last executing test programs: 3.18787033s ago: executing program 3 (id=4452): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x70bd2d, 0x25dbdbfe, {0x1}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 2.587906411s ago: executing program 4 (id=4456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2999}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xc00}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24040001}, 0x4048040) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x5, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.568412876s ago: executing program 4 (id=4457): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f0000000480)=@ethtool_ts_info}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) close(r3) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000884}, 0x400c000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="24f9a847b8a0abf64e4ddce68d933aa0c12d561697a6123f83a72264f16d73ad02d86d9442063deeaf4e48be30f893b309092506e0bb9b96ab97494541e42b62a16b9e4e48e32975184b4b4412676b0e2ee868fe", 0x54, 0x44010008, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, 0x1c) 2.233529749s ago: executing program 1 (id=4460): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c00)=[{&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000001a00)="d8", 0x1}], 0x2, 0x9) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) close(r1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="7430658ecb10d8d27c138c73006c4c7af541afee4f9a32e13b1b70233c53cb09000000000000005686c34f4f2dcf8cdc6340012cbb92c899712d06d6807ce43dff348bfe143c363bbe3ed4739d86974fdcfe08ed7355102bc3c22d0639e8f7b14601fae55a9f2286f538f8b8a23b34d969374307ba1ab84a45496532501b"], 0x0) 1.804490942s ago: executing program 2 (id=4461): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {0xc, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000140)={0x6, 'veth1_to_hsr\x00', {}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {0x20002}, 0xca6}) 1.759806893s ago: executing program 3 (id=4462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6(0xa, 0xa, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x564, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @local}}}, 0x108) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="6cc59145fb67e0978661e2f1a734742379a12cd6e88405a801c2b7d979f751db7129b88cf831b4a6c81292efa08dd71632158290a6ad6285b6538b7cb26ff08982996175cafea036b97dd0891e0ef2e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800a183437ff10008009f0004000000080026006c09"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 1.632107387s ago: executing program 1 (id=4463): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], 0x1c}], 0x1}, 0x0) 1.535442011s ago: executing program 1 (id=4464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) 1.483965968s ago: executing program 2 (id=4465): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x6040080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300020003e000701fcfffffffddbdf25047c0000100036800c0002000700930000000600060008", @ANYBLOB="01e2da25ff"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.474108683s ago: executing program 4 (id=4466): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x200000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "4f8d6aacd1315f99", "f9bed56bcf54b4129aff0b66fd393918", "e47e05eb", "5cd5ecaa35ed3e45"}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.331994631s ago: executing program 1 (id=4468): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba149", 0x28}, {&(0x7f0000000a80)="ab46ea2932ec4132920dff096aab059a689f3e0d92ebba921b371651385ee20efb193378bd50894f2dcc58ae4754c66875beecf54d4b52d9611da7625f8363ced48ee76ff9479a05c2ec858de658d2b65962e9289f9209c1b3762cdde2c09adbbed5039474c0dcc7f47cdb503bda3b7c", 0x70}, {&(0x7f0000000840)="46cd295fd96f14db34f889b7869a76599ee0efd82be83f7eddf6dc5d18b3143263795768d16fd13b49349db80d67d2af536840be41ac1b65eca25d70afc8c39ceec320080f79f8405065d343dee61b1965b3e93d9155dd24a7f67d5ae608c4650afcbd1a940b95aa54078771f2a0feda6768", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="a1e27575d35fd4f38d622e5938b301a28a4c21084fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2b", 0x36}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.327624302s ago: executing program 2 (id=4469): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) unshare(0x600) (async) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, 0x0, 0x0) (async, rerun: 64) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) (async) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async, rerun: 32) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x801) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.208365173s ago: executing program 3 (id=4471): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x1a, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1.115833167s ago: executing program 0 (id=4472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xca0}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 1.109211988s ago: executing program 4 (id=4473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x54, 0x30, 0xb, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ct={0x3c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000002060104000000000000000000000000050005000000000016000300686173683a6e65742c706f72742c6e65740000000900021573797a30000000000500040000000000050001000700ad5e00881a77026193f7a203260922860000"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) r5 = accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x80800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000140)=0x8, 0x4) 1.089057941s ago: executing program 0 (id=4474): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x7, 0x41, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7, 0x5, 0xfffffff8}}) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="6d8841b48a87c12909403c89d5794fbf6bfe7d621a708de254b847bac25743c6ae54b3b22971fd6b91d9e275e7341e19bffc1c63acbd6bfdfc7697c46ff716a9f2d8401dc7ae99c9406e4ead49cd49a2b4a9162bdf00105f692ea3f0ad31134804647d2fde41adfeb4e7005ef3c1093c715fefc3ba6c58cc5415686ae56a5816", 0x80}], 0x1, &(0x7f0000000100)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x14, 0x23, 0x0, 0x9, [0x8e4, 0xe52, 0x1, 0xc98b]}]}}}], 0x40}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x17, 0x0, 0x6, [0x5, 0x1, 0xd06c, 0x4]}, @noop]}}}], 0x48}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000340)="006c6a65b665a7650d3e1f114bd98fdc985222f8f30b03bd8a0fd0068418eddaade2a07e40f4dc110a92fb306224a87de472a79bff7f69f274fec86df5deecfe89126b6e000893de4ffb9d64834fcc776361fff7741b2c539df3e6ea8f41ceb60890e5906a1d977bd25232d9e0475e68b35ec54e4cabb2", 0x77}, {&(0x7f0000000500)="97e82c85a1fa7125766694c0ac1a9399b7a1f551d9c18344b77f8ef30e71faa7d6bae27b02f41cec22527057f772924ef9bd71ac413d8ebecf7c8aa3d83de3b4da2ff7e5bcc930748bf7b13cbd34e3a8d16a52e2ca318fe5d716c97735cb77cbba83e9d0f8f921aa073e2c59fe88da5f4f52bbf938de2ba6fa070d59a7c614074a58d1bcb67a1b62108c90c5df39e0a2e7c597cabb1ee78d4ebf1dfe2069bc5005cd66fe8cb94d95beb3d1d680eaf1a9288f03a07b9a9718e09cf5d8b94c09213bee08a2426f2b7e3ce70a4d2cb3bfbda17d170b0accff9a71d49da4f9400f6243a2c8017eaab81060b3df757a", 0xed}, {&(0x7f0000000600)="2f57497f058922615d3aa5d2887de52a688de15da4a140fbb9cb5abd1430a3be65b5279365f7c250d7b67be973e358a60b39685956f36d5fb2b0ccb707a82b1a7822a4cf44c9f3a8f63e1e88cd67c0d0754829ae680cd8dfa7700f44541154ba38ced6b809d8be3c399b8f071487684c0970311e44241e1a2e646ba79612989fd9c86b60d908cf0eefa6e386ff713c644abf84c24d2da4ead553432eefee2fd9b922448689b796", 0xa7}, {&(0x7f0000000440)="79aaf3d440f2c7446e442581b6b2b0992d40d7181c30e3a83536b13320b1de7411f148cf194e147d07acb22c1d2677860907d05315f46ab6f0f936e356aecec63d6eb47f", 0x44}], 0x4}}], 0x3, 0x4000040) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x80, 0x101, 0x8}}) 1.001543005s ago: executing program 3 (id=4475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) connect$tipc(r2, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 931.823979ms ago: executing program 0 (id=4476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d0000001a000000000000802000fe00000000000025030000000000"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d0000001a000000000000802000fe00000000000025030000000000"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', r8, 0x29, 0x2, 0xb0, 0x9, 0x2, @private0={0xfc, 0x0, '\x00', 0xb}, @remote, 0x7800, 0x20, 0x5}}) recvmmsg(r4, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000800)=""/245, 0xf5}], 0x3}, 0x9}], 0x1, 0x10000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a797a31080000000900010073797a300000fa00080005400000000c080003400000000808000740000000000800064000000000140000001000010000002dc7c310b16225d0000a000000000000000000000565ad5591cb9233afac3b5adea887a817a04f45d53d6d29144a9032161e1d3ab961463b2daed2759d340cfbee3373225597649a428bf1000d88827f020e7caf9befe8ca1f7ebdb75b0828e47e8c31e15b71290a04c228610c364e63e49aa866c63c2e2d3e4acc72ba9440436af1e2bd0b038dfd7bf7db"], 0x7c}}, 0x0) 908.873105ms ago: executing program 4 (id=4477): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001400)={@random='C7xo;V', @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "4bab6b", 0x10, 0x0, 0x0, @private0, @remote, {[@hopopts={0xd7, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}, @padn]}]}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08fc0a00", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000001400)={@random='C7xo;V', @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "4bab6b", 0x10, 0x0, 0x0, @private0, @remote, {[@hopopts={0xd7, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}, @padn]}]}}}}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08fc0a00", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) (async) 885.43029ms ago: executing program 2 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x80000, 0x10001) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x10, 0xfff9}}}, 0x24}}, 0x20040040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x8004) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@private2, 0x4e23, 0x101, 0x4e21, 0x3, 0xa, 0x0, 0x0, 0x29, r4, 0xee01}, {0xffffffffffffffff, 0x400, 0x1, 0x38421fd4, 0x1ff, 0x2, 0xf, 0x9}, {0x5, 0x7, 0x5, 0xffffffffffffffff}, 0x101, 0x6e6bbb, 0x2, 0x0, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x3507, 0x0, 0x2, 0x10, 0xb70, 0x0, 0x6}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000fba29eaf8d144b0907e6327900000000000000010001000000020000000000001200000000040000000000"], 0x0, 0x42, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500240012800a0001006d6163766c616e00140002800800010010000000080003000300000008000500", @ANYRES32=r10, @ANYBLOB="9ca9017483a0d951c17fec46bda811cee1fb3d43c19e54af721a1fc41ca2a1de0ac33794b98ba710613f0000da8fefb589dd834b9f4955d82efac97dde87edb290040b04c9474bf14703087e4c30e20eed72791911b5d1a1f2b71d89d186ed9f39f156bcd2df9bb5e7fa863db53fc8541f70ce8f8c5bb4d85cba2c9b098ff2122b85e543e2cee2cf4a6ccbb86f57ab9a8204d43545e09ac6523883b8769d0a64b3e98661"], 0x4c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0e1b24bd7000fddbdf251700000008000300", @ANYRES32=r12, @ANYBLOB="4b8f8f915a126cea4cf1bdbd386b09f6016d3ba7c81f78bc6fa660af64c97299212e9f86365fdfa0da64331ab29a8779aaba1f8abfab57a972b2d0"], 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) 413.078423ms ago: executing program 1 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a3000"], 0x100}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) accept4(r1, 0x0, 0x0, 0x800) 407.187439ms ago: executing program 3 (id=4480): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) (async) sendmsg$inet(r5, 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003600)={0x34, r7, 0x51b, 0x7, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0xffffffffffffff9f}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x4000000) 406.837413ms ago: executing program 0 (id=4481): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 406.274029ms ago: executing program 2 (id=4482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}}, 0x8011) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x11) (async, rerun: 64) getsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x10) (rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xc, 0x4}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async, rerun: 64) r7 = socket$key(0xf, 0x3, 0x2) (rerun: 64) ioctl$sock_bt_hci(r3, 0x400448dc, &(0x7f0000000240)="000103ba0c5cedba47071ee887089fb296e33a1b0a97ea9e761cb4906423844e3a6c641007a2c7e5c215577175cf6537abda1c9931379bf0ac8c80d94dd65a08175a94b5a4db739648934df5f1dad570994faaa0cdfc0654c9ab41d4176744b7ea650deb614c9d17080a4858454f6bf8857b3f") ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x24c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7a, 0x3, "1b4ec56bf5ccd3eb7369704b4e2fe996b9a13fa9de9c8c23e3bb6445d7e278f565cea21aec58a6a0ed02debfa1ebb6d116a95cc50ca37429a28736970c17c4a454a3dc959b82e3e9d051b72404c02ba68dddb35ccd4adc5b2e9aea792a74f9aff5600f5ff6acbb3ee2227c17f3f5ba5e067507181edb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xca, 0x3, "efd537ef00f4f82d01c062df87817c9f51ab4a54d31dcff7f7978eefd488fb6c8c44ba296325bf5fcdf565bd519fe724818238da86a9102c467488ab0946ccaa220aa6a93e406c06c5acd0748cb0d541c736b24f59ae7f0d58d53be72b7049867a49a45c10d9a0d7bc963ab7229493d464feb791ac7617a21ec1f5bea6dc759b19b319e1d582783504b4174b7c643f23929c2a3fa282ccbdd63e62fdae840ce4e73d2eec291126247685193e122b0d3af49a6ed08777a88795799a6f8691478c3982fa808abb"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f80f01c1316fe2700e47fbfd34ef4f511cc3f3fe08"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9999e2dc1e7a680c1f1e0dc57674f01a46333b204ddbde4e49a20e8c48c1fe0b11828eae"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x49}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x72b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 399.551101ms ago: executing program 4 (id=4483): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) (async, rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) listen(r3, 0x7) (async) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x40}}, 0x0) (async) sendmmsg$inet6(r12, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r14, 0x100) (async) r15 = socket$netlink(0x10, 0x3, 0x2) writev(r15, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 187.634384ms ago: executing program 0 (id=4484): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb930007000052a86bcf56a1b9ca5386103a5ccbe47b7b9aa6dbd701a3baddceb2281db47d9c1022f987617c319600", 0x3a}, 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) (async) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffff8000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x74}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000550000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="374e91e9e8437efb57dc070081", 0xd, 0x4000000, &(0x7f0000000240)={0x11, 0x3, r9, 0x1, 0xa7, 0x6, @remote}, 0x14) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r10, 0x118, 0x3, 0x0, &(0x7f00000003c0)) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r11) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x134, r13, 0x20, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 186.881293ms ago: executing program 1 (id=4485): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) unshare(0x4000400) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) unshare(0x10000000) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x4, 0x0, 0x11}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000085fe0500000000000c0007000000000048000000080009e19d81ffff08000800000000000800060073697000"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) unshare(0x4000400) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) bind$rds(r3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) unshare(0x10000000) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x4, 0x0, 0x11}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000085fe0500000000000c0007000000000048000000080009e19d81ffff08000800000000000800060073697000"], 0x4c}}, 0x0) (async) 184.358138ms ago: executing program 2 (id=4486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000135ee1999155e80800002800048024000180090001006d65746100000000140002800a00014000000000080002400000000d0900010073797a30000000000900020073797a3200000000140000001102010000000000000000000000000a00000000000000"], 0x7c}}, 0x0) 97.251163ms ago: executing program 3 (id=4487): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket(0x2c, 0x3, 0x40) r2 = socket(0x11, 