6ee5ffb777c036bc01462294d062659e1252d09f7b3a6d871fe4916af130c93e14a26ab413081cb371e89e7ddb3cc7e4397e05f4232d72e64a7a98a37d71590506227ec96a1b31a61f6ea270b8db5d726123bab359cfec1510a0a54a975a315acb092ac7395353625055", 0xb8}, {&(0x7f00000002c0)='Z', 0x1}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="c6d159b40a6ee3e27f58ebd990e91a90e4d39933efab1c93", 0x18}, {&(0x7f0000000440)="c34b2b7d4637e69d05ea83c3bc21020a2768ea4b7d485ab02f111ca100", 0x1d}], 0x7}, 0x880) socket$netlink(0x10, 0x3, 0x0) 293.299525ms ago: executing program 4 (id=4764): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x4000804) 195.990616ms ago: executing program 0 (id=4765): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="a00300000102010300000000000000000300000408000940000000020600074000030000740002800c00028005"], 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 84.057425ms ago: executing program 1 (id=4766): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8e3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xf, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x4, 0xfffffffd, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "7cf56f776d00"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c8", 0x1}], 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x112}) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x2, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r2, 0x0, 0x24080) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000012c0)={0xa415, 0x7f, 0xe7d7, 0x5, 0x5, 0x7, 0xbf04}, 0xc) close(0x4) 1.531411ms ago: executing program 2 (id=4767): accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80800) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xc011, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="0006010100000000fc010000000000000000000000000000fc0100000200"/56], 0x38) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={r5, &(0x7f0000000240)='-,%^]:/@@\x00', 0x40, &(0x7f0000000280)={@_ha_fsid={[0x558f, 0x9]}, {0xfff5, 0x6a4, 0x6, 0x9}}, 0x0, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x7}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xd, '\x00', 0x0, r7, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r7, r8}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000000c0403000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x4000000) 0s ago: executing program 0 (id=4768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) kernel console output (not intermixed with test programs): ering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.176622][T16757] tipc: Disabling bearer [ 431.183991][T16764] nbd: nbd0 already in use [ 431.325678][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 431.337451][T16769] netlink: 'syz.4.3303': attribute type 1 has an invalid length. [ 431.354943][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.453502][T16778] netlink: 'syz.1.3305': attribute type 11 has an invalid length. [ 431.780914][T16788] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 431.922559][T16791] syzkaller0: entered promiscuous mode [ 431.927347][T16788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3309'. [ 431.932856][T16791] syzkaller0: entered allmulticast mode [ 431.947087][T16554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.985673][ T5645] Bluetooth: hci2: command tx timeout [ 431.994205][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.005380][T16554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.018598][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.072884][T16794] tipc: Started in network mode [ 432.080914][T16794] tipc: Node identity 625271e17243, cluster identity 4711 [ 432.089071][T16794] tipc: Enabled bearer , priority 0 [ 432.104129][T16554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.137377][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.154888][T16554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.180736][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.240352][T16790] tipc: Resetting bearer [ 432.268960][T16790] tipc: Disabling bearer [ 432.528067][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 432.570800][T16816] netlink: 'syz.1.3314': attribute type 4 has an invalid length. [ 432.793248][T16554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.857221][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'. [ 432.954758][ T148] net_ratelimit: 3 callbacks suppressed [ 432.954781][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.116288][T16842] xt_hashlimit: invalid rate [ 433.312234][T16822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.413361][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.424974][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.436023][T16839] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3319'. [ 433.474806][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.606495][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 433.660833][T16822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.721348][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.728625][ T6740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.803449][T16822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.844135][T16859] syzkaller0: entered promiscuous mode [ 433.849994][T16859] syzkaller0: entered allmulticast mode [ 433.862937][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.870196][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.943554][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3325'. [ 433.982538][T16822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.018404][T16863] netlink: 'syz.3.3325': attribute type 2 has an invalid length. [ 434.101670][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.226511][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.278857][ T1336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.340263][ T148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.353756][T16876] FAULT_INJECTION: forcing a failure. [ 434.353756][T16876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.373722][T16876] CPU: 1 UID: 0 PID: 16876 Comm: syz.1.3329 Not tainted syzkaller #0 PREEMPT(full) [ 434.373763][T16876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.373775][T16876] Call Trace: [ 434.373783][T16876] [ 434.373792][T16876] dump_stack_lvl+0xe8/0x150 [ 434.373822][T16876] should_fail_ex+0x412/0x560 [ 434.373855][T16876] _copy_from_user+0x2d/0xb0 [ 434.373886][T16876] ip_mcast_join_leave+0x139/0x260 [ 434.373916][T16876] ? __pfx_ip_mcast_join_leave+0x10/0x10 [ 434.373963][T16876] ? do_ip_setsockopt+0x1623/0x2ea0 [ 434.373990][T16876] ? __local_bh_enable_ip+0xd0/0x130 [ 434.374018][T16876] do_ip_setsockopt+0x1ce1/0x2ea0 [ 434.374054][T16876] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 434.374080][T16876] ? aa_sk_perm+0x6d5/0x900 [ 434.374106][T16876] ? __fget_files+0x2a/0x420 [ 434.374137][T16876] ? __pfx_aa_sk_perm+0x10/0x10 [ 434.374165][T16876] ? __fget_files+0x2a/0x420 [ 434.374186][T16876] ? aa_sock_opt_perm+0xff/0x1a0 [ 434.374216][T16876] ip_setsockopt+0x66/0x110 [ 434.374237][T16876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 434.374264][T16876] do_sock_setsockopt+0x17c/0x1b0 [ 434.374298][T16876] __x64_sys_setsockopt+0x13d/0x1b0 [ 434.374328][T16876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.374350][T16876] do_syscall_64+0x15f/0xf80 [ 434.374370][T16876] ? trace_irq_disable+0x3b/0x140 [ 434.374398][T16876] ? clear_bhb_loop+0x40/0x90 [ 434.374423][T16876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.374443][T16876] RIP: 0033:0x7fc764b9cdd9 [ 434.374465][T16876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.374483][T16876] RSP: 002b:00007fc7659d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 434.374506][T16876] RAX: ffffffffffffffda RBX: 00007fc764e15fa0 RCX: 00007fc764b9cdd9 [ 434.374520][T16876] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 434.374532][T16876] RBP: 00007fc7659d1090 R08: 0000000000000088 R09: 0000000000000000 [ 434.374544][T16876] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 434.374556][T16876] R13: 00007fc764e16038 R14: 00007fc764e15fa0 R15: 00007ffdd5047208 [ 434.374591][T16876] [ 434.594413][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.606434][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.615931][ T1182] block nbd0: Connection timed out, retrying (0/2 alive) [ 434.628097][ T1182] block nbd0: Connection timed out, retrying (0/2 alive) [ 434.635397][ T1182] block nbd0: Connection timed out, retrying (0/2 alive) [ 434.642686][ T1182] block nbd0: Connection timed out, retrying (0/2 alive) [ 434.650932][ T1182] block nbd0: Dead connection, failed to find a fallback [ 434.658787][ T1182] block nbd0: shutting down sockets [ 434.666542][ T1182] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.676743][ T1182] Buffer I/O error on dev nbd0, logical block 3, async page read [ 434.686530][ T1182] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.695723][ T1182] Buffer I/O error on dev nbd0, logical block 2, async page read [ 434.703689][ T1182] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.713389][ T1182] Buffer I/O error on dev nbd0, logical block 1, async page read [ 434.721944][ T1182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.731171][ T1182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 434.741042][T15707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.750992][T15707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 434.761346][T15707] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.770652][T15707] Buffer I/O error on dev nbd0, logical block 1, async page read [ 434.778670][T15707] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.787989][T15707] Buffer I/O error on dev nbd0, logical block 2, async page read [ 434.796655][T15707] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.805792][T15707] Buffer I/O error on dev nbd0, logical block 3, async page read [ 434.813765][T15707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.823844][T15707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 434.823853][ T6736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.832388][T15707] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 434.841906][T16882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3330'. [ 434.858814][T15707] Buffer I/O error on dev nbd0, logical block 1, async page read [ 434.874392][T15707] ldm_validate_partition_table(): Disk read failed. [ 434.885811][T15707] Dev nbd0: unable to read RDB block 0 [ 434.894876][T15707] nbd0: unable to read partition table [ 434.961762][T15707] ldm_validate_partition_table(): Disk read failed. [ 434.978677][ T6735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.988591][T15707] Dev nbd0: unable to read RDB block 0 [ 435.017709][T15707] nbd0: unable to read partition table [ 435.084960][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.225632][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.288153][T16896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3334'. [ 435.746534][T16917] sctp: [Deprecated]: syz.3.3341 (pid 16917) Use of int in maxseg socket option. [ 435.746534][T16917] Use struct sctp_assoc_value instead [ 435.762963][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.929676][T16554] veth0_vlan: entered promiscuous mode [ 435.986809][T16554] veth1_vlan: entered promiscuous mode [ 436.058551][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3344'. [ 436.080805][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3344'. [ 436.092248][T16927] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3343'. [ 436.153987][T16554] veth0_macvtap: entered promiscuous mode [ 436.184002][T16554] veth1_macvtap: entered promiscuous mode [ 436.310432][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.384850][T16940] tipc: Invalid UDP bearer configuration [ 436.384910][T16940] tipc: Enabling of bearer rejected, failed to enable media [ 436.448358][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 436.448571][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.510539][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.535713][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.606678][T16940] vlan2: entered allmulticast mode [ 436.627458][T16940] macvtap0: entered allmulticast mode [ 436.655078][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.702629][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.082109][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.115489][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.483138][ T6736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.521846][ T6736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.056265][ T6736] net_ratelimit: 16 callbacks suppressed [ 438.056288][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.216111][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.346907][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.487143][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.570195][T17011] netlink: 'syz.3.3362': attribute type 1 has an invalid length. [ 438.608558][T17011] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3362'. [ 438.794966][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.802860][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 438.949873][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.331742][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.339700][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.546652][T17023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.561191][T17023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.777422][T17041] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 439.802183][T17041] bond1 (unregistering): Released all slaves [ 439.835094][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.875212][ T6734] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.885400][ T6734] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.936813][ T6734] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.957202][ T6734] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.006006][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.137322][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.148529][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.201003][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 440.446225][T17078] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3375'. [ 440.475718][T17078] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3375'. [ 440.530549][T17078] pim6reg: entered allmulticast mode [ 440.585630][T17084] pim6reg: left allmulticast mode [ 440.893685][T17104] netlink: 'syz.1.3383': attribute type 13 has an invalid length. [ 441.116124][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 441.297462][T17114] syzkaller0: entered promiscuous mode [ 441.316937][T17114] syzkaller0: entered allmulticast mode [ 441.334136][T17102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3384'. [ 441.340736][T17128] Bluetooth: MGMT ver 1.23 [ 441.620478][T17133] syzkaller0: entered promiscuous mode [ 441.635714][T17133] syzkaller0: entered allmulticast mode [ 442.227285][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 442.443270][T17165] syzkaller1: entered promiscuous mode [ 442.462670][T17165] syzkaller1: entered allmulticast mode [ 443.144965][ T148] net_ratelimit: 22 callbacks suppressed [ 443.144990][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.304893][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.424963][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.544776][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.615787][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 443.666118][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.797183][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.924758][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 443.985230][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.044917][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.128078][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3415'. [ 444.164782][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.543077][T17227] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 444.988945][T17237] tipc: Enabled bearer , priority 0 [ 445.069990][T17238] syzkaller0: entered promiscuous mode [ 445.076063][T17238] syzkaller0: entered allmulticast mode [ 445.169120][T17237] tipc: Resetting bearer [ 445.279860][T17236] tipc: Resetting bearer [ 445.337990][T17236] tipc: Disabling bearer [ 445.608383][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 445.643753][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 445.925668][ T5767] IPVS: starting estimator thread 0... [ 446.034843][T17256] IPVS: using max 26 ests per chain, 62400 per kthread [ 446.170067][T17255] žÿ: renamed from team_slave_1 [ 446.572995][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3430'. [ 446.788146][T17271] netlink: 'syz.4.3431': attribute type 13 has an invalid length. [ 446.810532][T17271] netlink: 'syz.4.3431': attribute type 17 has an invalid length. [ 447.087244][T17271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.112033][T17271] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.142172][T17271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.256096][T17271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.280082][T17271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.323535][T17271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.354722][T17271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.420710][T17271] veth1_vlan: left promiscuous mode [ 447.437072][T17271] veth0_vlan: left promiscuous mode [ 447.456200][T17271] veth0_vlan: entered promiscuous mode [ 447.477071][T17271] veth1_vlan: entered promiscuous mode [ 447.527197][T17271] veth1_macvtap: left promiscuous mode [ 447.538244][T17271] veth0_macvtap: left promiscuous mode [ 447.557280][T17271] veth0_macvtap: entered promiscuous mode [ 447.563077][T17271] veth0_macvtap: entered allmulticast mode [ 447.618236][T17271] veth1_macvtap: entered promiscuous mode [ 447.671265][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 447.671737][T17271] vlan2: left allmulticast mode [ 447.704770][T17271] macvtap0: left allmulticast mode [ 447.710531][T17271] veth0_macvtap: left allmulticast mode [ 447.733046][T17271] 8021q: adding VLAN 0 to HW filter on device eth0 [ 447.736576][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 447.770305][T17271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 447.810611][T17271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 447.848015][T17271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 447.897892][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.905180][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.943416][T17288] x_tables: duplicate underflow at hook 1 [ 448.082769][ T136] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.103633][ T136] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.168149][ T136] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.200965][ T136] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.378145][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'. [ 448.524775][ T136] net_ratelimit: 20 callbacks suppressed [ 448.524798][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.578193][T17312] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3443'. [ 448.657878][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.774872][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.959761][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 448.972362][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 449.027551][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.165090][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.185320][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.289826][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.436851][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.458797][T17343] syzkaller0: entered promiscuous mode [ 449.470870][T17343] syzkaller0: entered allmulticast mode [ 449.501114][T17343] tipc: Enabled bearer , priority 0 [ 449.519446][T17342] tipc: Resetting bearer [ 449.554456][T17342] tipc: Disabling bearer [ 449.567201][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3454'. [ 449.585660][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.595197][T17349] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 449.705068][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 449.946919][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 450.009818][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 450.294739][T17378] syzkaller0: entered promiscuous mode [ 450.303357][T17378] syzkaller0: entered allmulticast mode [ 450.402463][T17382] tipc: Enabled bearer , priority 0 [ 450.420519][T17377] tipc: Resetting bearer [ 450.493754][T17377] tipc: Disabling bearer [ 450.590958][T17391] netlink: 'syz.4.3470': attribute type 11 has an invalid length. [ 450.768885][T17403] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 451.363648][T17434] syzkaller0: entered promiscuous mode [ 451.378245][T17434] syzkaller0: entered allmulticast mode [ 451.415262][T17434] tipc: Enabled bearer , priority 0 [ 451.449930][T17433] tipc: Resetting bearer [ 451.539903][T17433] tipc: Disabling bearer [ 451.658540][T17444] __nla_validate_parse: 3 callbacks suppressed [ 451.658563][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3485'. [ 452.434045][T17486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3494'. [ 452.876022][T17510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3500'. [ 452.910107][T17510] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 452.992400][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3502'. [ 453.012165][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3502'. [ 453.050814][T17510] bond1: entered promiscuous mode [ 453.052527][T17519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3500'. [ 453.065373][T17510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.595832][ T136] net_ratelimit: 26 callbacks suppressed [ 453.595857][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 453.891117][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 453.931979][T17546] macsec0: entered promiscuous mode [ 454.025030][T17548] macsec0 (unregistering): left promiscuous mode [ 454.194830][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 454.294868][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3513'. [ 454.332264][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 454.340727][T17569] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 454.385296][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.467145][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 454.538576][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 454.765528][T17591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3516'. [ 454.784136][T17591] netlink: 'syz.3.3516': attribute type 4 has an invalid length. [ 454.835479][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 454.965303][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 455.084909][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 455.214806][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 455.424947][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.442048][T17620] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 455.700294][T17630] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 456.747998][T17670] __nla_validate_parse: 8 callbacks suppressed [ 456.748020][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 456.880301][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 456.896719][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 457.013540][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'. [ 457.123406][T17679] netlink: 'syz.2.3545': attribute type 12 has an invalid length. [ 457.198983][T17679] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3545'. [ 457.399057][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 457.426229][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 457.449247][T17686] veth3: entered allmulticast mode [ 457.610183][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'. [ 458.363289][T17716] netlink: 'syz.4.3557': attribute type 15 has an invalid length. [ 458.372456][T17716] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3557'. [ 458.488632][T17716] bond1: option ad_user_port_key: invalid value (65535) [ 458.511588][T17716] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 458.578352][T17716] bond1 (unregistering): Released all slaves [ 458.645837][ T136] net_ratelimit: 28 callbacks suppressed [ 458.645860][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.805684][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.900100][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 458.927664][ T136] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.938509][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.957141][ T136] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.984839][ T136] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.026783][ T136] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.075307][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.279679][T17739] bond1 (unregistering): Released all slaves [ 459.315439][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.474735][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.584928][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.594920][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.726001][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 459.865521][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 460.677347][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.029004][T17769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.165291][T17769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.822050][ T6736] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.856338][ T6736] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.886878][ T6736] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.913789][ T6736] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.026272][T17788] syzkaller0: entered promiscuous mode [ 462.034254][T17788] syzkaller0: entered allmulticast mode [ 462.052387][T17788] tipc: Enabled bearer , priority 0 [ 462.078448][T17787] tipc: Resetting bearer [ 462.186158][T17787] tipc: Disabling bearer [ 462.216004][ T810] IPVS: starting estimator thread 0... [ 462.347377][T17801] IPVS: using max 27 ests per chain, 64800 per kthread [ 463.252499][T17833] syzkaller0: entered promiscuous mode [ 463.260642][T17833] syzkaller0: entered allmulticast mode [ 463.282594][T17833] tipc: Started in network mode [ 463.289453][T17833] tipc: Node identity 5ef2369ef6ca, cluster identity 4711 [ 463.298971][T17833] tipc: Enabled bearer , priority 0 [ 463.308033][T17832] tipc: Resetting bearer [ 463.359130][T17832] tipc: Disabling bearer [ 463.567941][T17841] syzkaller0: entered promiscuous mode [ 463.594734][T17841] syzkaller0: entered allmulticast mode [ 463.616097][T17841] tipc: Enabled bearer , priority 0 [ 463.636416][T17839] tipc: Resetting bearer [ 463.744832][T17839] tipc: Disabling bearer [ 463.744908][ C1] net_ratelimit: 18 callbacks suppressed [ 463.744925][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.846855][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.979894][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.104777][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.228563][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.338284][T17859] __nla_validate_parse: 4 callbacks suppressed [ 464.338305][T17859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3601'. [ 464.356833][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.496762][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.625315][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.735098][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 464.784936][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.348832][T13449] IPVS: starting estimator thread 0... [ 465.456262][T17889] IPVS: using max 23 ests per chain, 55200 per kthread [ 465.553050][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 466.010382][T17908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3615'. [ 466.241317][T17915] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3618'. [ 467.022926][T17948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.226613][T17960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3631'. [ 467.446778][T17969] bridge1: entered promiscuous mode [ 467.456681][T17969] bridge1: entered allmulticast mode [ 467.789978][T17976] syzkaller0: entered promiscuous mode [ 467.812974][T17976] syzkaller0: entered allmulticast mode [ 467.962001][T17976] tipc: Enabled bearer , priority 0 [ 468.479749][T17971] tipc: Resetting bearer [ 468.566076][T17971] tipc: Disabling bearer [ 468.865794][ T12] net_ratelimit: 29 callbacks suppressed [ 468.865816][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.918897][T18005] syzkaller0: entered promiscuous mode [ 468.943039][T18005] syzkaller0: entered allmulticast mode [ 468.949828][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.015252][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.092299][T18007] tipc: Enabled bearer , priority 0 [ 469.137964][T18004] tipc: Resetting bearer [ 469.327679][T18004] tipc: Disabling bearer [ 469.454946][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.596906][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.717473][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3646'. [ 469.774083][T18034] syzkaller0: entered promiscuous mode [ 469.802942][T18034] syzkaller0: entered allmulticast mode [ 469.913119][T18040] sctp: [Deprecated]: syz.1.3650 (pid 18040) Use of int in maxseg socket option. [ 469.913119][T18040] Use struct sctp_assoc_value instead [ 469.945676][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 469.984929][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.065672][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 470.187040][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 470.306657][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 470.975351][T18069] syzkaller0: entered promiscuous mode [ 470.981095][T18069] syzkaller0: entered allmulticast mode [ 471.002168][T18069] tipc: Enabled bearer , priority 0 [ 471.018655][T18067] tipc: Resetting bearer [ 471.074366][T18067] tipc: Disabling bearer [ 471.559064][T18096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3668'. [ 472.018634][T18114] syzkaller0: entered promiscuous mode [ 472.033898][T18114] syzkaller0: entered allmulticast mode [ 472.054568][T18114] tipc: Enabled bearer , priority 0 [ 472.076198][T18112] tipc: Resetting bearer [ 472.114465][T18112] tipc: Disabling bearer [ 472.133511][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3675'. [ 472.658012][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3682'. [ 472.678275][T18144] sctp: [Deprecated]: syz.2.3683 (pid 18144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.678275][T18144] Use struct sctp_sack_info instead [ 472.700676][T18146] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3684'. [ 472.720925][T18146] xt_hashlimit: invalid rate [ 472.884174][ T8397] tipc: Subscription rejected, illegal request [ 473.911646][T18199] syzkaller0: entered promiscuous mode [ 473.918357][T18199] syzkaller0: entered allmulticast mode [ 474.026308][ T13] net_ratelimit: 28 callbacks suppressed [ 474.026331][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.108684][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3703'. [ 