0xa, 0x0) bind$packet(r2, 0x0, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000680)=@null) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89b1, &(0x7f0000000400)={'wlan1\x00', 0x8}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0500c4000000000004001f8078536f2a4b041c9fc1eb3e68ec84375694816679c62c4146c9ce49951623a104f3ae179084df6efd9288ed971ab478b973aa1882dfced987460888e4d41589aec95dd25c952de1ee606e56a57fb5e02722c0ed6c922084b078a03b107de6b37b2c0408b01a289eab37f8648001a85626ad0fc799c0169dfe5b576b5e7d59ec018869122f193608760e4544d3053da3c0d1a9e15139452fe6bfdcc19ef76fe2b1af033d528efb3a9b13c9f7d7d0a50400fd8008007600", @ANYRES32=r0, @ANYBLOB="62daa5352f6d816f4c9da549ad6ede11d6f90171abc09fe1df597c8150e2529a0b141a841ae2a233ac1871c05e36eecf986bbf3be11ce2c9481e37c968e59951e3c97a5cecac08642c74c3a5187993d251af390afd6dba342a65eb7d61fac3384298aed9dfce265ebef19373749a93005400f0dade65878e0811a0952745bcb36ab7374bade2425e3a85fb4cbf69a5f53604735c07220010f92b10c96d5efe10c0e9c87f80fd078e3badba5a3103d4028d6c519a7e5cc8bddd9e46e5f2ed90426b06a0fbcca88c80921ea0bc8a2ccd0e19e91aaaf4bbd29b725b50aed40948c5f282ea73b3d2b82bc985c1c7c10e21ea3cd384324ecaacad1b5fd68c3e42b1a2060005002a000000000060014a80fd72ef21bfb3a53598a11ad0c3122ee3881475ebca6c1c40dcbb88b6c1d2dac41ad35e547edcf1613802f507a1710a8272ae90377504ff49d1f4a4ad73148b450e1d83a07c0692544e124a499492452e8fe97544a8b1f3f8a4158367f29dd5ee47309acdaeb769fa414b15b789f3045290c0d00979238916cfc795901a7cb33930d1377ccd42a59d3924b2fd1ebfe1fde2de7fbd7c516c1717bc07f5216472b3e3a2db15b359226231dd478b67a3b74f83be245a670f5271274261b94161aaf6bfee92c961bae60438b84eed8855b7852370639ebae3d834d46182ef33d18e5ace2fdc9eac47069a1de8409f6d5ce7ab7cca5e88079cec02890491be1e2f30c3eef45984cc488f78b636732b1e6ff8ad8b3588ab7d063d0c01538c5204004f80fcb22575e79fc960c3360ff379ce1053d9e5e4e3101fcbf5155933b46d24679905f15f592d60622ccf64773478dba75b36a2dea00800a800", @ANYRES32=r6, @ANYBLOB], 0x3e4}, 0x1, 0x0, 0x0, 0xc800}, 0x4) 0s ago: executing program 0 (id=4488): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba149", 0x28}, {&(0x7f0000000a80)="ab46ea2932ec4132920dff096aab059a689f3e0d92ebba921b371651385ee20efb193378bd50894f2dcc58ae4754c66875beecf54d4b52d9611da7625f8363ced48ee76ff9479a05c2ec858de658d2b65962e9289f9209c1b3762cdde2c09adbbed5039474c0dcc7f47cdb503bda3b7c", 0x70}, {&(0x7f0000000840)="46cd295fd96f14db34f889b7869a76599ee0efd82be83f7eddf6dc5d18b3143263795768d16fd13b49349db80d67d2af536840be41ac1b65eca25d70afc8c39ceec320080f79f8405065d343dee61b1965b3e93d9155dd24a7f67d5ae608c4650afcbd1a940b95aa54078771f2a0feda6768", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918", 0x36}, {&(0x7f0000000180)="a1e27575d35fd4f38d622e5938b301a28a4c21084fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2bf94767fec2908755f9457d14e4a56c806a99ad5997ed03c31d3b697cc7d7b273b24ab57450b6cf2ae9fe34fd081ec9a1976930c46fe7f8b0359df677515075e570877f626b3ec05c9f7de06f04e10ca1f4b1009f161e2fab", 0x8e}], 0x2}}], 0x2, 0xc0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 273.661434][ T1157] net_ratelimit: 15 callbacks suppressed [ 273.661454][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 273.742470][T16337] lo speed is unknown, defaulting to 1000 [ 273.829595][ T9278] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.857298][ T9278] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.934601][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 273.955361][T16372] netlink: 'syz.1.3075': attribute type 3 has an invalid length. [ 274.014410][ T5857] Bluetooth: hci4: command tx timeout [ 274.043329][ T9278] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.118945][ T9278] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.139578][T16374] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 274.186036][T16378] unsupported nla_type 52263 [ 274.249123][T16391] __nla_validate_parse: 2 callbacks suppressed [ 274.249142][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 274.270292][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 274.327673][T16380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.351867][T16380] bond1: (slave bond2): making interface the new active one [ 274.363597][T16380] bond1: (slave bond2): Enslaving as an active interface with an up link [ 274.383991][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.423393][ T9278] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.433797][ T9278] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.457177][T16391] bond1: entered allmulticast mode [ 274.466239][T16391] bond2: entered allmulticast mode [ 274.535266][ T9278] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.552880][ T9278] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.616548][T16404] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 274.753814][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.781204][T16417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.802048][T16430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3088'. [ 274.813181][T16418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.828568][T16427] lo speed is unknown, defaulting to 1000 [ 274.835372][T16427] lo speed is unknown, defaulting to 1000 [ 274.847215][T16427] lo speed is unknown, defaulting to 1000 [ 274.860449][T16427] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.028995][T16427] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.101746][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.156414][T16442] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3091'. [ 275.194887][T16442] ieee802154 phy0 wpan0: encryption failed: -126 [ 275.225400][T16427] lo speed is unknown, defaulting to 1000 [ 275.232177][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.266199][T16427] lo speed is unknown, defaulting to 1000 [ 275.512597][ T9278] bond4 (unregistering): (slave ip6tnl2): Releasing backup interface [ 275.683321][ T9278] dvmrp1 (unregistering): left allmulticast mode [ 275.708438][ T9278] dvmrp8 (unregistering): left allmulticast mode [ 275.757652][ T9278] team0: Port device geneve0 removed [ 276.065715][ T9278] smc: removing net device bond0 with user defined pnetid SYZ2 [ 276.075069][ T9278] bond0 (unregistering): Released all slaves [ 276.095117][ T5857] Bluetooth: hci4: command tx timeout [ 276.202295][ T9278] bond1 (unregistering): Released all slaves [ 276.217199][ T9278] bond2 (unregistering): Released all slaves [ 276.232628][ T9278] bond3 (unregistering): Released all slaves [ 276.247110][ T9278] bond4 (unregistering): Released all slaves [ 276.265419][T16427] lo speed is unknown, defaulting to 1000 [ 276.271202][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 276.295170][T16427] lo speed is unknown, defaulting to 1000 [ 276.301152][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 276.317079][T16337] chnl_net:caif_netlink_parms(): no params data found [ 276.365540][T16427] lo speed is unknown, defaulting to 1000 [ 276.422533][T16427] lo speed is unknown, defaulting to 1000 [ 276.429490][T16427] lo speed is unknown, defaulting to 1000 [ 276.440760][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 276.456006][T16459] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 276.470191][ T9278] : left promiscuous mode [ 276.477665][T16459] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3094'. [ 276.482955][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3095'. [ 276.518016][T16462] netlink: 'syz.3.3095': attribute type 7 has an invalid length. [ 276.535357][T16462] netlink: 'syz.3.3095': attribute type 8 has an invalid length. [ 276.557249][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 276.586066][T16427] lo speed is unknown, defaulting to 1000 [ 276.632985][ T9278] tipc: Disabling bearer [ 276.639123][ T9278] tipc: Disabling bearer [ 276.652888][ T9278] tipc: Disabling bearer [ 276.659948][ T9278] tipc: Left network mode [ 276.670170][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 276.892559][T16484] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.954437][T16337] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.967884][T16337] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.976315][T16337] bridge_slave_0: entered allmulticast mode [ 276.988968][T16337] bridge_slave_0: entered promiscuous mode [ 277.096867][T16497] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3101'. [ 277.116407][T16337] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.123952][T16337] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.131534][T16337] bridge_slave_1: entered allmulticast mode [ 277.153540][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 277.186831][T16337] bridge_slave_1: entered promiscuous mode [ 277.469094][T16337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.566790][T16337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.709664][T16337] team0: Port device team_slave_0 added [ 277.792912][T16337] team0: Port device team_slave_1 added [ 278.081862][T16337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.121175][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.183255][ T5857] Bluetooth: hci4: command tx timeout [ 278.199338][T16532] IPVS: set_ctl: invalid protocol: 37 255.255.255.255:20002 [ 278.220719][T16337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.246661][T16337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.256951][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.284395][T16337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.395338][ T9278] veth1_vlan: left promiscuous mode [ 278.587197][T16552] sctp: [Deprecated]: syz.0.3113 (pid 16552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.587197][T16552] Use struct sctp_sack_info instead [ 279.421560][T16547] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 279.429332][T16547] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3113'. [ 279.559906][T16337] hsr_slave_0: entered promiscuous mode [ 279.594377][T16337] hsr_slave_1: entered promiscuous mode [ 279.606499][T16337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.628036][T16337] Cannot create hsr debugfs directory [ 279.666042][T16563] vlan2: entered promiscuous mode [ 279.678553][T16563] bridge0: entered promiscuous mode [ 279.684412][T16563] vlan2: entered allmulticast mode [ 279.689824][T16563] bridge0: entered allmulticast mode [ 279.700475][T16567] netlink: 'syz.3.3120': attribute type 32 has an invalid length. [ 279.718830][ T9280] net_ratelimit: 3 callbacks suppressed [ 279.718851][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.026628][T16585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.047285][ T9121] lo speed is unknown, defaulting to 1000 [ 280.052280][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.144112][ T9278] IPVS: stop unused estimator thread 0... [ 280.192189][T16582] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 280.200186][T16582] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 280.208029][T16585] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 280.210464][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.234904][T16585] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 280.250290][ T5857] Bluetooth: hci4: command tx timeout [ 280.269771][T16582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3125'. [ 280.285652][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3129'. [ 280.344320][T16599] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.353932][T16599] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.364294][T16599] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.373443][T16599] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.388295][T16599] vxlan1: entered promiscuous mode [ 280.394211][T16599] vxlan1: entered allmulticast mode [ 280.493294][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.572906][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 280.604242][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 280.657340][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.850435][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.877988][T16337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.896883][T16337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.929743][T16337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.968494][T16337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.141995][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 281.321366][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 281.353122][T16655] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 281.355896][T16662] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3146'. [ 281.401788][T16337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.462577][T16337] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.493054][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.500303][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.514337][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.521738][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.544949][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 281.710088][T16674] xt_l2tp: v2 sid > 0xffff: 262144 [ 281.727493][T16683] netlink: 'syz.0.3152': attribute type 21 has an invalid length. [ 281.748159][T16683] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3152'. [ 281.805898][T16687] ipt_REJECT: ECHOREPLY no longer supported. [ 282.154843][T16337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.761716][T16337] veth0_vlan: entered promiscuous mode [ 282.816377][T16337] veth1_vlan: entered promiscuous mode [ 282.876492][T16743] x_tables: duplicate underflow at hook 2 [ 282.907495][T16337] veth0_macvtap: entered promiscuous mode [ 282.956758][T16337] veth1_macvtap: entered promiscuous mode [ 282.969598][T16749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 282.986314][T16751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 283.014785][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.047647][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.076282][T16754] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 283.100640][T16337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.124356][T16337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.133392][T16337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.153798][T16337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.206686][T16754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.293116][T16757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.320627][T16757] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 283.332799][T16757] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 283.411801][T16754] veth17: entered promiscuous mode [ 283.424025][T16754] bond7: (slave veth17): Enslaving as an active interface with a down link [ 283.466889][T16762] vlan1: entered allmulticast mode [ 283.478885][T16762] bond7: entered allmulticast mode [ 283.525550][T16771] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 283.538123][T16771] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 283.546511][T16771] gretap1: entered promiscuous mode [ 283.547880][T16768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3175'. [ 283.552130][T16771] gretap1: entered allmulticast mode [ 283.702255][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.725690][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.816158][ T9284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.827219][T16782] netlink: 'syz.1.3181': attribute type 8 has an invalid length. [ 283.842571][ T9284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.018043][T16789] syzkaller1: entered promiscuous mode [ 284.027228][T16789] syzkaller1: entered allmulticast mode [ 284.720213][ T9287] net_ratelimit: 23 callbacks suppressed [ 284.720233][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.800899][ T30] audit: type=1800 audit(1752914266.010:4): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3190" name="memory.events" dev="tmpfs" ino=33 res=0 errno=0 [ 284.871880][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.894763][ T30] audit: type=1804 audit(1752914266.010:5): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3190" name="/newroot/3/memory.events" dev="tmpfs" ino=33 res=1 errno=0 [ 284.968163][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.979382][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.990468][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.003221][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.016693][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.032053][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.048518][T16825] __nla_validate_parse: 