474.156719][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.225941][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.344809][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.454742][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.595129][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.816210][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 474.956182][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.074748][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 475.186959][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.697877][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3709'. [ 475.726762][T18240] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3709'. [ 475.764873][T18242] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.941239][T18242] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.245736][T18242] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.329917][T18242] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.588728][ T136] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.606012][T18277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 476.636619][T18272] netlink: 'syz.3.3718': attribute type 2 has an invalid length. [ 476.654126][ T6736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.664953][T18272] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3718'. [ 476.677399][ T6736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.766125][ T136] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.176659][T18301] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 477.190896][T18288] xt_CT: No such helper "snmp" [ 477.509251][T18311] §: renamed from sit0 [ 477.669749][T18314] ipvlan2: entered promiscuous mode [ 477.765821][T18316] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3729'. [ 477.778665][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3728'. [ 477.849969][T18319] ip6gretap0: entered promiscuous mode [ 477.891012][T18325] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.966287][T18325] bridge_slave_0 (unregistering): left allmulticast mode [ 478.000109][T18325] bridge_slave_0 (unregistering): left promiscuous mode [ 478.022621][T18325] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.610975][T18349] siw: device registration error -23 [ 478.750121][T18349] smbdirect: ib_dev[syz1] removed [ 479.136480][ T136] net_ratelimit: 28 callbacks suppressed [ 479.136502][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.169295][T18361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3740'. [ 479.284922][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.301366][T18361] sctp: [Deprecated]: syz.2.3740 (pid 18361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.301366][T18361] Use struct sctp_sack_info instead [ 479.344932][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.425631][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.534537][T18370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3745'. [ 479.555429][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.666591][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 479.918194][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.027652][T18394] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3750'. [ 480.336457][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.394892][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.466139][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 480.922490][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3756'. [ 481.338840][T18433] bond2: option updelay: invalid value (18446744073709518847) [ 481.348451][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 481.379676][T18433] bond2: option updelay: allowed values 0 - 2147483647 [ 481.417985][T18433] bond2 (unregistering): Released all slaves [ 481.781306][T18457] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3766'. [ 481.850818][T18461] netlink: 'syz.0.3766': attribute type 32 has an invalid length. [ 481.876668][T18457] bond0 (unregistering): Released all slaves [ 482.348808][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 482.396811][T18485] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3774'. [ 483.184898][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 483.912450][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3785'. [ 484.265036][ T8397] net_ratelimit: 27 callbacks suppressed [ 484.265058][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.415721][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.427774][T18553] netlink: 'syz.2.3789': attribute type 1 has an invalid length. [ 484.445468][T18553] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3789'. [ 484.544912][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.606166][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.907486][T18577] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3798'. [ 485.041530][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 485.085361][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.210231][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.265878][T18592] netlink: 'syz.1.3803': attribute type 1 has an invalid length. [ 485.317927][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3804'. [ 485.364844][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.486431][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.584991][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.607150][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.877707][T18618] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.050452][T18638] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 486.608555][T18668] __nla_validate_parse: 2 callbacks suppressed [ 486.608577][T18668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3827'. [ 487.167695][T18686] netlink: 'syz.0.3832': attribute type 13 has an invalid length. [ 488.069977][T18723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3841'. [ 488.248675][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3843'. [ 488.596677][T18742] xfrm1: entered allmulticast mode [ 489.277769][ T6740] net_ratelimit: 27 callbacks suppressed [ 489.277791][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.307768][T18772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3852'. [ 489.393452][T18777] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3854'. [ 489.454776][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.578755][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.709658][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 489.725376][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.745002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.770452][T18786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3857'. [ 489.844755][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.967155][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 490.031206][T18786] ip6tnl1: entered allmulticast mode [ 490.145604][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.275061][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.406929][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 490.555163][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 491.227536][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 491.914374][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3874'. [ 492.639665][T18883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'. [ 492.668916][T13441] bridge0: entered promiscuous mode [ 493.426333][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 493.559721][T18916] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 493.631697][T18921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3894'. [ 493.753256][T18925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.776317][T18925] bond2: (slave bond3): making interface the new active one [ 493.790404][T18925] bond2: (slave bond3): Enslaving as an active interface with an up link [ 493.850603][T18939] netlink: 'syz.1.3898': attribute type 2 has an invalid length. [ 493.999103][T18939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'. [ 494.011803][T18946] netlink: 'syz.3.3899': attribute type 4 has an invalid length. [ 494.023531][T18946] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3899'. [ 494.945100][ C1] net_ratelimit: 26 callbacks suppressed [ 494.945122][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.037426][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.046785][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'. [ 495.165611][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.297925][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.415392][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.534793][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.646418][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.764785][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.884813][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 495.994796][ T148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.189150][T18991] ip6tnl0: Caught tx_queue_len zero misconfig [ 498.079722][T18968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.291320][T19039] netlink: 'syz.4.3921': attribute type 29 has an invalid length. [ 498.326288][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3921'. [ 499.192163][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 499.257720][T13455] IPVS: starting estimator thread 0... [ 499.375811][T19083] IPVS: using max 24 ests per chain, 57600 per kthread [ 499.408185][T19084] syzkaller0: entered promiscuous mode [ 499.413816][T19084] syzkaller0: entered allmulticast mode [ 499.578682][T19101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3941'. [ 499.650544][T19103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3941'. [ 499.674387][T16566] block nbd64: NBD_DISCONNECT [ 499.686615][T19103] nbd: device at index 64 is going down [ 500.024930][ T1336] net_ratelimit: 35 callbacks suppressed [ 500.024953][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.154929][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.215574][T16000] udevd[16000]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.437767][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3947'. [ 501.195099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.592638][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.235073][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.226379][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.265091][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.335213][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.456304][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.584874][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.705401][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.798369][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 503.816987][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 503.849722][T19186] lo: Caught tx_queue_len zero misconfig [ 503.856041][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 503.856072][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 503.984154][T19193] netlink: 'syz.3.3966': attribute type 10 has an invalid length. [ 504.008122][T19193] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3966'. [ 504.013260][T19188] lo speed is unknown, defaulting to 1000 [ 504.095937][T19188] lo speed is unknown, defaulting to 1000 [ 504.103095][T19194] syzkaller0: entered promiscuous mode [ 504.123728][T19194] syzkaller0: entered allmulticast mode [ 504.152089][T19188] lo speed is unknown, defaulting to 1000 [ 504.420753][T19204] syzkaller0: entered promiscuous mode [ 504.427647][T19204] syzkaller0: entered allmulticast mode [ 504.857624][T19188] infiniband sqz0: set down [ 504.863418][T19188] infiniband sqz0: added lo [ 504.895976][T19188] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 504.911804][T19188] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 504.929354][T19188] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 504.971201][T19188] RDS/IB: sqz0: added [ 504.976923][T19188] smc: adding ib device sqz0 with port count 1 [ 504.985370][T19188] smc: ib device sqz0 port 1 has no pnetid [ 505.355398][ C1] net_ratelimit: 5 callbacks suppressed [ 505.355420][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.903401][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'. [ 506.394918][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.425786][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.131128][T13441] lo speed is unknown, defaulting to 1000 [ 508.152005][T19229] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 508.194715][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.213068][T13449] lo speed is unknown, defaulting to 1000 [ 508.237025][T19188] lo speed is unknown, defaulting to 1000 [ 508.317569][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.455445][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.464853][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.604823][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.724742][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.834987][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.906708][T19267] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 508.943263][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 508.975100][T19267] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 509.024370][T19188] lo speed is unknown, defaulting to 1000 [ 509.122622][T19273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.211354][T19273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.329821][T19254] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.673973][T19285] syzkaller0: entered promiscuous mode [ 509.694053][T19285] syzkaller0: entered allmulticast mode [ 509.719669][ T12] syzkaller0: tun_net_xmit 70 [ 509.726645][ T12] syzkaller0: tun_net_xmit 14 [ 509.759035][T19289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.810539][T19188] lo speed is unknown, defaulting to 1000 [ 510.045021][T19301] macvtap1: entered allmulticast mode [ 510.051636][T19301] veth0_to_bridge: entered allmulticast mode [ 510.072861][T19301] veth0_to_bridge: left allmulticast mode [ 510.375123][ T6735] net_ratelimit: 9 callbacks suppressed [ 510.375142][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.494012][T19188] lo speed is unknown, defaulting to 1000 [ 510.524999][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.545243][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.644806][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.756243][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.765800][T19323] netlink: 316 bytes leftover after parsing attributes in process `syz.0.4006'. [ 510.885261][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.941913][T19324] lo speed is unknown, defaulting to 1000 [ 510.996357][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.115344][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.237634][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.358243][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.398800][T19344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4012'. [ 511.523920][T19346] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4014'. [ 511.789939][T19188] lo speed is unknown, defaulting to 1000 [ 511.896756][T19357] netlink: 'syz.3.4016': attribute type 4 has an invalid length. [ 511.916368][T19357] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4016'. [ 511.946861][T19360] pimreg0: tun_chr_ioctl cmd 1074025681 [ 512.085536][T19364] netlink: 'syz.3.4016': attribute type 2 has an invalid length. [ 512.119775][T19364] netlink: 'syz.3.4016': attribute type 2 has an invalid length. [ 512.212332][T19361] bond1: Removing last arp target with arp_interval on [ 512.415033][T19188] lo speed is unknown, defaulting to 1000 [ 512.460563][T19369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4018'. [ 512.596011][T19372] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 512.606346][T19372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4020'. [ 512.644009][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4019'. [ 513.047947][T19188] lo speed is unknown, defaulting to 1000 [ 513.382098][T19188] lo speed is unknown, defaulting to 1000 [ 513.663884][T19188] lo speed is unknown, defaulting to 1000 [ 513.927846][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4027'. [ 514.072006][T19188] lo speed is unknown, defaulting to 1000 [ 514.079771][T19414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4028'. [ 514.371703][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4029'. [ 514.728808][T19434] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 515.330682][T19459] veth0_vlan: entered allmulticast mode [ 515.433122][ T1336] net_ratelimit: 38 callbacks suppressed [ 515.433147][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.521534][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4037'. [ 515.744837][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.754867][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.762135][T19477] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4040'. [ 515.865266][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.986921][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.117465][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.245590][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.389727][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.493094][T19492] netlink: 'syz.2.4043': attribute type 12 has an invalid length. [ 516.794872][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.805398][ T148] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.836071][ T148] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.921250][ T148] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.974552][ T148] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.329153][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 517.866669][T19545] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4053'. [ 517.929115][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4052'. [ 518.265273][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 518.317843][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 518.365269][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 520.697223][T19601] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4063'. [ 520.713913][T19601] net_ratelimit: 8 callbacks suppressed [ 520.713937][T19601] openvswitch: netlink: Message has 4112 unknown bytes. [ 520.958111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.653733][ T8397] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.676837][ T8397] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.713527][ T8397] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.738942][ T8397] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.754750][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.850750][T19622] openvswitch: netlink: Key type 142 is out of range max 32 [ 521.878834][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4070'. [ 521.900492][T19622] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4070'. [ 521.921432][T19622] tipc: Invalid UDP bearer configuration [ 521.921496][T19622] tipc: Enabling of bearer rejected, failed to enable media [ 521.971368][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.985190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.035588][T19627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4071'. [ 522.087428][T19633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.105538][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.140889][T19627] IPVS: sh: FWM 3 0x00000003 - no destination available [ 522.235031][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.280125][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4073'. [ 522.299497][T19638] netlink: 'syz.0.4073': attribute type 18 has an invalid length. [ 522.412252][T19644] xfrm1: entered allmulticast mode [ 522.769026][T19658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4078'. [ 522.949938][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4081'. [ 524.568016][T19701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4091'. [ 524.788059][T19710] syzkaller0: entered promiscuous mode [ 524.815055][T19710] syzkaller0: entered allmulticast mode [ 524.896789][T19710] tipc: Enabled bearer , priority 0 [ 524.911648][T19709] tipc: Resetting bearer [ 524.973098][T19709] tipc: Disabling bearer [ 524.982683][T19724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4094'. [ 525.104234][T19726] netem: change failed [ 525.608875][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 525.709122][T19756] dvmrp8: entered allmulticast mode [ 525.755470][ T13] net_ratelimit: 31 callbacks suppressed [ 525.755494][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 525.924813][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.046159][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.144880][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.226381][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.395400][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.525196][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.540836][T19795] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 526.665658][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.795631][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 526.870197][T19809] __nla_validate_parse: 1 callbacks suppressed [ 526.870220][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4113'. [ 526.925035][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.577588][T19836] netlink: 'syz.0.4118': attribute type 1 has an invalid length. [ 527.602755][T19836] netlink: 'syz.0.4118': attribute type 3 has an invalid length. [ 527.640621][T19836] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4118'. [ 527.655523][T19836] NCSI netlink: No device for ifindex 813332851 [ 528.494923][T19871] xt_bpf: check failed: parse error [ 528.591985][T19878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 528.692117][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4127'. [ 528.789410][T19880] netem: change failed [ 529.029347][T19891] netlink: 'syz.3.4128': attribute type 6 has an invalid length. [ 529.073007][T19891] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.329067][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 529.552064][T19904] syzkaller0: entered promiscuous mode [ 529.570309][T19904] syzkaller0: entered allmulticast mode [ 530.846504][ T48] net_ratelimit: 37 callbacks suppressed [ 530.846527][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 530.995192][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.125062][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.257097][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.344928][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.395704][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.441689][T19983] Cannot find set identified by id 65534 to match [ 531.558865][T19986] veth0_vlan: left allmulticast mode [ 531.604183][T19986] xfrm1: left allmulticast mode [ 531.629540][T19987] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4138'. [ 531.857131][T19999] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4149'. [ 531.926835][T20000] netlink: 'syz.3.4149': attribute type 13 has an invalid length. [ 531.947441][T20000] netlink: 'syz.3.4149': attribute type 17 has an invalid length. [ 532.210235][T20006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4152'. [ 532.224164][T20000] gretap0: refused to change device tx_queue_len [ 532.231909][T20000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 532.316238][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.394852][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.441046][T20015] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4156'. [ 532.458326][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.852750][T20039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4161'. [ 533.174430][T20053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4165'. [ 533.411878][T20067] xt_cgroup: path and classid specified [ 533.493819][T20075] xt_cgroup: path and classid specified [ 533.558511][T20081] netlink: 'syz.4.4172': attribute type 1 has an invalid length. [ 533.928105][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4180'. [ 533.955666][T20101] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4180'. [ 533.975724][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4180'. [ 533.991492][T20101] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4180'. [ 534.013640][T13458] IPVS: starting estimator thread 0... [ 534.104808][T20103] IPVS: using max 28 ests per chain, 67200 per kthread [ 534.385296][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 534.482447][T20109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4183'. [ 534.492981][T20109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4183'. [ 535.271111][T20142] Bluetooth: MGMT ver 1.23 [ 535.905050][ T8397] net_ratelimit: 32 callbacks suppressed [ 535.905074][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 536.546574][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.035005][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.147898][T20170] lo speed is unknown, defaulting to 1000 [ 537.157237][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.294700][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.345575][ T5645] Bluetooth: hci2: command 0x0405 tx timeout [ 537.353679][ T5632] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 537.383799][T20191] netlink: 'syz.0.4209': attribute type 1 has an invalid length. [ 537.404766][T20191] __nla_validate_parse: 3 callbacks suppressed [ 537.404789][T20191] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4209'. [ 537.421591][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.554706][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.594873][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.674769][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.731043][T20184] lo speed is unknown, defaulting to 1000 [ 537.945823][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 538.757275][T20246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4223'. [ 538.910320][T20253] netlink: 'syz.3.4227': attribute type 1 has an invalid length. [ 539.118258][T20253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.137013][T20260] bond4: (slave ip6gretap1): making interface the new active one [ 539.146205][T20260] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 540.458221][T20272] syzkaller0: entered promiscuous mode [ 540.463841][T20272] syzkaller0: entered allmulticast mode [ 540.925020][ T8397] net_ratelimit: 23 callbacks suppressed [ 540.925044][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.045135][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.155230][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.268272][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.385275][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.437224][T20239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.494728][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.560684][T20275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4232'. [ 541.636681][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.683123][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4233'. [ 541.744891][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.784817][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.832509][T20287] geneve2: entered promiscuous mode [ 541.863287][T20287] geneve2: entered allmulticast mode [ 541.999639][T20296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4241'. [ 542.198154][T20298] vxcan2: entered allmulticast mode [ 542.215572][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.241441][T20308] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4242'. [ 542.310829][T20310] syzkaller0: entered promiscuous mode [ 542.325576][T20310] syzkaller0: entered allmulticast mode [ 542.366895][T20310] tipc: Enabled bearer , priority 0 [ 542.440218][T20309] tipc: Resetting bearer [ 542.486102][T20309] tipc: Disabling bearer [ 542.501814][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4247'. [ 542.610985][T20281] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 542.683657][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 542.718911][T20324] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.4249'. [ 543.091665][T20344] batman_adv: batadv0: Adding interface: dummy0 [ 543.111136][T20344] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.284751][T20344] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 543.554996][ T810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.605422][ T6734] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.695875][ T810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.765554][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 544.555164][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 544.626738][ T6740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.698852][ T6740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.915659][ T810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 545.154848][T20394] syz_tun: entered allmulticast mode [ 545.240414][T20395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4267'. [ 545.429156][T20393] syz_tun: left allmulticast mode [ 545.432777][T20405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4270'. [ 545.536349][T20402] lo speed is unknown, defaulting to 1000 [ 545.626507][T20412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4273'. [ 545.896808][T20418] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4274'. [ 545.975246][ T6740] net_ratelimit: 30 callbacks suppressed [ 545.975270][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 546.139554][T20417] vlan3: entered promiscuous mode [ 546.157737][T20417] gretap0: entered promiscuous mode [ 546.275412][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 546.419418][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 546.657085][T20434] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4279'. [ 546.705534][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 546.944841][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.075154][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.218075][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.357528][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.496150][ T6734] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.636079][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 548.667887][T20486] syzkaller0: entered promiscuous mode [ 548.689121][T20486] syzkaller0: entered allmulticast mode [ 549.025074][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 549.156646][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4293'. [ 549.237877][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4293'. [ 549.394285][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 549.446672][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 549.934240][T20531] syzkaller0: entered promiscuous mode [ 549.940929][T20531] syzkaller0: entered allmulticast mode [ 550.000429][T20535] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4307'. [ 550.001940][T20541] tipc: Enabled bearer , priority 0 [ 550.022116][T20541] syzkaller0: entered promiscuous mode [ 550.029936][T20541] syzkaller0: entered allmulticast mode [ 550.039080][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 550.092804][T20541] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4308'. [ 550.104533][T20543] Unsupported ieee802154 address type: 0 [ 550.121718][T20541] tipc: Resetting bearer [ 550.128660][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 550.148552][T20538] tipc: Resetting bearer [ 