1 callbacks suppressed [ 285.048534][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 285.139486][T16825] netlink: 'syz.0.3194': attribute type 7 has an invalid length. [ 285.155040][T16825] netlink: 'syz.0.3194': attribute type 8 has an invalid length. [ 285.162988][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'. [ 285.184761][T16818] lo speed is unknown, defaulting to 1000 [ 285.206385][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.236651][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 285.278728][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3198'. [ 285.360167][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.491544][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.527127][T16852] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 285.572684][T16852] netlink: 'syz.4.3204': attribute type 30 has an invalid length. [ 285.594499][T16852] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 285.614219][T16857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3205'. [ 285.614338][T16854] xt_hashlimit: invalid rate [ 285.632244][T16854] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3203'. [ 285.647835][T16852] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 285.661756][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.792563][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.815302][T16818] lo speed is unknown, defaulting to 1000 [ 285.937493][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 285.947456][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.960417][T16866] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 286.194510][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 286.373114][T16891] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3214'. [ 286.416659][T16818] chnl_net:caif_netlink_parms(): no params data found [ 286.427068][T16893] xt_hashlimit: size too large, truncated to 1048576 [ 286.821391][T16917] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3220'. [ 286.915510][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.956770][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.983994][T16818] bridge_slave_0: entered allmulticast mode [ 287.012311][T16818] bridge_slave_0: entered promiscuous mode [ 287.033273][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.058506][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.085847][T16921] x_tables: duplicate entry at hook 3 [ 287.092407][T16818] bridge_slave_1: entered allmulticast mode [ 287.109948][T16818] bridge_slave_1: entered promiscuous mode [ 287.131191][ T5855] Bluetooth: hci0: command tx timeout [ 287.139951][T16925] siw: device registration error -23 [ 287.268509][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.282667][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.463632][T16939] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3228'. [ 287.488978][T16818] team0: Port device team_slave_0 added [ 287.536589][T16818] team0: Port device team_slave_1 added [ 287.667896][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.676930][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.707408][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.743765][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.763086][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.801692][T16950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.845451][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.995450][T16818] hsr_slave_0: entered promiscuous mode [ 288.022119][T16818] hsr_slave_1: entered promiscuous mode [ 288.028635][T16818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.037391][T16818] Cannot create hsr debugfs directory [ 288.347244][T16818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.429542][T16818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.501123][ T30] audit: type=1804 audit(1752914269.700:6): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3244" name="/newroot/16/memory.events" dev="tmpfs" ino=101 res=1 errno=0 [ 288.534943][ T30] audit: type=1800 audit(1752914269.700:7): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3244" name="memory.events" dev="tmpfs" ino=101 res=0 errno=0 [ 288.561847][ T30] audit: type=1804 audit(1752914269.700:8): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3244" name="/newroot/16/memory.events" dev="tmpfs" ino=101 res=1 errno=0 [ 288.589786][T16818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.668409][T16818] bond0: (slave netdevsim0): Releasing backup interface [ 288.679748][T16818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.898908][T16818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.918942][T16818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.941650][T16818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.967034][T16818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.182145][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.210292][ T5855] Bluetooth: hci0: command tx timeout [ 289.214727][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.275922][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.283142][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.352142][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.359337][ T9278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.423762][T17011] netlink: 'syz.2.3251': attribute type 12 has an invalid length. [ 289.584442][T16818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.740484][ T9284] net_ratelimit: 18 callbacks suppressed [ 289.740506][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.894932][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.031106][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.083620][T17041] x_tables: duplicate underflow at hook 3 [ 290.176147][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.193463][T17050] netlink: 'syz.0.3262': attribute type 23 has an invalid length. [ 290.211820][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.318305][T17054] batadv_slave_1: entered promiscuous mode [ 290.361749][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.382315][T17054] __nla_validate_parse: 4 callbacks suppressed [ 290.382334][T17054] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3264'. [ 290.401648][T16818] veth0_vlan: entered promiscuous mode [ 290.406029][T17054] Unknown options in mask 1f4 [ 290.433757][T17052] batadv_slave_1: left promiscuous mode [ 290.456436][T16818] veth1_vlan: entered promiscuous mode [ 290.470872][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.490469][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 290.577409][T16818] veth0_macvtap: entered promiscuous mode [ 290.611065][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.619184][T16818] veth1_macvtap: entered promiscuous mode [ 290.682747][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.706773][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.737692][T16818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.753469][T16818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.790440][T16818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.804452][T16818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.855344][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.022927][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.048995][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.101074][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.169249][T17095] netlink: 'syz.4.3280': attribute type 21 has an invalid length. [ 291.182375][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.194260][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.205854][T17095] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3280'. [ 291.219817][T17095] netlink: 'syz.4.3280': attribute type 5 has an invalid length. [ 291.245440][T17095] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3280'. [ 291.271149][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.291397][ T5855] Bluetooth: hci0: command tx timeout [ 291.369899][T17106] netlink: 'syz.1.3282': attribute type 18 has an invalid length. [ 291.396254][T17106] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.407230][T17106] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.416695][T17106] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.426939][T17106] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.459826][T17112] ieee802154 phy0 wpan0: encryption failed: -126 [ 291.470923][T17112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3185'. [ 291.478664][T17113] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3282'. [ 291.490014][T17113] ip6gretap0: entered promiscuous mode [ 291.645801][T17114] team0: Port device bond0 removed [ 291.696315][T17114] bridge_slave_0: left allmulticast mode [ 291.759019][T17114] bridge_slave_0: left promiscuous mode [ 291.766013][T17114] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.863567][T17114] bridge_slave_1: left allmulticast mode [ 291.878493][T17114] bridge_slave_1: left promiscuous mode [ 291.893929][T17114] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.924233][T17114] bond0: (slave bond_slave_0): Releasing backup interface [ 291.948280][T17114] bond0: (slave bond_slave_1): Releasing backup interface [ 291.985669][T17114] team0: Port device team_slave_0 removed [ 292.010286][T17114] team0: Port device team_slave_1 removed [ 292.017484][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.025862][T17114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.043610][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.058229][T17114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.097347][T17114] bond1: (slave bond2): Releasing backup interface [ 292.130986][T17114] bond2: left allmulticast mode [ 292.150818][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 292.161138][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 292.172942][T17126] tipc: Started in network mode [ 292.200130][T17126] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 292.245405][T17126] tipc: Enabled bearer , priority 0 [ 292.311521][ T9278] tipc: Resetting bearer [ 292.358883][T17125] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.368855][T17125] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.378511][T17125] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.388125][T17125] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.483375][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.493266][ T9101] IPVS: starting estimator thread 0... [ 292.493523][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.508400][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.517705][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.527102][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.611949][T17138] IPVS: using max 39 ests per chain, 93600 per kthread [ 292.615757][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'. [ 292.675100][T17146] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3291'. [ 292.769793][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.790442][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.887469][T17135] lo speed is unknown, defaulting to 1000 [ 293.029076][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.063007][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.207003][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.250058][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.311134][ T6032] tipc: Node number set to 11578026 [ 293.317848][T17165] macvlan0: entered promiscuous mode [ 293.328769][T17169] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 293.333240][T17165] macvlan0: entered allmulticast mode [ 293.379327][ T5857] Bluetooth: hci0: command tx timeout [ 293.475640][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.510246][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.526692][T17169] batadv0: entered promiscuous mode [ 293.534101][T17169] batadv0: entered allmulticast mode [ 293.540271][T17169] bridge0: port 3(batadv0) entered blocking state [ 293.546936][T17169] bridge0: port 3(batadv0) entered disabled state [ 293.556638][T17169] bridge0: port 3(batadv0) entered blocking state [ 293.563237][T17169] bridge0: port 3(batadv0) entered forwarding state [ 293.572552][T17147] lo speed is unknown, defaulting to 1000 [ 293.576644][T17135] lo speed is unknown, defaulting to 1000 [ 293.589495][ T9284] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 293.600144][ T9284] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 294.571155][ T5857] Bluetooth: hci1: command tx timeout [ 294.594560][T17202] netlink: 'syz.1.3308': attribute type 30 has an invalid length. [ 294.600433][T17203] netlink: 'syz.1.3308': attribute type 30 has an invalid length. [ 295.431536][ T13] bond1 (unregistering): Released all slaves [ 295.589911][ T13] bond2 (unregistering): Released all slaves [ 295.737190][ T13] bond3 (unregistering): Released all slaves [ 295.893546][ T13] bond4 (unregistering): Released all slaves [ 296.044473][ T13] bond5 (unregistering): Released all slaves [ 296.059351][ T13] bond6 (unregistering): Released all slaves [ 296.073351][ T13] bond0 (unregistering): Released all slaves [ 296.225976][ T13] bond7 (unregistering): (slave veth17): Releasing active interface [ 296.236184][ T13] bond7 (unregistering): Released all slaves [ 296.254283][T17135] chnl_net:caif_netlink_parms(): no params data found [ 296.272550][T17197] __nla_validate_parse: 7 callbacks suppressed [ 296.272574][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3307'. [ 296.288165][T17147] lo speed is unknown, defaulting to 1000 [ 296.321504][ T9278] net_ratelimit: 7 callbacks suppressed [ 296.321525][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.479041][ T13] tipc: Left network mode [ 296.656696][ T5857] Bluetooth: hci1: command tx timeout [ 297.206310][T17135] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.223389][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'. [ 297.224135][T17135] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.264388][T17135] bridge_slave_0: entered allmulticast mode [ 297.294142][T17135] bridge_slave_0: entered promiscuous mode [ 297.342675][T17135] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.367591][T17135] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.399623][T17135] bridge_slave_1: entered allmulticast mode [ 297.455530][T17135] bridge_slave_1: entered promiscuous mode [ 297.714100][T17260] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551359) [ 297.731038][T17260] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 297.761121][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 297.896698][T17135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.968393][T17135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.033544][T17269] tipc: Resetting bearer [ 298.189337][ T13] hsr_slave_0: left promiscuous mode [ 298.201522][ T13] hsr_slave_1: left promiscuous mode [ 298.274454][ T13] veth0_macvtap: left promiscuous mode [ 298.401143][T17286] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3328'. [ 298.646999][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 298.730216][ T5857] Bluetooth: hci1: command tx timeout [ 299.407614][T17135] team0: Port device team_slave_0 added [ 299.425746][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.481391][T17294] batman_adv: batadv0: Adding interface: dummy0 [ 299.499351][T17294] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.528662][T17294] batman_adv: batadv0: Interface activated: dummy0 [ 299.571671][T17135] team0: Port device team_slave_1 added [ 299.677858][T17135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.698505][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.735844][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 299.747970][T17305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3336'. [ 299.765141][T17135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.806307][T17135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.848776][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.895802][T17135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.898852][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 299.965740][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 300.086088][T17135] hsr_slave_0: entered promiscuous mode [ 300.121244][T17135] hsr_slave_1: entered promiscuous mode [ 