550.200273][T20538] tipc: Disabling bearer [ 550.520035][T20561] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4314'. [ 550.713174][T20566] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4316'. [ 550.984833][ T35] net_ratelimit: 24 callbacks suppressed [ 550.984857][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.104820][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.117880][T20587] netlink: 'syz.1.4325': attribute type 13 has an invalid length. [ 551.126031][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.354474][T20596] netlink: 'syz.3.4327': attribute type 4 has an invalid length. [ 551.365476][T20596] netlink: 'syz.3.4327': attribute type 1 has an invalid length. [ 551.385273][T20599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.434955][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.545008][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.665948][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 551.874828][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.005480][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.022602][T20629] sctp: [Deprecated]: syz.4.4335 (pid 20629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.022602][T20629] Use struct sctp_sack_info instead [ 552.114810][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.148763][T20673] gretap0: entered promiscuous mode [ 553.160094][T20673] gretap0: left promiscuous mode [ 553.361439][T20679] vlan0: entered promiscuous mode [ 554.989456][T20737] FAULT_INJECTION: forcing a failure. [ 554.989456][T20737] name failslab, interval 1, probability 0, space 0, times 0 [ 555.022196][T20737] CPU: 1 UID: 0 PID: 20737 Comm: syz.3.4367 Not tainted syzkaller #0 PREEMPT(full) [ 555.022226][T20737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.022237][T20737] Call Trace: [ 555.022246][T20737] [ 555.022254][T20737] dump_stack_lvl+0xe8/0x150 [ 555.022286][T20737] should_fail_ex+0x412/0x560 [ 555.022319][T20737] should_failslab+0xa8/0x100 [ 555.022372][T20737] __kmalloc_noprof+0xe8/0x760 [ 555.022401][T20737] ? security_sk_alloc+0x52/0x360 [ 555.022427][T20737] security_sk_alloc+0x52/0x360 [ 555.022449][T20737] sk_prot_alloc+0x101/0x210 [ 555.022476][T20737] ? sk_alloc+0x27/0x390 [ 555.022505][T20737] sk_alloc+0x3a/0x390 [ 555.022537][T20737] __netlink_create+0x65/0x260 [ 555.022567][T20737] ? __pfx_genl_release+0x10/0x10 [ 555.022589][T20737] netlink_create+0x3ca/0x590 [ 555.022609][T20737] ? __pfx_genl_unbind+0x10/0x10 [ 555.022629][T20737] ? __pfx_genl_bind+0x10/0x10 [ 555.022653][T20737] __sock_create+0x4b2/0x9d0 [ 555.022689][T20737] __sys_socket+0xd6/0x1b0 [ 555.022714][T20737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.022736][T20737] __x64_sys_socket+0x7a/0x90 [ 555.022762][T20737] do_syscall_64+0x15f/0xf80 [ 555.022781][T20737] ? trace_irq_disable+0x3b/0x140 [ 555.022810][T20737] ? clear_bhb_loop+0x40/0x90 [ 555.022835][T20737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.022854][T20737] RIP: 0033:0x7fd7cf59e647 [ 555.022874][T20737] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.022891][T20737] RSP: 002b:00007fd7d03b2f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 555.022914][T20737] RAX: ffffffffffffffda RBX: 00007fd7cf815fa0 RCX: 00007fd7cf59e647 [ 555.022929][T20737] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 555.022941][T20737] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 555.022953][T20737] R10: 0000200000000300 R11: 0000000000000286 R12: 0000000000000001 [ 555.022965][T20737] R13: 00007fd7cf816038 R14: 00007fd7cf815fa0 R15: 00007ffdd6692088 [ 555.023000][T20737] [ 555.451842][T20756] __nla_validate_parse: 14 callbacks suppressed [ 555.451863][T20756] netlink: 174584 bytes leftover after parsing attributes in process `syz.2.4374'. [ 555.529918][T20758] xt_hashlimit: size too large, truncated to 1048576 [ 555.661628][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4376'. [ 555.788597][T20768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4377'. [ 555.904211][T20771] netlink: 'syz.4.4378': attribute type 6 has an invalid length. [ 555.934364][T20771] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4378'. [ 555.976525][T20773] netlink: 'syz.2.4379': attribute type 1 has an invalid length. [ 555.998234][ T8397] net_ratelimit: 30 callbacks suppressed [ 555.998259][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.020316][T20773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4379'. [ 556.091119][T13458] bridge0: entered promiscuous mode [ 556.145735][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.256920][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.304883][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.386065][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.477880][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4382'. [ 556.504770][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.616018][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.748580][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.866079][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 556.987465][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.183944][T20807] ip6gre3: entered promiscuous mode [ 557.190862][T20807] ip6gre3: entered allmulticast mode [ 557.210516][T20807] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 557.246941][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4387'. [ 557.910085][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 557.923190][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 557.945384][ T811] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 558.635174][ T811] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 558.785680][ T811] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 559.081442][T20783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.315804][T20817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4389'. [ 559.497387][T20825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4391'. [ 559.599788][T20830] syzkaller1: entered promiscuous mode [ 559.610999][T20830] syzkaller1: entered allmulticast mode [ 559.848533][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4399'. [ 560.354929][T20871] FAULT_INJECTION: forcing a failure. [ 560.354929][T20871] name failslab, interval 1, probability 0, space 0, times 0 [ 560.373549][T20873] syzkaller0: entered promiscuous mode [ 560.380671][T20873] syzkaller0: entered allmulticast mode [ 560.408072][T20871] CPU: 1 UID: 0 PID: 20871 Comm: syz.3.4406 Not tainted syzkaller #0 PREEMPT(full) [ 560.408102][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.408115][T20871] Call Trace: [ 560.408123][T20871] [ 560.408132][T20871] dump_stack_lvl+0xe8/0x150 [ 560.408163][T20871] should_fail_ex+0x412/0x560 [ 560.408197][T20871] should_failslab+0xa8/0x100 [ 560.408228][T20871] ? security_file_alloc+0x34/0x310 [ 560.408251][T20871] kmem_cache_alloc_noprof+0x87/0x650 [ 560.408277][T20871] ? rcu_is_watching+0x15/0xb0 [ 560.408303][T20871] ? trace_kmem_cache_alloc+0x29/0xe0 [ 560.408346][T20871] security_file_alloc+0x34/0x310 [ 560.408370][T20871] init_file+0x90/0x2b0 [ 560.408397][T20871] alloc_empty_file+0x74/0x1d0 [ 560.408422][T20871] alloc_file_pseudo+0x155/0x240 [ 560.408451][T20871] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 560.408473][T20871] ? do_raw_spin_unlock+0xf5/0x210 [ 560.408507][T20871] ? _raw_spin_unlock+0x28/0x50 [ 560.408544][T20871] sock_alloc_file+0xb8/0x2e0 [ 560.408566][T20871] ? __sys_socket+0x12b/0x1b0 [ 560.408594][T20871] __sys_socket+0x13c/0x1b0 [ 560.408620][T20871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.408643][T20871] __x64_sys_socket+0x7a/0x90 [ 560.408671][T20871] do_syscall_64+0x15f/0xf80 [ 560.408689][T20871] ? trace_irq_disable+0x3b/0x140 [ 560.408720][T20871] ? clear_bhb_loop+0x40/0x90 [ 560.408745][T20871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.408766][T20871] RIP: 0033:0x7fd7cf59e647 [ 560.408785][T20871] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.408803][T20871] RSP: 002b:00007fd7d03b2f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 560.408826][T20871] RAX: ffffffffffffffda RBX: 00007fd7cf815fa0 RCX: 00007fd7cf59e647 [ 560.408841][T20871] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 560.408853][T20871] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 560.408865][T20871] R10: 0000200000000300 R11: 0000000000000286 R12: 0000000000000001 [ 560.408879][T20871] R13: 00007fd7cf816038 R14: 00007fd7cf815fa0 R15: 00007ffdd6692088 [ 560.408926][T20871] [ 560.928515][T20891] lo speed is unknown, defaulting to 1000 [ 561.134807][T20911] __nla_validate_parse: 4 callbacks suppressed [ 561.134829][T20911] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4414'. [ 561.574797][ T6736] net_ratelimit: 32 callbacks suppressed [ 561.574821][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 561.618698][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4418'. [ 561.663119][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4418'. [ 561.672535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.881120][T20928] FAULT_INJECTION: forcing a failure. [ 561.881120][T20928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.898885][T20928] CPU: 0 UID: 0 PID: 20928 Comm: syz.2.4421 Not tainted syzkaller #0 PREEMPT(full) [ 561.898914][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.898925][T20928] Call Trace: [ 561.898933][T20928] [ 561.898942][T20928] dump_stack_lvl+0xe8/0x150 [ 561.898973][T20928] should_fail_ex+0x412/0x560 [ 561.899024][T20928] _copy_from_user+0x2d/0xb0 [ 561.899062][T20928] __sys_sendto+0x2b0/0x710 [ 561.899093][T20928] ? __pfx___sys_sendto+0x10/0x10 [ 561.899150][T20928] ? exc_page_fault+0x6a/0xc0 [ 561.899185][T20928] ? do_user_addr_fault+0xc6f/0x1340 [ 561.899213][T20928] __x64_sys_sendto+0xde/0x100 [ 561.899241][T20928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.899265][T20928] do_syscall_64+0x15f/0xf80 [ 561.899282][T20928] ? trace_irq_disable+0x3b/0x140 [ 561.899312][T20928] ? clear_bhb_loop+0x40/0x90 [ 561.899338][T20928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.899357][T20928] RIP: 0033:0x7f4c40b5d60e [ 561.899378][T20928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.899396][T20928] RSP: 002b:00007f4c419b7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.899418][T20928] RAX: ffffffffffffffda RBX: 00007f4c419b96c0 RCX: 00007f4c40b5d60e [ 561.899433][T20928] RDX: 0000000000000020 RSI: 00007f4c419b8000 RDI: 0000000000000007 [ 561.899446][T20928] RBP: 0000000000000000 R08: 00007f4c419b7f04 R09: 000000000000000c [ 561.899459][T20928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 561.899471][T20928] R13: 00007f4c419b7f58 R14: 00007f4c419b8000 R15: 0000000000000000 [ 561.899505][T20928] [ 562.144808][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 562.180949][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.275964][T20938] syzkaller0: entered promiscuous mode [ 562.354669][T20938] syzkaller0: entered allmulticast mode [ 562.407813][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.529753][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.546887][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4423'. [ 562.645000][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.704946][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.756994][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.792544][T20953] tipc: Enabled bearer , priority 10 [ 562.820711][T20954] tipc: Enabling of bearer rejected, already enabled [ 562.884932][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.996322][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 563.037343][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.263657][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4431'. [ 563.283252][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4431'. [ 563.579815][T20977] syzkaller0: entered promiscuous mode [ 563.595500][T20977] syzkaller0: entered allmulticast mode [ 563.905156][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 563.907254][T13458] tipc: Node number set to 2822256286 [ 563.928456][T20989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4438'. [ 563.976559][T20994] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4440'. [ 564.186430][T20999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4442'. [ 564.196315][T21001] netlink: 'syz.4.4443': attribute type 1 has an invalid length. [ 564.199426][T21002] netlink: 'syz.4.4443': attribute type 1 has an invalid length. [ 565.040987][T21040] ip6gre1: entered promiscuous mode [ 565.049230][T21040] ip6gre1: entered allmulticast mode [ 566.336885][T21093] __nla_validate_parse: 8 callbacks suppressed [ 566.336907][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4473'. [ 566.412209][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 566.447195][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 566.544201][T21091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.604217][T21116] FAULT_INJECTION: forcing a failure. [ 566.604217][T21116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.644870][T21116] CPU: 0 UID: 0 PID: 21116 Comm: syz.3.4479 Not tainted syzkaller #0 PREEMPT(full) [ 566.644899][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.644909][T21116] Call Trace: [ 566.644916][T21116] [ 566.644924][T21116] dump_stack_lvl+0xe8/0x150 [ 566.644953][T21116] should_fail_ex+0x412/0x560 [ 566.644981][T21116] _copy_from_user+0x2d/0xb0 [ 566.645027][T21116] ___sys_sendmsg+0x1c6/0x360 [ 566.645062][T21116] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.645119][T21116] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.645179][T21116] __sys_sendmmsg+0x27c/0x4e0 [ 566.645216][T21116] ? __pfx___sys_sendmmsg+0x10/0x10 [ 566.645244][T21116] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 566.645303][T21116] ? ksys_write+0x242/0x270 [ 566.645335][T21116] ? __pfx_ksys_write+0x10/0x10 [ 566.645371][T21116] __x64_sys_sendmmsg+0xa0/0xc0 [ 566.645402][T21116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.645423][T21116] do_syscall_64+0x15f/0xf80 [ 566.645441][T21116] ? trace_irq_disable+0x3b/0x140 [ 566.645472][T21116] ? clear_bhb_loop+0x40/0x90 [ 566.645497][T21116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.645517][T21116] RIP: 0033:0x7fd7cf59cdd9 [ 566.645538][T21116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.645556][T21116] RSP: 002b:00007fd7d03b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 566.645580][T21116] RAX: ffffffffffffffda RBX: 00007fd7cf815fa0 RCX: 00007fd7cf59cdd9 [ 566.645595][T21116] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 566.645608][T21116] RBP: 00007fd7d03b4090 R08: 0000000000000000 R09: 0000000000000000 [ 566.645621][T21116] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 566.645633][T21116] R13: 00007fd7cf816038 R14: 00007fd7cf815fa0 R15: 00007ffdd6692088 [ 566.645667][T21116] [ 566.865408][ C1] net_ratelimit: 26 callbacks suppressed [ 566.865431][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.896669][T21119] netlink: 'syz.3.4480': attribute type 30 has an invalid length. [ 567.914635][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.954891][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 569.984878][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.054295][T21091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.085716][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4483'. [ 570.123111][T21147] netlink: 205696 bytes leftover after parsing attributes in process `syz.3.4483'. [ 570.175337][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 570.342032][T21091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.445451][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 570.493139][T21163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4492'. [ 570.611458][T21091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.744891][T21169] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 