300.152112][T17135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.168887][T17135] Cannot create hsr debugfs directory [ 300.281187][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.303780][T17334] netlink: 'syz.2.3344': attribute type 1 has an invalid length. [ 300.387763][ T13] IPVS: stop unused estimator thread 0... [ 300.516862][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 300.654726][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 300.693971][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 300.811526][ T5857] Bluetooth: hci1: command tx timeout [ 300.984711][T17358] netlink: 'syz.3.3353': attribute type 3 has an invalid length. [ 301.071881][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.237584][T17367] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 301.246810][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.249376][T17367] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 301.392137][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.499537][T17390] __nla_validate_parse: 69 callbacks suppressed [ 301.499555][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3360'. [ 301.528183][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.546682][T17396] netlink: 'syz.2.3362': attribute type 12 has an invalid length. [ 301.623758][T17396] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (254) [ 301.634172][T17398] ipvlan0: entered promiscuous mode [ 301.640268][T17398] ipvlan0: entered allmulticast mode [ 301.646428][T17398] veth0_vlan: entered allmulticast mode [ 301.709543][T17135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.749777][T17135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.787843][T17135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.808212][T17405] xt_CT: No such helper "pptp" [ 301.838535][T17135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.198892][T17438] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 302.208056][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 302.227618][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 302.240754][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 302.257817][T17441] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3375'. [ 302.270901][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.302332][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 302.317773][T17135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.398636][T17135] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.403547][T17453] netlink: 'syz.1.3378': attribute type 21 has an invalid length. [ 302.434853][T17449] macvlan2: entered promiscuous mode [ 302.446729][T17449] macvlan2: entered allmulticast mode [ 302.472835][T17449] bond3: entered promiscuous mode [ 302.474661][T17456] netlink: 'syz.1.3378': attribute type 32 has an invalid length. [ 302.479101][T17449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.511094][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 302.515597][T17449] bond3: left promiscuous mode [ 302.566704][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.573881][ T9284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.643409][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.650617][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.716394][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.717105][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 302.797753][T17465] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3380'. [ 302.819300][T17470] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3382'. [ 302.838615][T17135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.855752][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.982906][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.123374][T17487] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 303.137252][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.271640][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.405734][T17135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.515164][T17135] veth0_vlan: entered promiscuous mode [ 303.560917][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.573409][T17135] veth1_vlan: entered promiscuous mode [ 303.699476][T17135] veth0_macvtap: entered promiscuous mode [ 303.721809][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.765398][T17135] veth1_macvtap: entered promiscuous mode [ 303.821244][T17135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.851938][T17135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.863652][T17135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.872609][T17135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.882287][T17135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.885098][T17511] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 303.891930][T17135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.977160][T17521] ieee802154 phy0 wpan0: encryption failed: -126 [ 304.128226][T17526] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 304.205635][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.224447][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.254938][T17529] gretap1: entered promiscuous mode [ 304.321824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.352221][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.406045][T17537] Bluetooth: MGMT ver 1.23 [ 304.743961][T17553] SET target dimension over the limit! [ 304.770529][T17557] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 305.015421][T17580] ip6tnl1: entered promiscuous mode [ 305.021116][T17580] ip6tnl1: entered allmulticast mode [ 305.027183][T17580] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 305.038186][T17580] bond1: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 305.053047][T17580] bond1: (slave ip6tnl1): making interface the new active one [ 305.063479][T17580] bond1: (slave ip6tnl1): Enslaving as an active interface with an up link [ 305.185326][T17586] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.193077][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.835804][T17598] geneve2: entered promiscuous mode [ 305.841502][T17598] geneve2: entered allmulticast mode [ 305.878130][T17605] validate_nla: 2 callbacks suppressed [ 305.878149][T17605] netlink: 'syz.4.3421': attribute type 4 has an invalid length. [ 306.114134][T17620] x_tables: duplicate underflow at hook 3 [ 306.451951][T17639] netlink: 'syz.2.3429': attribute type 12 has an invalid length. [ 306.476165][ T13] net_ratelimit: 19 callbacks suppressed [ 306.476188][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.612961][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 306.719823][T17648] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 306.741819][T17648] __nla_validate_parse: 7 callbacks suppressed [ 306.741836][T17648] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3433'. [ 306.766829][T17652] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 306.806057][T17651] team0: Device xfrm1 is of different type [ 306.977654][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3436'. [ 306.988071][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.028138][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3436'. [ 307.112978][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.206326][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3438'. [ 307.243120][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.373764][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.469593][T17683] netlink: 'syz.2.3446': attribute type 1 has an invalid length. [ 307.606087][T17683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.721075][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.864419][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.926909][T17703] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 307.980871][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.017900][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3451'. [ 308.059159][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'. [ 308.188094][T17714] sctp: [Deprecated]: syz.1.3452 (pid 17714) Use of int in maxseg socket option. [ 308.188094][T17714] Use struct sctp_assoc_value instead [ 308.191080][T17712] veth3: entered allmulticast mode [ 308.231452][T17716] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3453'. [ 308.260963][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.277292][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 308.290929][T17717] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3453'. [ 308.310394][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 308.626908][T17741] netlink: 'syz.3.3459': attribute type 2 has an invalid length. [ 309.072567][T17756] bridge0: entered promiscuous mode [ 309.086914][T17756] macvtap1: entered allmulticast mode [ 309.098793][T17756] bridge0: entered allmulticast mode [ 309.111589][T17756] bridge0: port 1(macvtap1) entered blocking state [ 309.119609][T17756] bridge0: port 1(macvtap1) entered disabled state [ 309.134679][T17756] bridge0: left allmulticast mode [ 309.141365][T17756] bridge0: left promiscuous mode [ 309.217885][T17760] set match dimension is over the limit! [ 309.618679][T17778] netlink: 'syz.3.3473': attribute type 1 has an invalid length. [ 309.676313][T17785] 8021q: VLANs not supported on ip6_vti0 [ 309.754860][T17778] vlan2: entered allmulticast mode [ 309.793734][T17778] veth1: entered allmulticast mode [ 310.919852][T17847] syzkaller0: entered promiscuous mode [ 310.922197][T17856] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 310.936119][T17847] syzkaller0: entered allmulticast mode [ 312.661316][ T1157] net_ratelimit: 19 callbacks suppressed [ 312.661338][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 312.856442][T17893] __nla_validate_parse: 11 callbacks suppressed [ 312.856461][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 312.871099][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.018881][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 313.040840][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.060522][T17907] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 313.090542][T17907] tipc: Started in network mode [ 313.096082][T17907] tipc: Node identity ac1414aa, cluster identity 4711 [ 313.108281][T17907] tipc: Enabled bearer , priority 10 [ 313.145282][T17907] tipc: Enabling of bearer rejected, failed to enable media [ 313.161654][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.294894][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.431041][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.542880][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.684184][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.811754][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 313.881789][T17944] tunl0: entered promiscuous mode [ 313.910891][T17944] netlink: 'syz.2.3524': attribute type 3 has an invalid length. [ 313.918660][T17944] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3524'. [ 314.206725][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 314.220258][ T9121] tipc: Node number set to 2886997162 [ 314.245409][T17961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3529'. [ 314.273235][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 314.402258][T17966] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 314.415906][T17966] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 314.527557][T17975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3533'. [ 314.696346][T17983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 314.833126][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3538'. [ 315.032460][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3543'. [ 315.403724][T18016] bridge_slave_0: left allmulticast mode [ 315.440533][T18016] bridge_slave_0: left promiscuous mode [ 315.460293][T18016] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.473302][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3551'. [ 315.496407][T18016] bridge_slave_1: left allmulticast mode [ 315.503080][T18016] bridge_slave_1: left promiscuous mode [ 315.514428][T18016] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.526802][T18016] bond0: (slave bond_slave_0): Releasing backup interface [ 315.553643][T18016] bond0: (slave bond_slave_1): Releasing backup interface [ 315.580176][T18016] team0: Port device team_slave_0 removed [ 315.595078][T18016] team0: Port device team_slave_1 removed [ 315.602462][T18016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.611508][T18016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.623975][T18016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.632817][T18016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.741955][T18029] ip6gre1: entered allmulticast mode [ 315.822593][T18019] lo speed is unknown, defaulting to 1000 [ 316.175555][T18019] lo speed is unknown, defaulting to 1000 [ 316.263177][T18056] netlink: 'syz.1.3558': attribute type 7 has an invalid length. [ 316.560863][T18070] x_tables: duplicate underflow at hook 3 [ 316.844144][T18082] netlink: 'syz.2.3569': attribute type 3 has an invalid length. [ 317.143689][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214120][T18097] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 317.240135][T18097] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 317.660224][T18124] netlink: 'syz.3.3585': attribute type 11 has an invalid length. [ 317.697544][T18124] sctp: [Deprecated]: syz.3.3585 (pid 18124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.697544][T18124] Use struct sctp_sack_info instead [ 317.765943][ T9282] net_ratelimit: 26 callbacks suppressed [ 317.765964][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 317.841967][T18131] bond0: entered promiscuous mode [ 317.847285][T18131] bond_slave_0: entered promiscuous mode [ 317.867830][T18131] bond_slave_1: entered promiscuous mode [ 317.892969][T18128] __nla_validate_parse: 7 callbacks suppressed [ 317.892987][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 317.901434][T18134] batman_adv: batadv0: Interface deactivated: dummy0 [ 317.930540][T18134] batman_adv: batadv0: Removing interface: dummy0 [ 317.948835][T18134] bridge0: port 3(batadv0) entered disabled state [ 317.971097][T18134] bridge_slave_0: left allmulticast mode [ 317.977057][T18134] bridge_slave_0: left promiscuous mode [ 317.986688][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 317.986970][T18134] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.025469][T18134] bridge_slave_1: left allmulticast mode [ 318.031644][T18134] bridge_slave_1: left promiscuous mode [ 318.037686][T18134] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.058413][T18134] bond0: (slave bond_slave_0): Releasing backup interface [ 318.097935][T18134] bond0: (slave bond_slave_1): Releasing backup interface [ 318.134798][T18134] team_slave_0: left promiscuous mode [ 318.179012][T18134] team0: Port device team_slave_0 removed [ 318.185810][T18149] sctp: [Deprecated]: syz.3.3594 (pid 18149) Use of int in maxseg socket option. [ 318.185810][T18149] Use struct sctp_assoc_value instead [ 318.201916][T18134] team_slave_1: left promiscuous mode [ 318.227793][T18134] team0: Port device team_slave_1 removed [ 318.237582][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.245400][T18134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.256753][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.290228][T18134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.365537][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'. [ 318.479531][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 319.081357][T18167] xt_CONNSECMARK: invalid mode: 0 [ 319.120473][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.171623][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'. [ 319.240280][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.255480][ T924] IPVS: starting estimator thread 0... [ 319.320855][T18176] netlink: 'syz.2.3601': attribute type 1 has an invalid length. [ 319.360307][T18174] IPVS: using max 28 ests per chain, 67200 per kthread [ 319.464489][T18178] ip6tnl2: entered promiscuous mode [ 319.470096][T18178] ip6tnl2: entered allmulticast mode [ 319.502696][T18189] netlink: 'syz.0.3603': attribute type 13 has an invalid length. [ 319.619040][T18194] sctp: [Deprecated]: syz.4.3606 (pid 18194) Use of int in maxseg socket option. [ 319.619040][T18194] Use struct sctp_assoc_value instead [ 