570.770059][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4495'. [ 570.785428][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 570.822463][T21174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4496'. [ 570.895008][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 571.006768][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.024905][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 571.116335][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 571.142739][ T8397] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.187178][ T8397] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.214488][ T8397] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.344847][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 571.453567][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4503'. [ 571.909552][ T6736] net_ratelimit: 6 callbacks suppressed [ 571.909576][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 571.982886][T21205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4504'. [ 572.047208][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 572.064903][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.196115][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 572.361744][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4509'. [ 572.652711][T21227] netlink: 'syz.3.4512': attribute type 1 has an invalid length. [ 573.115271][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 574.165429][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 575.195294][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.245277][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.463544][T21229] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.4506'. [ 576.655512][ T6735] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 576.835616][T21249] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4515'. [ 576.959490][T21256] FAULT_INJECTION: forcing a failure. [ 576.959490][T21256] name failslab, interval 1, probability 0, space 0, times 0 [ 576.972806][T21256] CPU: 0 UID: 0 PID: 21256 Comm: syz.1.4518 Not tainted syzkaller #0 PREEMPT(full) [ 576.972834][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.972847][T21256] Call Trace: [ 576.972855][T21256] [ 576.972862][T21256] dump_stack_lvl+0xe8/0x150 [ 576.972892][T21256] should_fail_ex+0x412/0x560 [ 576.972924][T21256] should_failslab+0xa8/0x100 [ 576.972954][T21256] __kmalloc_cache_noprof+0x88/0x660 [ 576.972979][T21256] ? blocking_notifier_call_chain+0x54/0x90 [ 576.973004][T21256] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 576.973026][T21256] ? blocking_notifier_call_chain+0x54/0x90 [ 576.973055][T21256] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 576.973083][T21256] notifier_call_chain+0x1ad/0x3d0 [ 576.973119][T21256] blocking_notifier_call_chain+0x6a/0x90 [ 576.973145][T21256] netlink_release+0x123b/0x1ad0 [ 576.973170][T21256] ? netlink_release+0x101/0x1ad0 [ 576.973187][T21256] ? __pfx_netlink_release+0x10/0x10 [ 576.973211][T21256] ? down_write+0x16d/0x200 [ 576.973224][T21256] ? __pfx_down_write+0x10/0x10 [ 576.973236][T21256] ? locks_remove_posix+0x14f/0x6a0 [ 576.973260][T21256] sock_close+0xc3/0x240 [ 576.973275][T21256] ? __pfx_sock_close+0x10/0x10 [ 576.973288][T21256] __fput+0x44f/0xa60 [ 576.973310][T21256] fput_close_sync+0x11f/0x240 [ 576.973325][T21256] ? __pfx_fput_close_sync+0x10/0x10 [ 576.973343][T21256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.973357][T21256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.973369][T21256] __x64_sys_close+0x7e/0x110 [ 576.973385][T21256] do_syscall_64+0x15f/0xf80 [ 576.973396][T21256] ? trace_irq_disable+0x3b/0x140 [ 576.973414][T21256] ? clear_bhb_loop+0x40/0x90 [ 576.973429][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.973441][T21256] RIP: 0033:0x7fc764b5d60e [ 576.973455][T21256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 576.973466][T21256] RSP: 002b:00007fc7659cff38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 576.973482][T21256] RAX: ffffffffffffffda RBX: 00007fc7659d16c0 RCX: 00007fc764b5d60e [ 576.973497][T21256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 576.973508][T21256] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 576.973519][T21256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.973531][T21256] R13: 00007fc764e16038 R14: 00007fc764e15fa0 R15: 00007ffdd5047208 [ 576.973566][T21256] [ 577.264872][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.306942][T21257] veth0: entered promiscuous mode [ 577.334099][T21258] bond0: entered promiscuous mode [ 577.388617][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 577.464513][T21258] bond0: left promiscuous mode [ 577.482886][T21258] veth0: left promiscuous mode [ 577.525195][ T6740] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 577.655893][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 577.797234][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 577.926195][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 578.047351][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 578.174694][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 578.188495][T21296] syzkaller0: entered promiscuous mode [ 578.204713][T21296] syzkaller0: entered allmulticast mode [ 578.272849][T21302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4533'. [ 578.304904][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.353387][T21304] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 578.398147][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 578.563441][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4537'. [ 578.592079][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4537'. [ 578.910871][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 579.440164][T21356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4544'. [ 579.756812][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4551'. [ 579.785550][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4551'. [ 579.800019][T21374] netlink: 'syz.0.4552': attribute type 5 has an invalid length. [ 579.808624][T21374] netlink: 'syz.0.4552': attribute type 4 has an invalid length. [ 580.064811][T21380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4554'. [ 580.467373][T21395] FAULT_INJECTION: forcing a failure. [ 580.467373][T21395] name failslab, interval 1, probability 0, space 0, times 0 [ 580.510422][T21395] CPU: 1 UID: 0 PID: 21395 Comm: syz.3.4558 Not tainted syzkaller #0 PREEMPT(full) [ 580.510453][T21395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.510466][T21395] Call Trace: [ 580.510473][T21395] [ 580.510481][T21395] dump_stack_lvl+0xe8/0x150 [ 580.510513][T21395] should_fail_ex+0x412/0x560 [ 580.510546][T21395] should_failslab+0xa8/0x100 [ 580.510580][T21395] __kmalloc_cache_noprof+0x88/0x660 [ 580.510608][T21395] ? blocking_notifier_call_chain+0x54/0x90 [ 580.510636][T21395] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 580.510659][T21395] ? blocking_notifier_call_chain+0x54/0x90 [ 580.510690][T21395] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 580.510719][T21395] notifier_call_chain+0x1ad/0x3d0 [ 580.510754][T21395] blocking_notifier_call_chain+0x6a/0x90 [ 580.510784][T21395] netlink_release+0x123b/0x1ad0 [ 580.510825][T21395] ? netlink_release+0x101/0x1ad0 [ 580.510855][T21395] ? __pfx_netlink_release+0x10/0x10 [ 580.510890][T21395] ? down_write+0x16d/0x200 [ 580.510921][T21395] ? __pfx_down_write+0x10/0x10 [ 580.510941][T21395] ? locks_remove_posix+0x14f/0x6a0 [ 580.510984][T21395] sock_close+0xc3/0x240 [ 580.511008][T21395] ? __pfx_sock_close+0x10/0x10 [ 580.511031][T21395] __fput+0x44f/0xa60 [ 580.511069][T21395] fput_close_sync+0x11f/0x240 [ 580.511095][T21395] ? __pfx_fput_close_sync+0x10/0x10 [ 580.511125][T21395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.511150][T21395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.511171][T21395] __x64_sys_close+0x7e/0x110 [ 580.511198][T21395] do_syscall_64+0x15f/0xf80 [ 580.511216][T21395] ? trace_irq_disable+0x3b/0x140 [ 580.511246][T21395] ? clear_bhb_loop+0x40/0x90 [ 580.511278][T21395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.511298][T21395] RIP: 0033:0x7fd7cf55d60e [ 580.511320][T21395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.511338][T21395] RSP: 002b:00007fd7d03b2f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 580.511360][T21395] RAX: ffffffffffffffda RBX: 00007fd7d03b46c0 RCX: 00007fd7cf55d60e [ 580.511375][T21395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 580.511387][T21395] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 580.511399][T21395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.511411][T21395] R13: 00007fd7cf816038 R14: 00007fd7cf815fa0 R15: 00007ffdd6692088 [ 580.511448][T21395] [ 581.332981][T21428] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 581.367069][T21428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.394090][T21433] netlink: 'syz.3.4568': attribute type 11 has an invalid length. [ 581.578624][T21439] __nla_validate_parse: 6 callbacks suppressed [ 581.578645][T21439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4571'. [ 581.646539][T21436] lo speed is unknown, defaulting to 1000 [ 582.197381][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 582.374895][ T136] net_ratelimit: 37 callbacks suppressed [ 582.374917][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 582.475015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.525586][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 582.647183][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 582.765901][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 583.014868][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 583.146183][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 583.275306][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 583.319121][T21500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4586'. [ 583.396549][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 583.444417][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4587'. [ 583.482227][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4587'. [ 583.506697][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 583.538306][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4589'. [ 583.720339][T21514] tipc: Enabling of bearer rejected, failed to enable media [ 583.894107][T21522] FAULT_INJECTION: forcing a failure. [ 583.894107][T21522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.978022][T21522] CPU: 1 UID: 0 PID: 21522 Comm: syz.4.4593 Not tainted syzkaller #0 PREEMPT(full) [ 583.978052][T21522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.978064][T21522] Call Trace: [ 583.978073][T21522] [ 583.978082][T21522] dump_stack_lvl+0xe8/0x150 [ 583.978114][T21522] should_fail_ex+0x412/0x560 [ 583.978147][T21522] _copy_to_user+0x31/0xb0 [ 583.978181][T21522] simple_read_from_buffer+0xe1/0x170 [ 583.978212][T21522] proc_fail_nth_read+0x1bb/0x230 [ 583.978243][T21522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.978274][T21522] ? rw_verify_area+0x2a6/0x4d0 [ 583.978302][T21522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.978331][T21522] vfs_read+0x20c/0xa70 [ 583.978366][T21522] ? __pfx___mutex_lock+0x10/0x10 [ 583.978389][T21522] ? __pfx_vfs_read+0x10/0x10 [ 583.978420][T21522] ? __fget_files+0x2a/0x420 [ 583.978451][T21522] ? __fget_files+0x3a0/0x420 [ 583.978474][T21522] ? __fget_files+0x2a/0x420 [ 583.978509][T21522] ksys_read+0x150/0x270 [ 583.978542][T21522] ? __pfx_ksys_read+0x10/0x10 [ 583.978581][T21522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.978603][T21522] do_syscall_64+0x15f/0xf80 [ 583.978621][T21522] ? trace_irq_disable+0x3b/0x140 [ 583.978652][T21522] ? clear_bhb_loop+0x40/0x90 [ 583.978678][T21522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.978699][T21522] RIP: 0033:0x7f833eb5d60e [ 583.978720][T21522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.978737][T21522] RSP: 002b:00007f833fb3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.978761][T21522] RAX: ffffffffffffffda RBX: 00007f833fb3e6c0 RCX: 00007f833eb5d60e [ 583.978776][T21522] RDX: 000000000000000f RSI: 00007f833fb3e0a0 RDI: 0000000000000006 [ 583.978789][T21522] RBP: 00007f833fb3e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.978807][T21522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.978819][T21522] R13: 00007f833ee16038 R14: 00007f833ee15fa0 R15: 00007fff091d7a08 [ 583.978856][T21522] [ 584.258039][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 584.267171][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 584.276490][T21528] netlink: 304 bytes leftover after parsing attributes in process `syz.2.4596'. [ 584.435952][T21531] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 584.443864][T21531] netlink: 'syz.3.4595': attribute type 2 has an invalid length. [ 584.679360][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4600'. [ 584.690784][T21542] syzkaller0: entered promiscuous mode [ 584.700185][T21542] syzkaller0: entered allmulticast mode [ 584.780537][T21542] tipc: Enabling of bearer rejected, failed to enable media [ 584.906516][T21553] syzkaller0: entered promiscuous mode [ 584.922460][T21553] syzkaller0: entered allmulticast mode [ 584.957723][T21553] tipc: Enabled bearer , priority 0 [ 584.989011][T21550] tipc: Resetting bearer [ 585.080960][T21550] tipc: Disabling bearer [ 586.442260][T21593] syzkaller0: entered promiscuous mode [ 586.463009][T21593] syzkaller0: entered allmulticast mode [ 586.588361][T21600] __nla_validate_parse: 3 callbacks suppressed [ 586.588385][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 586.665878][T21597] tipc: Enabled bearer , priority 0 [ 586.701071][T21591] tipc: Resetting bearer [ 586.788225][T21591] tipc: Disabling bearer [ 586.825674][T21603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4620'. [ 586.863241][T21603] bond0: entered promiscuous mode [ 586.896667][T21603] bond0: left promiscuous mode [ 587.406012][ T136] net_ratelimit: 30 callbacks suppressed [ 587.406034][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 587.519266][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4625'. [ 587.534865][T21623] nbd3: detected capacity change from 0 to 63 [ 587.555111][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 587.565100][T21627] block nbd3: NBD_DISCONNECT [ 587.615465][T21627] block nbd3: Disconnected due to user request. [ 587.640895][T21243] blk_print_req_error: 138 callbacks suppressed [ 587.640919][T21243] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.656341][T21627] block nbd3: shutting down sockets [ 587.664876][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 587.675194][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 587.694819][T21243] buffer_io_error: 138 callbacks suppressed [ 587.694839][T21243] Buffer I/O error on dev nbd3, logical block 1, async page read [ 587.746819][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.756067][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 587.768623][ T1764] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 587.779658][ T1764] Buffer I/O error on dev nbd3, logical block 2, async page read [ 587.788205][ T1764] Buffer I/O error on dev nbd3, logical block 3, async page read [ 587.794759][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 587.806418][T21243] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.820931][T21243] Buffer I/O error on dev nbd3, logical block 0, async page read [ 587.862597][T21243] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.885718][T21243] Buffer I/O error on dev nbd3, logical block 1, async page read [ 587.903614][T21243] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.923678][T21243] Buffer I/O error on dev nbd3, logical block 2, async page read [ 