319.792812][T18202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.809455][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.839164][T18189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.921876][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.037052][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.161628][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.290592][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.365130][T18231] IPVS: length: 4096 != 8 [ 320.374939][T18230] IPVS: length: 4096 != 8 [ 320.423217][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 320.459883][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'. [ 320.607847][T18251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 320.725162][T18251] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.815881][T18251] macvlan3: entered promiscuous mode [ 320.830861][T18251] macvlan3: entered allmulticast mode [ 320.847362][T18251] vlan1: entered allmulticast mode [ 320.857471][T18251] veth0_vlan: entered allmulticast mode [ 320.867595][T18251] vlan1: entered promiscuous mode [ 320.879788][T18251] bond6: (slave macvlan3): Enslaving as an active interface with an up link [ 321.623756][T18323] xt_HMARK: spi-set and port-set can't be combined [ 321.673934][T18325] tipc: Enabling of bearer rejected, failed to enable media [ 321.686449][T18329] xt_HMARK: spi-set and port-set can't be combined [ 321.887131][T18340] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3654'. [ 321.999676][T18347] Bluetooth: MGMT ver 1.23 [ 322.146819][T18355] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.3661'. [ 322.246708][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3665'. [ 322.336540][T18367] ksmbd: Unknown IPC event: 3, ignore. [ 322.467844][T18370] x_tables: duplicate underflow at hook 3 [ 322.481488][T18370] x_tables: duplicate underflow at hook 3 [ 322.499534][T18370] x_tables: duplicate underflow at hook 3 [ 322.522993][T18370] x_tables: duplicate underflow at hook 3 [ 322.724306][T18394] netlink: 'syz.1.3674': attribute type 1 has an invalid length. [ 322.847264][T18399] bond1: (slave bridge1): making interface the new active one [ 322.855953][T18399] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 323.051214][ T9280] net_ratelimit: 20 callbacks suppressed [ 323.051232][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.139749][T18421] __nla_validate_parse: 6 callbacks suppressed [ 323.139769][T18421] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3682'. [ 323.499000][T18418] macvlan0: left promiscuous mode [ 323.513857][T18418] macvlan0: left allmulticast mode [ 323.579372][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3685'. [ 323.600539][T18418] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.609623][T18418] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.619415][T18418] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.629024][T18418] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.677029][T18418] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.686855][T18418] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.696298][T18418] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.706109][T18418] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.722264][T18418] veth3: left allmulticast mode [ 323.751095][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 323.802116][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.887696][T18447] xt_TCPMSS: Only works on TCP SYN packets [ 323.962556][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 323.964751][T18456] xt_socket: unknown flags 0x3c [ 324.001712][T18456] !: renamed from bond0 [ 324.061874][T18461] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 324.093605][T18459] openvswitch: netlink: IP tunnel dst address not specified [ 324.122762][T18461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.144117][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.185508][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 324.290582][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.309114][T18472] veth1_macvtap: left promiscuous mode [ 324.345560][T18481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.390029][T18482] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 324.410953][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.543591][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.719824][T18503] vlan2: entered promiscuous mode [ 324.727170][T18503] bridge0: entered promiscuous mode [ 324.783425][T18503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3704'. [ 324.814074][T18505] netlink: 'syz.4.3705': attribute type 21 has an invalid length. [ 325.635956][T18516] vlan1 (unregistering): left allmulticast mode [ 325.647422][T18516] veth0_vlan (unregistering): left allmulticast mode [ 325.658350][T18516] vlan1 (unregistering): left promiscuous mode [ 325.756866][T18516] bond6: (slave macvlan3): Releasing backup interface [ 326.078224][T18529] netlink: 'syz.3.3714': attribute type 14 has an invalid length. [ 326.094172][T18533] x_tables: duplicate underflow at hook 2 [ 326.171827][T18533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3713'. [ 326.225901][T18542] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 326.241009][T18542] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3715'. [ 326.251633][ T5857] Bluetooth: hci1: command 0x0405 tx timeout [ 326.403063][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 326.423304][T18555] Cannot find set identified by id 0 to match [ 326.486253][T18558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3722'. [ 326.937370][T18587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3729'. [ 327.109630][T18593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.156957][T18593] gretap1: entered promiscuous mode [ 327.167956][T18593] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 327.285941][T18593] macvlan3: entered promiscuous mode [ 327.311004][T18593] macvlan3: entered allmulticast mode [ 327.316829][T18593] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 327.612235][T18621] xt_cgroup: xt_cgroup: no path or classid specified [ 327.834919][T18639] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 327.856590][T18639] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 328.110127][ T9287] net_ratelimit: 19 callbacks suppressed [ 328.110146][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.262056][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.430304][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.591746][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.730631][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.882680][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 328.937552][T18689] __nla_validate_parse: 2 callbacks suppressed [ 328.937569][T18689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3763'. [ 329.001248][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.112177][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.161243][T18697] netlink: 'syz.3.3769': attribute type 16 has an invalid length. [ 329.206138][T18697] netlink: 'syz.3.3769': attribute type 3 has an invalid length. [ 329.218895][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'. [ 329.240103][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.271276][T18697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3769'. [ 329.351440][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.617946][T18726] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 329.676191][T18726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.734367][T18726] veth5: entered promiscuous mode [ 329.766262][T18726] bond2: (slave veth5): Enslaving as an active interface with a down link [ 329.852367][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3780'. [ 330.045118][T18762] sctp: [Deprecated]: syz.4.3786 (pid 18762) Use of int in max_burst socket option. [ 330.045118][T18762] Use struct sctp_assoc_value instead [ 330.078744][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 330.129280][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 330.211216][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 330.353718][T18778] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 330.370605][T18778] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3791'. [ 330.398169][T18778] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 330.604346][T18787] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 330.613415][T18787] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 330.817063][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3799'. [ 330.903167][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3800'. [ 331.066616][T18809] netlink: 'syz.1.3804': attribute type 62 has an invalid length. [ 331.229347][T18819] ip6tnl1: entered promiscuous mode [ 331.250784][T18819] ip6tnl1: entered allmulticast mode [ 331.329129][T18818] ip6tnl1: entered promiscuous mode [ 331.342659][T18818] ip6tnl1: entered allmulticast mode [ 332.297873][T18858] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 332.336039][T18854] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 332.395562][T18861] vlan2: entered promiscuous mode [ 332.431104][T18861] bridge0: entered promiscuous mode [ 332.686894][T18880] netlink: 'syz.1.3827': attribute type 5 has an invalid length. [ 332.920950][T18902] netlink: 'syz.2.3831': attribute type 2 has an invalid length. [ 333.150344][ T9284] net_ratelimit: 31 callbacks suppressed [ 333.150366][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.270150][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.381334][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.490384][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.625582][T18915] netlink: 'syz.3.3834': attribute type 21 has an invalid length. [ 333.660587][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.778320][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.941441][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 333.958329][T18940] IPv6: NLM_F_REPLACE set, but no existing node found! [ 334.073979][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.166880][T18952] tipc: Can't bind to reserved service type 2 [ 334.182046][T18952] __nla_validate_parse: 12 callbacks suppressed [ 334.182064][T18952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3847'. [ 334.221685][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.333754][T18965] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3850'. [ 334.363328][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 334.385420][T18967] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3852'. [ 334.596161][T18982] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3858'. [ 334.622469][T18967] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 334.632841][T18967] bond0 (unregistering): Released all slaves [ 335.005408][T19003] pimreg: entered allmulticast mode [ 335.353001][T19015] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3870'. [ 335.697830][T19034] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 335.853133][T19046] validate_nla: 2 callbacks suppressed [ 335.853146][T19046] netlink: 'syz.2.3876': attribute type 29 has an invalid length. [ 335.875287][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 335.892324][T19046] vlan0: entered promiscuous mode [ 335.897642][T19046] vlan0: entered allmulticast mode [ 335.903447][T19046] bridge0: entered allmulticast mode [ 336.417850][T19070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3881'. [ 336.485708][T19071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3881'. [ 336.531299][T19077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3881'. [ 336.578183][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'. [ 336.831242][T19092] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 336.849020][T19094] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 336.871031][T19096] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 336.891674][T19096] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 336.906835][T19092] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 337.257740][T19137] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 337.393896][T19146] netlink: 'syz.2.3900': attribute type 39 has an invalid length. [ 337.849372][T19178] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 337.877076][T19180] netlink: 'syz.2.3910': attribute type 8 has an invalid length. [ 338.253890][ T9284] net_ratelimit: 27 callbacks suppressed [ 338.253910][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.392116][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.500494][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.610218][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.693002][T19221] FAULT_INJECTION: forcing a failure. [ 338.693002][T19221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.709391][T19221] CPU: 0 UID: 0 PID: 19221 Comm: syz.3.3921 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 338.709417][T19221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.709432][T19221] Call Trace: [ 338.709439][T19221] [ 338.709445][T19221] dump_stack_lvl+0x189/0x250 [ 338.709463][T19221] ? __pfx____ratelimit+0x10/0x10 [ 338.709475][T19221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.709486][T19221] ? __pfx__printk+0x10/0x10 [ 338.709499][T19221] ? __might_fault+0xb0/0x130 [ 338.709519][T19221] should_fail_ex+0x414/0x560 [ 338.709533][T19221] _copy_from_user+0x2d/0xb0 [ 338.709546][T19221] ___sys_sendmsg+0x158/0x2a0 [ 338.709563][T19221] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.709601][T19221] ? __fget_files+0x2a/0x420 [ 338.709610][T19221] ? __fget_files+0x3a0/0x420 [ 338.709624][T19221] __x64_sys_sendmsg+0x19b/0x260 [ 338.709640][T19221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.709659][T19221] ? __pfx_ksys_write+0x10/0x10 [ 338.709675][T19221] ? do_syscall_64+0xbe/0x3b0 [ 338.709688][T19221] do_syscall_64+0xfa/0x3b0 [ 338.709698][T19221] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.709708][T19221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.709717][T19221] ? clear_bhb_loop+0x60/0xb0 [ 338.709729][T19221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.709739][T19221] RIP: 0033:0x7ff41498e9a9 [ 338.709750][T19221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.709758][T19221] RSP: 002b:00007ff415893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.709770][T19221] RAX: ffffffffffffffda RBX: 00007ff414bb6080 RCX: 00007ff41498e9a9 [ 338.709777][T19221] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 338.709784][T19221] RBP: 00007ff415893090 R08: 0000000000000000 R09: 0000000000000000 [ 338.709790][T19221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.709796][T19221] R13: 0000000000000000 R14: 00007ff414bb6080 R15: 00007ffcc8adfd88 [ 338.709812][T19221] [ 338.915076][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 338.947590][T19209] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDzR' [ 338.986974][T19223] netlink: 'syz.2.3922': attribute type 6 has an invalid length. [ 339.004122][T19209] CPU: 0 UID: 0 PID: 19209 Comm: syz.1.3918 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 339.004149][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.004160][T19209] Call Trace: [ 339.004167][T19209] [ 339.004176][T19209] dump_stack_lvl+0x189/0x250 [ 339.004205][T19209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.004226][T19209] ? __pfx__printk+0x10/0x10 [ 339.004249][T19209] ? kernfs_path_from_node+0x2c/0x260 [ 339.004269][T19209] ? kernfs_path_from_node+0x2c/0x260 [ 339.004285][T19209] ? kernfs_path_from_node+0x2c/0x260 [ 339.004305][T19209] ? kernfs_path_from_node+0x22c/0x260 [ 339.004321][T19209] ? kernfs_path_from_node+0x2c/0x260 [ 339.004343][T19209] sysfs_warn_dup+0x8e/0xa0 [ 339.004370][T19209] sysfs_do_create_link_sd+0xc0/0x110 [ 339.004392][T19209] device_add_class_symlinks+0x1cf/0x240 [ 339.004423][T19209] device_add+0x475/0xb50 [ 339.004454][T19209] wiphy_register+0x199a/0x26b0 [ 339.004497][T19209] ? __pfx_wiphy_register+0x10/0x10 [ 339.004517][T19209] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 339.004548][T19209] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 339.004579][T19209] ieee80211_register_hw+0x33e1/0x4120 [ 339.004621][T19209] ? ieee80211_register_hw+0x1441/0x4120 [ 339.004660][T19209] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 339.004690][T19209] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.004726][T19209] ? __hrtimer_setup+0x187/0x210 [ 339.004745][T19209] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 