587.937831][T21243] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.961104][T21243] Buffer I/O error on dev nbd3, logical block 3, async page read [ 587.993332][T21243] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 588.018811][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 588.027900][ T136] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.046001][T21243] Buffer I/O error on dev nbd3, logical block 0, async page read [ 588.059881][T21243] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 588.076568][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 588.084724][T21243] Buffer I/O error on dev nbd3, logical block 1, async page read [ 588.104964][T21243] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 588.134236][T21243] ldm_validate_partition_table(): Disk read failed. [ 588.146150][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.159610][T21243] Dev nbd3: unable to read RDB block 0 [ 588.174503][T21243] nbd3: unable to read partition table [ 588.197530][T21243] ldm_validate_partition_table(): Disk read failed. [ 588.207807][T21243] Dev nbd3: unable to read RDB block 0 [ 588.217028][T21243] nbd3: unable to read partition table [ 588.228925][T21645] syzkaller0: entered promiscuous mode [ 588.241679][T21645] syzkaller0: entered allmulticast mode [ 588.274041][T21645] tipc: Enabled bearer , priority 0 [ 588.305501][T21644] tipc: Resetting bearer [ 588.348107][T21644] tipc: Disabling bearer [ 588.374761][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.485351][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.573670][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'. [ 588.595281][T21657] netlink: 'syz.1.4636': attribute type 5 has an invalid length. [ 588.611571][T21657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4636'. [ 588.623389][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 588.635172][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 588.665108][T21657] geneve2: entered promiscuous mode [ 588.677269][T21657] geneve2: entered allmulticast mode [ 588.692318][ T8397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 588.717788][ T8397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 588.744436][ T8397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 588.772457][ T8397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 589.149529][T21677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4641'. [ 589.218884][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 589.258857][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 589.417269][T21689] netlink: 'syz.3.4643': attribute type 12 has an invalid length. [ 589.569646][T21693] syzkaller0: entered promiscuous mode [ 589.587277][T21693] syzkaller0: entered allmulticast mode [ 589.657970][T21693] tipc: Enabled bearer , priority 0 [ 589.703757][T21696] ip6gre2: entered promiscuous mode [ 589.726030][T21696] ip6gre2: entered allmulticast mode [ 589.738824][T21691] tipc: Resetting bearer [ 589.765008][T21684] block nbd1: server does not support multiple connections per device. [ 589.811651][T21684] block nbd1: shutting down sockets [ 589.842544][T21691] tipc: Disabling bearer [ 589.894207][T21696] netlink: 'syz.1.4646': attribute type 6 has an invalid length. [ 590.483093][T21715] tipc: Enabling of bearer rejected, failed to enable media [ 590.799094][T21726] lo speed is unknown, defaulting to 1000 [ 591.461926][T21763] netem: change failed [ 591.630475][T21770] ip6tnl1: entered allmulticast mode [ 591.707956][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 591.736482][ T810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 591.744441][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 591.956008][T21784] __nla_validate_parse: 9 callbacks suppressed [ 591.956031][T21784] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4677'. [ 591.995121][ T810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.064098][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4677'. [ 592.115305][ T810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.224126][T21791] FAULT_INJECTION: forcing a failure. [ 592.224126][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 592.265653][T21791] CPU: 1 UID: 0 PID: 21791 Comm: syz.0.4679 Not tainted syzkaller #0 PREEMPT(full) [ 592.265684][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.265696][T21791] Call Trace: [ 592.265704][T21791] [ 592.265713][T21791] dump_stack_lvl+0xe8/0x150 [ 592.265745][T21791] should_fail_ex+0x412/0x560 [ 592.265778][T21791] should_failslab+0xa8/0x100 [ 592.265809][T21791] ? dst_alloc+0x105/0x170 [ 592.265832][T21791] kmem_cache_alloc_noprof+0x87/0x650 [ 592.265856][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.265889][T21791] dst_alloc+0x105/0x170 [ 592.265908][T21791] ? ip_check_mc_rcu+0x400/0x680 [ 592.265950][T21791] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 592.265991][T21791] ? ip_route_output_key_hash+0xd8/0x2a0 [ 592.266016][T21791] ip_route_output_key_hash+0x18d/0x2a0 [ 592.266043][T21791] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 592.266085][T21791] ip_route_output_flow+0x2a/0x150 [ 592.266114][T21791] ? security_sk_classify_flow+0x6d/0x150 [ 592.266140][T21791] udp_sendmsg+0x141a/0x21a0 [ 592.266164][T21791] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 592.266193][T21791] ? rcu_is_watching+0x15/0xb0 [ 592.266229][T21791] ? __pfx_udp_sendmsg+0x10/0x10 [ 592.266276][T21791] ? aa_sk_perm+0x6d5/0x900 [ 592.266311][T21791] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.266334][T21791] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 592.266368][T21791] ? sock_rps_record_flow+0x19/0x350 [ 592.266393][T21791] ? inet_sendmsg+0x29c/0x370 [ 592.266412][T21791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.266444][T21791] ____sys_sendmsg+0x80a/0x9f0 [ 592.266475][T21791] ? __might_fault+0xaf/0x130 [ 592.266509][T21791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.266551][T21791] ? import_iovec+0x73/0xa0 [ 592.266584][T21791] ___sys_sendmsg+0x2a5/0x360 [ 592.266622][T21791] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.266649][T21791] ? __lock_acquire+0x6b5/0x2cf0 [ 592.266731][T21791] __sys_sendmmsg+0x27c/0x4e0 [ 592.266768][T21791] ? __pfx___sys_sendmmsg+0x10/0x10 [ 592.266796][T21791] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 592.266847][T21791] ? ksys_write+0x242/0x270 [ 592.266879][T21791] ? __pfx_ksys_write+0x10/0x10 [ 592.266924][T21791] __x64_sys_sendmmsg+0xa0/0xc0 [ 592.266954][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.266975][T21791] do_syscall_64+0x15f/0xf80 [ 592.266992][T21791] ? trace_irq_disable+0x3b/0x140 [ 592.267019][T21791] ? clear_bhb_loop+0x40/0x90 [ 592.267046][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.267065][T21791] RIP: 0033:0x7f212179cdd9 [ 592.267084][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.267102][T21791] RSP: 002b:00007f2122710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.267125][T21791] RAX: ffffffffffffffda RBX: 00007f2121a15fa0 RCX: 00007f212179cdd9 [ 592.267140][T21791] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 592.267154][T21791] RBP: 00007f2122710090 R08: 0000000000000000 R09: 0000000000000000 [ 592.267166][T21791] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 592.267178][T21791] R13: 00007f2121a16038 R14: 00007f2121a15fa0 R15: 00007fff4b8f5b28 [ 592.267212][T21791] [ 592.599063][ T8397] net_ratelimit: 26 callbacks suppressed [ 592.599087][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.717475][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.835464][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 592.857442][T21795] netlink: 'syz.0.4681': attribute type 10 has an invalid length. [ 592.865800][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 592.878306][T21795] team0: Device dummy0 is of different type [ 592.943760][T21793] netlink: 'syz.0.4681': attribute type 10 has an invalid length. [ 593.056188][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.056890][T21808] netlink: 'syz.4.4685': attribute type 10 has an invalid length. [ 593.098065][T21808] netlink: 'syz.4.4685': attribute type 10 has an invalid length. [ 593.166550][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.285476][ T1336] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.304950][T21819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4687'. [ 593.387954][T21824] netlink: 'syz.4.4688': attribute type 1 has an invalid length. [ 593.396010][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.420558][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'. [ 593.433693][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'. [ 593.514698][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.635814][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 593.647975][T21831] lo speed is unknown, defaulting to 1000 [ 593.989747][T21850] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4695'. [ 594.833760][T21874] tipc: Enabled bearer , priority 0 [ 594.842890][T21871] syzkaller0: entered promiscuous mode [ 594.849130][T21871] syzkaller0: entered allmulticast mode [ 594.909375][T21871] tipc: Resetting bearer [ 594.942814][T21870] tipc: Resetting bearer [ 594.958195][T21876] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4702'. [ 594.988026][T21870] tipc: Disabling bearer [ 595.004174][T21876] netlink: 'syz.1.4702': attribute type 16 has an invalid length. [ 595.277892][T21880] netlink: 'syz.4.4703': attribute type 1 has an invalid length. [ 595.327112][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 595.368866][T21880] bond3: entered promiscuous mode [ 595.380266][T21880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.447658][T21880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.456759][T21880] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 595.467632][T21880] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 595.499685][T21880] bond3: (slave wireguard0): making interface the new active one [ 595.508003][T21880] wireguard0: entered promiscuous mode [ 595.518936][T21880] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 595.824969][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.854502][T21896] lo speed is unknown, defaulting to 1000 [ 596.413091][T21923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4714'. [ 596.627473][T21925] veth11: entered allmulticast mode [ 596.961355][T21937] syzkaller0: entered promiscuous mode [ 596.981188][T21937] syzkaller0: entered allmulticast mode [ 597.486025][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4722'. [ 597.505976][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4722'. [ 597.748814][T21964] FAULT_INJECTION: forcing a failure. [ 597.748814][T21964] name failslab, interval 1, probability 0, space 0, times 0 [ 597.786087][T21964] CPU: 1 UID: 0 PID: 21964 Comm: syz.2.4724 Not tainted syzkaller #0 PREEMPT(full) [ 597.786117][T21964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.786129][T21964] Call Trace: [ 597.786138][T21964] [ 597.786169][T21964] dump_stack_lvl+0xe8/0x150 [ 597.786201][T21964] should_fail_ex+0x412/0x560 [ 597.786236][T21964] should_failslab+0xa8/0x100 [ 597.786269][T21964] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 597.786295][T21964] ? preempt_schedule_thunk+0x16/0x30 [ 597.786322][T21964] ? __alloc_skb+0x1d0/0x7d0 [ 597.786355][T21964] __alloc_skb+0x1d0/0x7d0 [ 597.786388][T21964] alloc_skb_with_frags+0xc8/0x760 [ 597.786420][T21964] ? __lock_acquire+0x6b5/0x2cf0 [ 597.786450][T21964] sock_alloc_send_pskb+0x878/0x990 [ 597.786494][T21964] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 597.786512][T21964] ? preempt_schedule_thunk+0x16/0x30 [ 597.786542][T21964] ? preempt_schedule_common+0x82/0xd0 [ 597.786570][T21964] ? j1939_sk_sendmsg+0x5f7/0x1380 [ 597.786597][T21964] ? preempt_schedule_thunk+0x16/0x30 [ 597.786633][T21964] j1939_sk_sendmsg+0x6da/0x1380 [ 597.786661][T21964] ? aa_sk_perm+0x6d5/0x900 [ 597.786703][T21964] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 597.786732][T21964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.786760][T21964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.786790][T21964] ____sys_sendmsg+0x972/0x9f0 [ 597.786831][T21964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.786873][T21964] ? import_iovec+0x73/0xa0 [ 597.786905][T21964] ___sys_sendmsg+0x2a5/0x360 [ 597.786930][T21964] ? __lock_acquire+0x6b5/0x2cf0 [ 597.786952][T21964] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.786988][T21964] ? kstrtouint+0x6e/0xe0 [ 597.787045][T21964] ? __fget_files+0x2a/0x420 [ 597.787069][T21964] ? __fget_files+0x3a0/0x420 [ 597.787105][T21964] __sys_sendmmsg+0x27c/0x4e0 [ 597.787143][T21964] ? __pfx___sys_sendmmsg+0x10/0x10 [ 597.787180][T21964] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 597.787234][T21964] ? ksys_write+0x242/0x270 [ 597.787266][T21964] ? __pfx_ksys_write+0x10/0x10 [ 597.787303][T21964] __x64_sys_sendmmsg+0xa0/0xc0 [ 597.787334][T21964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.787356][T21964] do_syscall_64+0x15f/0xf80 [ 597.787373][T21964] ? trace_irq_disable+0x3b/0x140 [ 597.787403][T21964] ? clear_bhb_loop+0x40/0x90 [ 597.787430][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.787449][T21964] RIP: 0033:0x7f4c40b9cdd9 [ 597.787471][T21964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.787488][T21964] RSP: 002b:00007f4c419b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 597.787511][T21964] RAX: ffffffffffffffda RBX: 00007f4c40e15fa0 RCX: 00007f4c40b9cdd9 [ 597.787525][T21964] RDX: 0000000000000004 RSI: 0000200000008cc0 RDI: 0000000000000003 [ 597.787539][T21964] RBP: 00007f4c419b9090 R08: 0000000000000000 R09: 0000000000000000 [ 597.787550][T21964] R10: 000000000000c080 R11: 0000000000000246 R12: 0000000000000001 [ 597.787562][T21964] R13: 00007f4c40e16038 R14: 00007f4c40e15fa0 R15: 00007ffcea10b248 [ 597.787597][T21964] [ 597.791994][ T12] net_ratelimit: 27 callbacks suppressed [ 597.792013][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 598.074870][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.189449][T21976] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 598.237350][T21976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 598.474787][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 598.495048][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4733'. [ 598.714706][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 598.825169][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 598.959122][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 598.984312][T21998] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 599.085084][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 599.114810][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.349545][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4739'. [ 599.373331][T22010] x_tables: duplicate underflow at hook 1 [ 599.618460][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 599.670754][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 599.726309][T22025] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20001 [ 599.750960][T22027] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 599.771424][T22027] bond2 (unregistering): Released all slaves [ 599.975922][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 600.503574][T22053] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4755'. [ 600.531174][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4756'. [ 600.550206][T22059] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 600.577445][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4756'. [ 600.863623][T22079] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 600.883013][T22079] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 600.927661][T22079] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 600.970801][T22080] netlink: 'syz.3.4763': attribute type 4 has an invalid length. [ 600.995711][T22079] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 601.027632][T22087] netlink: 'syz.3.4763': attribute type 4 has an invalid length. [ 601.112107][T22089] [ 601.114501][T22089] ====================================================== [ 601.121542][T22089] WARNING: possible circular locking dependency detected [ 601.128709][T22089] syzkaller #0 Not tainted [ 601.133141][T22089] ------------------------------------------------------ [ 601.140167][T22089] syz.1.4766/22089 is trying to acquire lock: [ 601.146243][T22089] ffff88813fe68f78 (&mm->mmap_lock){++++}-{4:4}, at: gup_fast_fallback+0x20d/0x20d0 [ 601.155665][T22089] [ 601.155665][T22089] but task is already holding lock: [ 601.163025][T22089] ffff888080ad8fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15d/0x2430 [ 601.172440][T22089] [ 601.172440][T22089] which lock already depends on the new lock. [ 601.172440][T22089] [ 601.182929][T22089] [ 601.182929][T22089] the existing dependency chain (in reverse order) is: [ 601.191945][T22089] [ 601.191945][T22089] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 601.199688][T22089] lock_sock_nested+0x41/0x100 [ 601.205046][T22089] inet_shutdown+0x6a/0x390 [ 601.210073][T22089] nbd_mark_nsock_dead+0x2e9/0x560 [ 601.215715][T22089] sock_shutdown+0x15e/0x260 [ 601.220831][T22089] nbd_clear_sock+0x24/0x170 [ 601.225954][T22089] nbd_config_put+0x2dd/0x580 [ 601.231160][T22089] nbd_genl_connect+0x19d5/0x1cf0 [ 601.236758][T22089] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.242830][T22089] genl_rcv_msg+0x61c/0x7a0 [ 601.247899][T22089] netlink_rcv_skb+0x232/0x4b0 [ 601.253211][T22089] genl_rcv+0x28/0x40 [ 601.257723][T22089] netlink_unicast+0x75c/0x8e0 [ 601.263025][T22089] netlink_sendmsg+0x813/0xb40 [ 601.268327][T22089] ____sys_sendmsg+0x972/0x9f0 [ 601.273728][T22089] ___sys_sendmsg+0x2a5/0x360 [ 601.278937][T22089] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.284409][T22089] do_syscall_64+0x15f/0xf80 [ 601.289528][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.296033][T22089] [ 601.296033][T22089] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 601.303687][T22089] __mutex_lock+0x1a3/0x1550 [ 601.308800][T22089] nbd_queue_rq+0x37b/0x1100 [ 601.313918][T22089] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.320175][T22089] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.327052][T22089] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.333566][T22089] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.339210][T22089] blk_mq_dispatch_list+0xd16/0xe10 [ 601.344966][T22089] blk_mq_flush_plug_list+0x48d/0x570 [ 601.350878][T22089] __blk_flush_plug+0x3ed/0x4d0 [ 601.356260][T22089] __submit_bio+0x28d/0x580 [ 601.361372][T22089] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 601.367623][T22089] block_read_full_folio+0x599/0x830 [ 601.373432][T22089] filemap_read_folio+0x137/0x3b0 [ 601.379002][T22089] do_read_cache_folio+0x358/0x590 [ 601.384648][T22089] read_part_sector+0xb6/0x2b0 [ 601.389962][T22089] adfspart_check_ICS+0xb1/0x960 [ 601.395457][T22089] bdev_disk_changed+0x817/0x1770 [ 601.401032][T22089] blkdev_get_whole+0x380/0x510 [ 601.406421][T22089] bdev_open+0x31e/0xd30 [ 601.411217][T22089] blkdev_open+0x470/0x610 [ 601.416165][T22089] do_dentry_open+0x785/0x14e0 [ 601.421456][T22089] vfs_open+0x3b/0x340 [ 601.426050][T22089] path_openat+0x2e08/0x3860 [ 601.431167][T22089] do_file_open+0x23e/0x4a0 [ 601.436198][T22089] do_sys_openat2+0x113/0x200 [ 601.441404][T22089] __x64_sys_openat+0x138/0x170 [ 601.446778][T22089] do_syscall_64+0x15f/0xf80 [ 601.451896][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.458317][T22089] [ 601.458317][T22089] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 601.465540][T22089] __mutex_lock+0x1a3/0x1550 [ 601.470657][T22089] nbd_queue_rq+0xc6/0x1100 [ 601.475771][T22089] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.481846][T22089] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.488705][T22089] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.495222][T22089] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.500951][T22089] blk_mq_dispatch_list+0xd16/0xe10 [ 601.506699][T22089] blk_mq_flush_plug_list+0x48d/0x570 [ 601.512613][T22089] __blk_flush_plug+0x3ed/0x4d0 [ 601.518084][T22089] __submit_bio+0x28d/0x580 [ 601.523112][T22089] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 601.529275][T22089] block_read_full_folio+0x599/0x830 [ 601.535088][T22089] filemap_read_folio+0x137/0x3b0 [ 601.540649][T22089] do_read_cache_folio+0x358/0x590 [ 601.546292][T22089] read_part_sector+0xb6/0x2b0 [ 601.551583][T22089] adfspart_check_ICS+0xb1/0x960 [ 601.557052][T22089] bdev_disk_changed+0x817/0x1770 [ 601.562607][T22089] blkdev_get_whole+0x380/0x510 [ 601.567989][T22089] bdev_open+0x31e/0xd30 [ 601.572852][T22089] blkdev_open+0x470/0x610 [ 601.577790][T22089] do_dentry_open+0x785/0x14e0 [ 601.583100][T22089] vfs_open+0x3b/0x340 [ 601.587713][T22089] path_openat+0x2e08/0x3860 [ 601.592832][T22089] do_file_open+0x23e/0x4a0 [ 601.597948][T22089] do_sys_openat2+0x113/0x200 [ 601.603152][T22089] __x64_sys_openat+0x138/0x170 [ 601.608540][T22089] do_syscall_64+0x15f/0xf80 [ 601.613653][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.620158][T22089] [ 601.620158][T22089] -> #4 (set->srcu){.+.+}-{0:0}: [ 601.627563][T22089] __synchronize_srcu+0xca/0x300 [ 601.633046][T22089] elevator_switch+0x1e8/0x7a0 [ 601.638363][T22089] elevator_change+0x2cc/0x450 [ 601.643661][T22089] elevator_set_default+0x36c/0x430 [ 601.649392][T22089] blk_register_queue+0x3e9/0x4e0 [ 601.654943][T22089] __add_disk+0x677/0xd50 [ 601.659819][T22089] add_disk_fwnode+0xfb/0x480 [ 601.665026][T22089] nbd_dev_add+0x72c/0xb50 [ 601.670011][T22089] nbd_init+0x168/0x1f0 [ 601.674704][T22089] do_one_initcall+0x250/0x870 [ 601.679999][T22089] do_initcall_level+0x104/0x190 [ 601.685472][T22089] do_initcalls+0x59/0xa0 [ 601.690336][T22089] kernel_init_freeable+0x2a6/0x3e0 [ 601.696065][T22089] kernel_init+0x1d/0x1d0 [ 601.700926][T22089] ret_from_fork+0x514/0xb70 [ 601.706040][T22089] ret_from_fork_asm+0x1a/0x30 [ 601.711331][T22089] [ 601.711331][T22089] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 601.719190][T22089] __mutex_lock+0x1a3/0x1550 [ 601.724306][T22089] elevator_change+0x1b3/0x450 [ 601.729692][T22089] elevator_set_none+0xb5/0x140 [ 601.735071][T22089] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 601.741399][T22089] nbd_start_device+0x17f/0xb10 [ 601.746774][T22089] nbd_genl_connect+0x165b/0x1cf0 [ 601.752321][T22089] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.758483][T22089] genl_rcv_msg+0x61c/0x7a0 [ 601.763513][T22089] netlink_rcv_skb+0x232/0x4b0 [ 601.768818][T22089] genl_rcv+0x28/0x40 [ 601.773335][T22089] netlink_unicast+0x75c/0x8e0 [ 601.778631][T22089] netlink_sendmsg+0x813/0xb40 [ 601.783938][T22089] ____sys_sendmsg+0x972/0x9f0 [ 601.789232][T22089] ___sys_sendmsg+0x2a5/0x360 [ 601.794441][T22089] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.799911][T22089] do_syscall_64+0x15f/0xf80 [ 601.806598][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.813056][T22089] [ 601.813056][T22089] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 601.821700][T22089] blk_alloc_queue+0x546/0x680 [ 601.827052][T22089] __blk_mq_alloc_disk+0x197/0x390 [ 601.832713][T22089] nbd_dev_add+0x499/0xb50 [ 601.837671][T22089] nbd_init+0x168/0x1f0 [ 601.842458][T22089] do_one_initcall+0x250/0x870 [ 601.847813][T22089] do_initcall_level+0x104/0x190 [ 601.853318][T22089] do_initcalls+0x59/0xa0 [ 601.858194][T22089] kernel_init_freeable+0x2a6/0x3e0 [ 601.863934][T22089] kernel_init+0x1d/0x1d0 [ 601.868816][T22089] ret_from_fork+0x514/0xb70 [ 601.873957][T22089] ret_from_fork_asm+0x1a/0x30 [ 601.879250][T22089] [ 601.879250][T22089] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 601.886671][T22089] fs_reclaim_acquire+0x71/0x100 [ 601.892165][T22089] kmem_cache_alloc_noprof+0x40/0x650 [ 601.898065][T22089] mas_alloc_nodes+0x291/0x350 [ 601.903371][T22089] mas_preallocate+0x2d6/0x640 [ 601.908669][T22089] vma_link+0x123/0x470 [ 601.913402][T22089] insert_vm_struct+0x1a5/0x270 [ 601.918826][T22089] create_init_stack_vma+0x546/0x9b0 [ 601.924660][T22089] alloc_bprm+0x495/0x5c0 [ 601.929559][T22089] kernel_execve+0x87/0x930 [ 601.934591][T22089] try_to_run_init_process+0x13/0x60 [ 601.940397][T22089] kernel_init+0xad/0x1d0 [ 601.945256][T22089] ret_from_fork+0x514/0xb70 [ 601.950369][T22089] ret_from_fork_asm+0x1a/0x30 [ 601.955662][T22089] [ 601.955662][T22089] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 601.963228][T22089] __lock_acquire+0x15a5/0x2cf0 [ 601.968613][T22089] lock_acquire+0x106/0x350 [ 601.973643][T22089] gup_fast_fallback+0x226/0x20d0 [ 601.979211][T22089] __iov_iter_get_pages_alloc+0x370/0xa10 [ 601.985465][T22089] iov_iter_get_pages2+0x5e/0xa0 [ 601.991033][T22089] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 601.997381][T22089] tls_sw_sendmsg+0x9f5/0x2430 [ 602.002680][T22089] sock_write_iter+0x333/0x4f0 [ 602.007970][T22089] do_iter_readv_writev+0x619/0x8c0 [ 602.013714][T22089] vfs_writev+0x33c/0x990 [ 602.018580][T22089] do_writev+0x154/0x2e0 [ 602.023353][T22089] do_syscall_64+0x15f/0xf80 [ 602.028556][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.035060][T22089] [ 602.035060][T22089] other info that might help us debug this: [ 602.035060][T22089] [ 602.045291][T22089] Chain exists of: [ 602.045291][T22089] &mm->mmap_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 602.045291][T22089] [ 602.058345][T22089] Possible unsafe locking scenario: [ 602.058345][T22089] [ 602.065819][T22089] CPU0 CPU1 [ 602.071283][T22089] ---- ---- [ 602.076754][T22089] lock(sk_lock-AF_INET6); [ 602.081810][T22089] lock(&nsock->tx_lock); [ 602.088952][T22089] lock(sk_lock-AF_INET6); [ 602.095994][T22089] rlock(&mm->mmap_lock); [ 602.100423][T22089] [ 602.100423][T22089] *** DEADLOCK *** [ 602.100423][T22089] [ 602.108576][T22089] 2 locks held by syz.1.4766/22089: [ 602.113796][T22089] #0: ffff88802c7988e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x130/0x2430 [ 602.123401][T22089] #1: ffff888080ad8fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15d/0x2430 [ 602.133168][T22089] [ 602.133168][T22089] stack backtrace: [ 602.139059][T22089] CPU: 0 UID: 0 PID: 22089 Comm: syz.1.4766 Not tainted syzkaller #0 PREEMPT(full) [ 602.139079][T22089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 602.139089][T22089] Call Trace: [ 602.139098][T22089] [ 602.139107][T22089] dump_stack_lvl+0xe8/0x150 [ 602.139127][T22089] print_circular_bug+0x2e1/0x300 [ 602.139158][T22089] check_noncircular+0x12e/0x150 [ 602.139181][T22089] __lock_acquire+0x15a5/0x2cf0 [ 602.139201][T22089] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.139227][T22089] ? __page_table_check_zero+0x6a/0x3e0 [ 602.139252][T22089] ? gup_fast_fallback+0x20d/0x20d0 [ 602.139269][T22089] lock_acquire+0x106/0x350 [ 602.139285][T22089] ? gup_fast_fallback+0x20d/0x20d0 [ 602.139305][T22089] ? __page_table_check_zero+0x6a/0x3e0 [ 602.139329][T22089] ? gup_fast_fallback+0x20d/0x20d0 [ 602.139346][T22089] gup_fast_fallback+0x226/0x20d0 [ 602.139364][T22089] ? gup_fast_fallback+0x20d/0x20d0 [ 602.139384][T22089] ? get_page_from_freelist+0x24d4/0x2540 [ 602.139411][T22089] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.139438][T22089] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.139463][T22089] ? __pfx_gup_fast_fallback+0x10/0x10 [ 602.139480][T22089] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.139502][T22089] ? stack_depot_save_flags+0x3f3/0x810 [ 602.139524][T22089] ? is_valid_gup_args+0x11f/0x200 [ 602.139542][T22089] ? get_user_pages_fast+0x4d/0xb0 [ 602.139561][T22089] __iov_iter_get_pages_alloc+0x370/0xa10 [ 602.139587][T22089] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 602.139614][T22089] iov_iter_get_pages2+0x5e/0xa0 [ 602.139638][T22089] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 602.139668][T22089] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 602.139703][T22089] tls_sw_sendmsg+0x9f5/0x2430 [ 602.139726][T22089] ? rcu_is_watching+0x15/0xb0 [ 602.139759][T22089] ? aa_file_perm+0x192/0x15e0 [ 602.139782][T22089] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 602.139808][T22089] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.139826][T22089] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 602.139849][T22089] ? sock_rps_record_flow+0x19/0x350 [ 602.139872][T22089] ? __pfx_inet_send_prepare+0x7/0x10 [ 602.139890][T22089] ? inet6_sendmsg+0x101/0x120 [ 602.139909][T22089] ? __pfx_inet6_sendmsg+0x10/0x10 [ 602.139927][T22089] sock_write_iter+0x333/0x4f0 [ 602.139946][T22089] ? __pfx_sock_write_iter+0x10/0x10 [ 602.139966][T22089] ? preempt_schedule_thunk+0x16/0x30 [ 602.139993][T22089] do_iter_readv_writev+0x619/0x8c0 [ 602.140019][T22089] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 602.140045][T22089] ? bpf_lsm_file_permission+0x9/0x20 [ 602.140068][T22089] ? security_file_permission+0x75/0x260 [ 602.140086][T22089] ? rw_verify_area+0x255/0x4d0 [ 602.140109][T22089] vfs_writev+0x33c/0x990 [ 602.140129][T22089] ? __pfx_vfs_writev+0x10/0x10 [ 602.140159][T22089] ? __fget_files+0x2a/0x420 [ 602.140180][T22089] ? __fget_files+0x3a0/0x420 [ 602.140198][T22089] ? __fget_files+0x2a/0x420 [ 602.140220][T22089] do_writev+0x154/0x2e0 [ 602.140238][T22089] ? __pfx_do_writev+0x10/0x10 [ 602.140258][T22089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.140275][T22089] do_syscall_64+0x15f/0xf80 [ 602.140289][T22089] ? trace_irq_disable+0x3b/0x140 [ 602.140313][T22089] ? clear_bhb_loop+0x40/0x90 [ 602.140331][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.140347][T22089] RIP: 0033:0x7fc764b9cdd9 [ 602.140362][T22089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.140377][T22089] RSP: 002b:00007fc7659d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 602.140394][T22089] RAX: ffffffffffffffda RBX: 00007fc764e15fa0 RCX: 00007fc764b9cdd9 [ 602.140407][T22089] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 602.140417][T22089] RBP: 00007fc764c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 602.140427][T22089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.140437][T22089] R13: 00007fc764e16038 R14: 00007fc764e15fa0 R15: 00007ffdd5047208 [ 602.140456][T22089] [ 602.548044][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4768'. [ 602.895817][ T6736] net_ratelimit: 24 callbacks suppressed [ 602.895840][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.015246][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.124797][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.245027][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.265134][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.354883][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.464916][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.587114][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.714749][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.834681][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 604.624713][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 607.904893][ T48] net_ratelimit: 40 callbacks suppressed [ 607.904918][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.024918][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.135003][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.244805][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.355038][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.465279][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 608.466431][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.584806][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.694997][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.805230][ T6736] bond3: (slave ip6gretap1): failed to get link speed/duplex