339.004776][T19209] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 339.004839][T19209] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 339.004861][T19209] ? trace_kmalloc+0x1f/0xd0 [ 339.004882][T19209] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 339.004907][T19209] ? kstrndup+0xbf/0x160 [ 339.004935][T19209] hwsim_new_radio_nl+0xea4/0x1b10 [ 339.004962][T19209] ? __pfx___nla_validate_parse+0x10/0x10 [ 339.004997][T19209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 339.005038][T19209] ? __nla_parse+0x40/0x60 [ 339.005065][T19209] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 339.005097][T19209] genl_family_rcv_msg_doit+0x215/0x300 [ 339.005124][T19209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.005158][T19209] ? bpf_lsm_capable+0x9/0x20 [ 339.005180][T19209] ? security_capable+0x7e/0x2e0 [ 339.005207][T19209] genl_rcv_msg+0x60e/0x790 [ 339.005232][T19209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.005249][T19209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 339.005290][T19209] netlink_rcv_skb+0x208/0x470 [ 339.005315][T19209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.005336][T19209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.005381][T19209] ? down_read+0x1ad/0x2e0 [ 339.005406][T19209] genl_rcv+0x28/0x40 [ 339.005423][T19209] netlink_unicast+0x75c/0x8e0 [ 339.005458][T19209] netlink_sendmsg+0x805/0xb30 [ 339.005494][T19209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.005523][T19209] ? aa_sock_msg_perm+0x94/0x160 [ 339.005543][T19209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.005562][T19209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.005588][T19209] __sock_sendmsg+0x21c/0x270 [ 339.005614][T19209] ____sys_sendmsg+0x505/0x830 [ 339.005648][T19209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.005686][T19209] ? import_iovec+0x74/0xa0 [ 339.005715][T19209] ___sys_sendmsg+0x21f/0x2a0 [ 339.005744][T19209] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.005829][T19209] ? __fget_files+0x2a/0x420 [ 339.005846][T19209] ? __fget_files+0x3a0/0x420 [ 339.005873][T19209] __x64_sys_sendmsg+0x19b/0x260 [ 339.005902][T19209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.005940][T19209] ? rcu_is_watching+0x15/0xb0 [ 339.005967][T19209] ? do_syscall_64+0xbe/0x3b0 [ 339.005990][T19209] do_syscall_64+0xfa/0x3b0 [ 339.006012][T19209] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.006030][T19209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.006047][T19209] ? clear_bhb_loop+0x60/0xb0 [ 339.006075][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.006095][T19209] RIP: 0033:0x7fac6b58e9a9 [ 339.006111][T19209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.006130][T19209] RSP: 002b:00007fac6c316038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.006149][T19209] RAX: ffffffffffffffda RBX: 00007fac6b7b5fa0 RCX: 00007fac6b58e9a9 [ 339.006162][T19209] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 339.006173][T19209] RBP: 00007fac6b610d69 R08: 0000000000000000 R09: 0000000000000000 [ 339.006184][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.006195][T19209] R13: 0000000000000000 R14: 00007fac6b7b5fa0 R15: 00007ffc55141d78 [ 339.006225][T19209] [ 339.466361][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.590839][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.721137][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.791406][T19241] ieee802154 phy0 wpan0: encryption failed: -126 [ 339.855833][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.990833][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.144946][T19264] FAULT_INJECTION: forcing a failure. [ 340.144946][T19264] name failslab, interval 1, probability 0, space 0, times 0 [ 340.168388][T19264] CPU: 1 UID: 0 PID: 19264 Comm: syz.2.3934 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 340.168415][T19264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.168426][T19264] Call Trace: [ 340.168440][T19264] [ 340.168448][T19264] dump_stack_lvl+0x189/0x250 [ 340.168473][T19264] ? __pfx____ratelimit+0x10/0x10 [ 340.168492][T19264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.168512][T19264] ? __pfx__printk+0x10/0x10 [ 340.168540][T19264] ? __pfx___might_resched+0x10/0x10 [ 340.168566][T19264] should_fail_ex+0x414/0x560 [ 340.168590][T19264] should_failslab+0xa8/0x100 [ 340.168614][T19264] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 340.168639][T19264] ? __alloc_skb+0x112/0x2d0 [ 340.168666][T19264] __alloc_skb+0x112/0x2d0 [ 340.168693][T19264] netlink_sendmsg+0x5c6/0xb30 [ 340.168725][T19264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.168752][T19264] ? aa_sock_msg_perm+0x94/0x160 [ 340.168772][T19264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.168789][T19264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.168812][T19264] __sock_sendmsg+0x21c/0x270 [ 340.168835][T19264] ____sys_sendmsg+0x505/0x830 [ 340.168864][T19264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.168897][T19264] ? import_iovec+0x74/0xa0 [ 340.168922][T19264] ___sys_sendmsg+0x21f/0x2a0 [ 340.168948][T19264] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.169003][T19264] ? __fget_files+0x2a/0x420 [ 340.169017][T19264] ? __fget_files+0x3a0/0x420 [ 340.169041][T19264] __x64_sys_sendmsg+0x19b/0x260 [ 340.169068][T19264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.169101][T19264] ? __pfx_ksys_write+0x10/0x10 [ 340.169121][T19264] ? rcu_is_watching+0x15/0xb0 [ 340.169145][T19264] ? do_syscall_64+0xbe/0x3b0 [ 340.169166][T19264] do_syscall_64+0xfa/0x3b0 [ 340.169181][T19264] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.169197][T19264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.169214][T19264] ? clear_bhb_loop+0x60/0xb0 [ 340.169236][T19264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.169253][T19264] RIP: 0033:0x7f9d2ed8e9a9 [ 340.169269][T19264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.169284][T19264] RSP: 002b:00007f9d2fbd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.169303][T19264] RAX: ffffffffffffffda RBX: 00007f9d2efb5fa0 RCX: 00007f9d2ed8e9a9 [ 340.169315][T19264] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 340.169326][T19264] RBP: 00007f9d2fbd0090 R08: 0000000000000000 R09: 0000000000000000 [ 340.169336][T19264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.169346][T19264] R13: 0000000000000000 R14: 00007f9d2efb5fa0 R15: 00007ffe11f2e478 [ 340.169374][T19264] [ 340.247297][T19117] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 340.508288][T19117] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 340.525624][T19284] __nla_validate_parse: 12 callbacks suppressed [ 340.525643][T19284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3940'. [ 340.547465][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3939'. [ 340.551467][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3939'. [ 340.560603][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.626843][T19285] bridge_slave_1 (unregistering): left allmulticast mode [ 340.637536][T19285] bridge_slave_1 (unregistering): left promiscuous mode [ 340.645436][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.651463][T19293] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3940'. [ 340.748508][T19295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3942'. [ 341.317064][T19331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3955'. [ 341.343873][T19331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3955'. [ 341.575983][T19348] wg2: entered promiscuous mode [ 341.585346][T19348] wg2: entered allmulticast mode [ 341.675999][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 341.694956][T19355] FAULT_INJECTION: forcing a failure. [ 341.694956][T19355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.717237][T19355] CPU: 0 UID: 0 PID: 19355 Comm: syz.3.3964 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 341.717266][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.717275][T19355] Call Trace: [ 341.717283][T19355] [ 341.717290][T19355] dump_stack_lvl+0x189/0x250 [ 341.717315][T19355] ? __pfx____ratelimit+0x10/0x10 [ 341.717333][T19355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.717353][T19355] ? __pfx__printk+0x10/0x10 [ 341.717376][T19355] ? __might_fault+0xb0/0x130 [ 341.717410][T19355] should_fail_ex+0x414/0x560 [ 341.717435][T19355] _copy_from_iter+0x1db/0x16f0 [ 341.717461][T19355] ? rcu_is_watching+0x15/0xb0 [ 341.717483][T19355] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 341.717509][T19355] ? __pfx__copy_from_iter+0x10/0x10 [ 341.717539][T19355] ? __build_skb_around+0x257/0x3e0 [ 341.717567][T19355] ? netlink_sendmsg+0x642/0xb30 [ 341.717588][T19355] ? skb_put+0x11b/0x210 [ 341.717615][T19355] netlink_sendmsg+0x6b2/0xb30 [ 341.717649][T19355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.717674][T19355] ? aa_sock_msg_perm+0x94/0x160 [ 341.717695][T19355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.717713][T19355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.717738][T19355] __sock_sendmsg+0x21c/0x270 [ 341.717760][T19355] ____sys_sendmsg+0x505/0x830 [ 341.717791][T19355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.717824][T19355] ? import_iovec+0x74/0xa0 [ 341.717849][T19355] ___sys_sendmsg+0x21f/0x2a0 [ 341.717875][T19355] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.717934][T19355] ? __fget_files+0x2a/0x420 [ 341.717950][T19355] ? __fget_files+0x3a0/0x420 [ 341.717976][T19355] __x64_sys_sendmsg+0x19b/0x260 [ 341.718002][T19355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.718036][T19355] ? __pfx_ksys_write+0x10/0x10 [ 341.718057][T19355] ? rcu_is_watching+0x15/0xb0 [ 341.718082][T19355] ? do_syscall_64+0xbe/0x3b0 [ 341.718105][T19355] do_syscall_64+0xfa/0x3b0 [ 341.718123][T19355] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.718141][T19355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.718158][T19355] ? clear_bhb_loop+0x60/0xb0 [ 341.718179][T19355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.718196][T19355] RIP: 0033:0x7ff41498e9a9 [ 341.718213][T19355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.718228][T19355] RSP: 002b:00007ff4158b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.718246][T19355] RAX: ffffffffffffffda RBX: 00007ff414bb5fa0 RCX: 00007ff41498e9a9 [ 341.718259][T19355] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 341.718270][T19355] RBP: 00007ff4158b4090 R08: 0000000000000000 R09: 0000000000000000 [ 341.718280][T19355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.718291][T19355] R13: 0000000000000000 R14: 00007ff414bb5fa0 R15: 00007ffcc8adfd88 [ 341.718320][T19355] [ 342.056555][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'. [ 342.476799][T19381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3974'. [ 342.489629][T19382] syz_tun: entered promiscuous mode [ 342.504717][T19382] syz_tun: entered allmulticast mode [ 342.651455][T19390] lo: entered promiscuous mode [ 342.658592][T19390] netlink: 'syz.0.3978': attribute type 2 has an invalid length. [ 343.119636][T19417] veth0: entered promiscuous mode [ 343.127042][T19417] xt_hashlimit: invalid rate [ 343.168636][T19420] pim6reg: entered allmulticast mode [ 343.292188][ T9280] net_ratelimit: 25 callbacks suppressed [ 343.292209][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.389223][T19436] netlink: 'syz.2.3994': attribute type 11 has an invalid length. [ 343.421414][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.530462][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.650239][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.790196][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 343.922308][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.022812][T19412] veth0: left promiscuous mode [ 344.035486][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.046004][T19417] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 344.164218][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.281773][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.401270][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.443435][T19492] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 344.644836][T19501] netlink: 'syz.3.4011': attribute type 4 has an invalid length. [ 345.156597][T19525] netlink: 'syz.0.4019': attribute type 3 has an invalid length. [ 345.210418][ T5857] Bluetooth: hci0: command 0x0c20 tx timeout [ 345.726380][T19550] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 345.879672][T19561] netlink: 'syz.1.4033': attribute type 2 has an invalid length. [ 346.065652][T19568] sch_fq: defrate 0 ignored. [ 346.274517][T19578] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 346.283571][T19578] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 346.297781][T19578] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 346.345358][T19585] __nla_validate_parse: 78 callbacks suppressed [ 346.345374][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 346.393864][T19585] FAULT_INJECTION: forcing a failure. [ 346.393864][T19585] name failslab, interval 1, probability 0, space 0, times 0 [ 346.406769][T19585] CPU: 1 UID: 0 PID: 19585 Comm: syz.1.4040 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 346.406794][T19585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.406804][T19585] Call Trace: [ 346.406811][T19585] [ 346.406818][T19585] dump_stack_lvl+0x189/0x250 [ 346.406842][T19585] ? __pfx____ratelimit+0x10/0x10 [ 346.406869][T19585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.406887][T19585] ? __pfx__printk+0x10/0x10 [ 346.406915][T19585] ? __pfx___might_resched+0x10/0x10 [ 346.406935][T19585] ? fs_reclaim_acquire+0x7d/0x100 [ 346.406957][T19585] should_fail_ex+0x414/0x560 [ 346.406982][T19585] should_failslab+0xa8/0x100 [ 346.407005][T19585] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 346.407026][T19585] ? __alloc_skb+0x112/0x2d0 [ 346.407045][T19585] ? netlink_ack+0x88/0xa50 [ 346.407068][T19585] __alloc_skb+0x112/0x2d0 [ 346.407094][T19585] netlink_ack+0x146/0xa50 [ 346.407113][T19585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.407128][T19585] ? ref_tracker_free+0x63a/0x7d0 [ 346.407143][T19585] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 346.407160][T19585] ? __pfx_nl80211_post_doit+0x10/0x10 [ 346.407175][T19585] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.407204][T19585] netlink_rcv_skb+0x28c/0x470 [ 346.407227][T19585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.407246][T19585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.407284][T19585] ? down_read+0x1ad/0x2e0 [ 346.407307][T19585] genl_rcv+0x28/0x40 [ 346.407321][T19585] netlink_unicast+0x75c/0x8e0 [ 346.407355][T19585] netlink_sendmsg+0x805/0xb30 [ 346.407386][T19585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.407412][T19585] ? aa_sock_msg_perm+0x94/0x160 [ 346.407432][T19585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.407450][T19585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.407472][T19585] __sock_sendmsg+0x21c/0x270 [ 346.407495][T19585] ____sys_sendmsg+0x505/0x830 [ 346.407524][T19585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.407558][T19585] ? import_iovec+0x74/0xa0 [ 346.407584][T19585] ___sys_sendmsg+0x21f/0x2a0 [ 346.407609][T19585] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.407671][T19585] ? __fget_files+0x2a/0x420 [ 346.407686][T19585] ? __fget_files+0x3a0/0x420 [ 346.407714][T19585] __x64_sys_sendmsg+0x19b/0x260 [ 346.407741][T19585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.407777][T19585] ? __pfx_ksys_write+0x10/0x10 [ 346.407797][T19585] ? rcu_is_watching+0x15/0xb0 [ 346.407823][T19585] ? do_syscall_64+0xbe/0x3b0 [ 346.407847][T19585] do_syscall_64+0xfa/0x3b0 [ 346.407871][T19585] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.407890][T19585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.407907][T19585] ? clear_bhb_loop+0x60/0xb0 [ 346.407929][T19585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.407946][T19585] RIP: 0033:0x7fac6b58e9a9 [ 346.407963][T19585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.407977][T19585] RSP: 002b:00007fac6c316038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.407996][T19585] RAX: ffffffffffffffda RBX: 00007fac6b7b5fa0 RCX: 00007fac6b58e9a9 [ 346.408008][T19585] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 346.408020][T19585] RBP: 00007fac6c316090 R08: 0000000000000000 R09: 0000000000000000 [ 346.408031][T19585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.408040][T19585] R13: 0000000000000000 R14: 00007fac6b7b5fa0 R15: 00007ffc55141d78 [ 346.408069][T19585] [ 346.408438][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4041'. [ 346.927300][T19598] bond2: entered promiscuous mode [ 346.955291][T19598] bond2: entered allmulticast mode [ 346.963794][T19598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.326037][T19598] bond2 (unregistering): Released all slaves [ 347.450298][T19632] x_tables: duplicate underflow at hook 1 [ 347.578311][T19635] lo: entered promiscuous mode [ 347.627571][T19635] netlink: 'syz.1.4053': attribute type 2 has an invalid length. [ 347.639051][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 347.651373][T19117] lo speed is unknown, defaulting to 1000 [ 347.657134][T19117] yz2: Port: 1 Link DOWN [ 347.882668][T19648] netlink: 'syz.1.4058': attribute type 7 has an invalid length. [ 348.058655][T19652] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4060'. [ 348.088348][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 348.455800][T19676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4064'. [ 348.572878][ T1151] net_ratelimit: 29 callbacks suppressed [ 348.572896][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 348.712468][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 348.823625][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 348.836889][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 348.941194][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.050426][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.160313][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.271202][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.382327][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.490395][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.602400][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.463691][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4077'. [ 350.491418][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4077'. [ 350.611438][T19731] bridge_slave_0: entered promiscuous mode [ 350.705382][T19731] bridge_slave_0: left promiscuous mode [ 351.009514][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'. [ 351.035030][T19758] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 351.073831][T19758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.109817][T19758] macvtap1: entered promiscuous mode [ 351.120114][T19758] bond2: entered promiscuous mode [ 351.126920][T19758] macvtap1: entered allmulticast mode [ 351.138163][T19758] bond2: entered allmulticast mode [ 351.155425][T19758] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 351.231753][T19763] bond2: (slave gretap1): making interface the new active one [ 351.239818][T19763] gretap1: entered promiscuous mode [ 351.247470][T19763] gretap1: entered allmulticast mode [ 351.256136][T19763] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 351.357369][T19775] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 351.443977][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'. [ 351.454003][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'. [ 351.788667][T19795] syzkaller0: entered allmulticast mode [ 351.939152][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4104'. [ 351.957534][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4104'. [ 352.032636][T19807] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 352.117612][T19805] gretap2: entered promiscuous mode [ 352.124841][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4106'. [ 352.188369][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4105'. [ 352.313206][T19819] netlink: 'syz.2.4109': attribute type 33 has an invalid length. [ 352.340324][T19819] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4109'. [ 352.377969][T19819] tipc: Resetting bearer [ 352.662884][T19843] nbd: couldn't find a device at index -373156329 [ 352.746097][T19849] netlink: 'syz.3.4118': attribute type 1 has an invalid length. [ 352.847168][T19849] bond0: entered promiscuous mode [ 352.857628][T19849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.959144][T19850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.966570][T19850] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 352.978970][T19850] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 353.020406][T19850] bond0: (slave wireguard0): making interface the new active one [ 353.032790][T19850] wireguard0: entered promiscuous mode [ 353.068976][T19850] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 353.125688][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 353.153454][T19875] bridge_slave_0: left allmulticast mode [ 353.175221][T19875] bridge_slave_0: left promiscuous mode [ 353.190924][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.366380][T19883] lo: left promiscuous mode [ 353.430311][T19883] bond0: left promiscuous mode [ 353.443742][T19883] bond_slave_0: left promiscuous mode [ 353.464184][T19883] bond_slave_1: left promiscuous mode [ 353.606848][ T9278] net_ratelimit: 30 callbacks suppressed [ 353.606869][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.678151][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4132'. [ 353.760749][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.785929][T19918] netlink: 'syz.0.4136': attribute type 4 has an invalid length. [ 353.809194][ T30] audit: type=1800 audit(1752914335.020:9): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4135" name="memory.events" dev="tmpfs" ino=1285 res=0 errno=0 [ 353.891044][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.900220][ T30] audit: type=1804 audit(1752914335.020:10): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4135" name="/newroot/250/memory.events" dev="tmpfs" ino=1285 res=1 errno=0 [ 353.937805][ T30] audit: type=1107 audit(1752914335.150:11): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='->&o-T49x' [ 354.019931][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.203552][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.328678][T19940] bridge1: entered promiscuous mode [ 354.337663][T19940] bridge1: entered allmulticast mode [ 354.360984][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.531375][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.554003][T19963] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 354.656183][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.685996][T19971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4157'. [ 354.704170][T19971] netlink: 'syz.3.4157': attribute type 1 has an invalid length. [ 354.716020][T19971] netlink: 'syz.3.4157': attribute type 2 has an invalid length. [ 354.728971][T19971] netlink: 'syz.3.4157': attribute type 1 has an invalid length. [ 354.751664][T19971] netlink: 'syz.3.4157': attribute type 2 has an invalid length. [ 354.781588][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.900301][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.936026][T19987] delete_channel: no stack [ 355.413836][T20012] gretap0: entered promiscuous mode [ 355.432099][T20012] gretap0: left promiscuous mode [ 355.469590][T20010] nbd: must specify a device to reconfigure [ 355.726634][T20031] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 355.833563][T20035] veth0_to_bond: entered allmulticast mode [ 355.854555][T20041] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 355.870906][T20035] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.140959][T20062] netlink: 'syz.4.4183': attribute type 32 has an invalid length. [ 356.166010][T20055] lo speed is unknown, defaulting to 1000 [ 356.179096][T20062] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 356.588131][T20055] lo speed is unknown, defaulting to 1000 [ 357.078798][T20101] netlink: 'syz.3.4194': attribute type 11 has an invalid length. [ 357.120171][T20101] netlink: 'syz.3.4194': attribute type 11 has an invalid length. [ 357.159534][T20101] __nla_validate_parse: 14 callbacks suppressed [ 357.159554][T20101] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4194'. [ 357.619243][T20127] netlink: 'syz.3.4200': attribute type 10 has an invalid length. [ 357.631066][T20127] team0: Device hsr_slave_0 failed to register rx_handler [ 357.896636][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 357.953950][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 358.756339][T20156] net_ratelimit: 24 callbacks suppressed [ 358.756358][T20156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.833790][T20158] openvswitch: netlink: Message has 1 unknown bytes. [ 358.846871][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.810850][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.931181][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.979523][T20173] SET target dimension over the limit! [ 360.001458][T20175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4214'. [ 360.028474][T20177] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4217'. [ 360.042747][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.193439][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.216144][T20184] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4220'. [ 360.294610][T20189] syz_tun: entered allmulticast mode [ 360.343502][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 360.419352][T20192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.432429][T20185] syz_tun: left allmulticast mode [ 360.437837][T20199] lo: entered allmulticast mode [ 360.470411][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.589525][T20203] netlink: 'syz.0.4226': attribute type 29 has an invalid length. [ 360.610769][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.723423][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.965215][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4235'. [ 360.994318][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 361.099147][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4239'. [ 361.603031][T20267] netlink: 'syz.2.4248': attribute type 1 has an invalid length. [ 361.762691][T20267] macvlan0: entered promiscuous mode [ 361.768635][T20267] macvlan0: entered allmulticast mode [ 361.776857][T20267] bond7: entered promiscuous mode [ 361.783870][T20267] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 361.819680][T20267] bond7: left promiscuous mode [ 362.206559][T20301] __nla_validate_parse: 6 callbacks suppressed [ 362.206577][T20301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4258'. [ 362.234657][T20301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4258'. [ 362.376099][T20321] pim6reg1: entered promiscuous mode [ 362.383774][T20321] pim6reg1: entered allmulticast mode [ 362.661971][T20330] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 362.748818][T20340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.757772][T20340] batadv_slave_0: entered promiscuous mode [ 362.777718][T20339] dvmrp1: entered allmulticast mode [ 362.801412][T20342] Cannot find del_set index 5 as target [ 362.809370][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 362.831669][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4271'. [ 362.897373][T20342] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004 [ 362.930565][T20337] xt_CT: No such helper "syz0" [ 362.992240][T20352] netlink: 'syz.0.4272': attribute type 10 has an invalid length. [ 363.037892][T20352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4272'. [ 363.076882][T20352] team0: Port device geneve0 added [ 363.249549][T20364] bridge2: entered promiscuous mode [ 363.259780][T20364] bridge2: entered allmulticast mode [ 363.348699][T20373] xt_ecn: cannot match TCP bits for non-tcp packets [ 363.583069][T20385] netlink: 'syz.2.4283': attribute type 4 has an invalid length. [ 363.598589][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'. [ 363.732525][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4288'. [ 363.750965][T20395] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4288'. [ 363.768070][T20395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 363.925831][T20407] netlink: 'syz.4.4289': attribute type 2 has an invalid length. [ 363.982268][ T1151] net_ratelimit: 27 callbacks suppressed [ 363.982289][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.089685][T20412] netlink: 'syz.3.4293': attribute type 142 has an invalid length. [ 364.105822][T20412] netlink: 'syz.3.4293': attribute type 142 has an invalid length. [ 364.151060][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.280273][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.430733][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.463126][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 364.592789][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.732093][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.792061][T20459] bridge: RTM_NEWNEIGH with invalid ether address [ 364.842756][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.989572][T20470] geneve2: entered promiscuous mode [ 365.008885][T20470] geneve2: entered allmulticast mode [ 365.039415][T20480] netlink: 'syz.0.4310': attribute type 10 has an invalid length. [ 365.044658][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.202930][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.321671][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 365.721140][T20531] xt_socket: unknown flags 0x3c [ 365.974090][T20545] netlink: 'syz.1.4323': attribute type 1 has an invalid length. [ 366.104153][T20545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.132809][T20556] bond3: entered promiscuous mode [ 366.150509][T20557] tipc: Trying to set illegal importance in message [ 366.157459][T20561] netlink: 'syz.0.4328': attribute type 11 has an invalid length. [ 366.644901][T20591] netlink: 'syz.4.4336': attribute type 7 has an invalid length. [ 366.658847][T20591] netlink: 'syz.4.4336': attribute type 8 has an invalid length. [ 366.791380][T20603] lo: left promiscuous mode [ 366.954967][T20603] syz_tun: left promiscuous mode [ 366.975019][T20603] syz_tun: left allmulticast mode [ 367.011644][T20618] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 367.137834][T20617] bond8: entered promiscuous mode [ 367.166232][T20617] bond8: entered allmulticast mode [ 367.174819][T20617] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.194277][T20634] netlink: 'syz.3.4345': attribute type 1 has an invalid length. [ 367.304336][T20640] __nla_validate_parse: 17 callbacks suppressed [ 367.304356][T20640] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4346'. [ 367.328595][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4347'. [ 367.651679][T20648] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 367.682240][T20648] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 367.720223][T20660] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4352'. [ 367.786884][T20667] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4352'. [ 368.019413][T20681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4357'. [ 368.460985][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 368.535547][T20717] wg1: entered promiscuous mode [ 368.964417][T20738] nbd: must specify an index to disconnect [ 369.024086][T20740] net_ratelimit: 30 callbacks suppressed [ 369.024099][T20740] openvswitch: netlink: Message has 4 unknown bytes. [ 369.072206][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.176881][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 369.189617][T20748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 369.200777][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 369.223405][T20748] team0: Device vti0 is up. Set it down before adding it as a team port [ 369.270775][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.393477][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.510933][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.579590][T20767] lo speed is unknown, defaulting to 1000 [ 369.650500][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.771250][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 369.899392][T20767] lo speed is unknown, defaulting to 1000 [ 369.905352][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 370.020784][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 370.140356][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.131563][ T1151] net_ratelimit: 35 callbacks suppressed [ 374.131582][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.250456][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.360238][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.470860][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.580146][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.690121][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.801438][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 374.910187][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.021423][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.130184][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.576636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.231598][ T9287] net_ratelimit: 36 callbacks suppressed [ 379.231621][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.350977][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.460366][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.570185][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.680439][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.790700][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 379.900473][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.011073][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.122173][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.230979][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.661026][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 384.332052][ T9280] net_ratelimit: 36 callbacks suppressed [ 384.332073][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.450944][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.560183][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.670897][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.780131][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 384.890396][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.010453][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.120284][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.230893][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.340257][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.770966][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 389.340444][ T9280] net_ratelimit: 35 callbacks suppressed [ 389.340465][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.461352][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.570173][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.680236][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.790660][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 389.900255][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.010251][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.122089][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.230215][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.340557][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.440920][ T9282] net_ratelimit: 36 callbacks suppressed [ 394.440942][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.560711][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.670206][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.780144][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 394.890985][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.000162][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.110095][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.220753][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.331019][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 395.440230][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 396.010094][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 399.510431][ T9282] net_ratelimit: 36 callbacks suppressed [ 399.510453][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.630265][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.740404][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.851787][ T1157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 399.960721][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.070174][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.190295][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.300202][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.410300][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.520159][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.591462][ T1151] net_ratelimit: 36 callbacks suppressed [ 404.591488][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.711325][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.820108][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.930675][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.040327][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.150254][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.261267][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.370808][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.480188][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 405.591251][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 409.680336][ T9278] net_ratelimit: 36 callbacks suppressed [ 409.680356][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 409.800360][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 409.911156][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.020182][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.130659][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.240283][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.360818][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.470330][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.580263][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 410.690212][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.760422][ T1151] net_ratelimit: 36 callbacks suppressed [ 414.760443][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.880864][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.990740][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.100964][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.210233][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.320948][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.430258][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.540223][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.650342][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 415.760212][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 416.490395][ T5855] Bluetooth: hci0: command 0x0c20 tx timeout [ 419.840311][ T9284] net_ratelimit: 36 callbacks suppressed [ 419.840333][ T9284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 419.960201][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.070371][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.181738][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.290178][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.400416][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.510679][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.620185][ T9280] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.730301][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.840765][ T9282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 424.930236][ T9287] net_ratelimit: 36 callbacks suppressed [ 424.930256][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.050872][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.170283][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.282548][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.384967][T20806] ipvlan0: entered promiscuous mode [ 425.393362][T20806] ipvlan0: entered allmulticast mode [ 425.398691][T20806] veth0_vlan: entered allmulticast mode [ 425.417185][T20798] lo speed is unknown, defaulting to 1000 [ 425.430320][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.551475][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.670161][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.722505][T20798] lo speed is unknown, defaulting to 1000 [ 425.811686][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4402'. [ 425.849310][T20819] lo speed is unknown, defaulting to 1000 [ 425.853015][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 425.970915][ T9278] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.081149][ T9287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 426.099490][T20819] lo speed is unknown, defaulting to 1000 [ 426.333185][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 426.955703][T20860] netlink: 'syz.3.4414': attribute type 2 has an invalid length. [ 427.461528][T20875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4417'. [ 427.752341][T20887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4421'. [ 427.959363][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4425'. [ 427.982397][T20897] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4425'. [ 428.189666][T20883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4420'. [ 428.358127][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 428.425166][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4431'. [ 428.480071][T20923] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 428.640742][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4434'. [ 429.037174][T20929] gretap1: left promiscuous mode [ 429.042573][T20929] gretap1: left allmulticast mode [ 429.052918][T20929] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.062492][T20929] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.072313][T20929] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.081893][T20929] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.099758][T20929] veth5: left promiscuous mode [ 429.116219][T20929] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.125583][T20929] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.135290][T20929] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.144347][T20929] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.153617][T20929] geneve2: left promiscuous mode [ 429.158697][T20929] geneve2: left allmulticast mode [ 429.165782][T20929] bond3: left promiscuous mode [ 429.367916][T20968] ipt_rpfilter: unknown options [ 429.457233][T20974] ipt_rpfilter: unknown options [ 429.876675][T21001] netlink: 'syz.3.4452': attribute type 7 has an invalid length. [ 430.013471][ T9280] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 430.032854][ T9280] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 430.046624][ T9280] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 82:3d:aa:28:f5:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 430.626753][T21023] sctp: [Deprecated]: syz.1.4459 (pid 21023) Use of int in max_burst socket option. [ 430.626753][T21023] Use struct sctp_assoc_value instead [ 430.834538][ T9280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.844593][ T9280] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 430.856586][T21033] __nla_validate_parse: 5 callbacks suppressed [ 430.856605][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'. [ 430.863458][ T9280] bond0 (unregistering): Released all slaves [ 430.888350][ T9280] bond1 (unregistering): Released all slaves [ 430.999669][ T9280] bond2 (unregistering): (slave veth7): Releasing backup interface [ 431.009214][ T9280] bond2 (unregistering): Released all slaves [ 431.027059][ T9280] bond3 (unregistering): Released all slaves [ 431.041253][ T9280] bond4 (unregistering): Released all slaves [ 431.057292][ T9280] bond5 (unregistering): Released all slaves [ 431.080397][T21000] ipvlan0: left promiscuous mode [ 431.085403][T21000] ipvlan0: left allmulticast mode [ 431.093013][T21000] veth0_vlan: left allmulticast mode [ 431.107610][T21000] bond0: left promiscuous mode [ 431.112616][T21000] wireguard0: left promiscuous mode [ 431.125259][T21000] bridge1: left promiscuous mode [ 431.130568][T21000] bridge1: left allmulticast mode [ 431.170274][T21011] erspan0: entered promiscuous mode [ 431.175523][T21011] erspan0: entered allmulticast mode [ 431.236483][ T9276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.257901][ T9276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.289807][ T9280] : left promiscuous mode [ 431.383828][ T9280] tipc: Disabling bearer [ 431.429104][ T9280] tipc: Left network mode [ 431.553032][ T9280] IPVS: stopping backup sync thread 13848 ... [ 431.629737][T21054] netlink: 'syz.4.4466': attribute type 32 has an invalid length. [ 431.661246][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4466'. [ 431.707402][T21054] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 431.926408][T21072] netlink: 81 bytes leftover after parsing attributes in process `syz.3.4471'. [ 431.980502][T21076] net_ratelimit: 20 callbacks suppressed [ 431.980521][T21076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.166832][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4477'. [ 432.418641][T21082] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4475'. [ 432.439728][T21082] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4475'. [ 432.458718][T21086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.484011][T21084] macvtap0: entered promiscuous mode [ 432.489349][T21084] vlan0: entered promiscuous mode [ 432.495215][T21084] macvtap0: entered allmulticast mode [ 432.500695][T21084] vlan0: entered allmulticast mode [ 432.957617][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4485'. [ 432.973031][ T9280] ------------[ cut here ]------------ [ 432.978568][ T9280] Have pending ack frames! [ 432.995603][T21131] v: renamed from ip6_vti0 [ 432.996832][ T9280] WARNING: CPU: 1 PID: 9280 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x4d/0x60 [ 433.010438][ T9280] Modules linked in: [ 433.014698][ T9280] CPU: 1 UID: 0 PID: 9280 Comm: kworker/u8:12 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 433.027013][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.037205][ T9280] Workqueue: netns cleanup_net [ 433.042069][ T9280] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 433.048251][ T9280] Code: 00 00 e8 b6 ab 71 fe 31 c0 5b e9 be a0 94 00 cc e8 08 66 e4 f6 c6 05 df 0f b0 04 01 90 48 c7 c7 20 d1 ae 8c e8 44 53 a8 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 433.068360][ T9280] RSP: 0018:ffffc900057c7610 EFLAGS: 00010246 [ 433.074815][ T9280] RAX: df3f433e9e780200 RBX: ffff88803187a000 RCX: ffff88802976bc00 [ 433.082914][ T9280] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 433.090939][ T9280] RBP: ffffc900057c7718 R08: 0000000000000003 R09: 0000000000000004 [ 433.098923][ T9280] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffc900057c7680 [ 433.106979][ T9280] R13: ffff888054bb7730 R14: ffff888027b62fa8 R15: 0000000000000001 [ 433.115020][ T9280] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 433.124388][ T9280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.131285][ T9280] CR2: 00007fac693b4d58 CR3: 0000000076974000 CR4: 00000000003526f0 [ 433.139280][ T9280] Call Trace: [ 433.142628][ T9280] [ 433.145562][ T9280] idr_for_each+0x1b5/0x290 [ 433.150139][ T9280] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 433.156245][ T9280] ? __pfx_idr_for_each+0x10/0x10 [ 433.161340][ T9280] ? kobject_put+0x270/0x480 [ 433.166192][ T9280] ? kfree+0x18e/0x440 [ 433.170528][ T9280] ieee80211_free_hw+0xc6/0x480 [ 433.175411][ T9280] mac80211_hwsim_del_radio+0x2de/0x460 [ 433.181033][ T9280] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 433.187140][ T9280] hwsim_exit_net+0x584/0x640 [ 433.191894][ T9280] ? __pfx_hwsim_exit_net+0x10/0x10 [ 433.197127][ T9280] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 433.202970][ T9280] ops_undo_list+0x49a/0x990 [ 433.207562][ T9280] ? __pfx_ops_undo_list+0x10/0x10 [ 433.212752][ T9280] cleanup_net+0x4c5/0x800 [ 433.217193][ T9280] ? __pfx_cleanup_net+0x10/0x10 [ 433.222193][ T9280] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.227413][ T9280] ? process_scheduled_works+0x9ef/0x17b0 [ 433.233204][ T9280] ? process_scheduled_works+0x9ef/0x17b0 [ 433.238950][ T9280] process_scheduled_works+0xae1/0x17b0 [ 433.244571][ T9280] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.250649][ T9280] worker_thread+0x8a0/0xda0 [ 433.255275][ T9280] kthread+0x70e/0x8a0 [ 433.259352][ T9280] ? __pfx_worker_thread+0x10/0x10 [ 433.264516][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.269446][ T9280] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.274861][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.280169][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.284820][ T9280] ret_from_fork+0x3fc/0x770 [ 433.289415][ T9280] ? __pfx_ret_from_fork+0x10/0x10 [ 433.294654][ T9280] ? __switch_to_asm+0x39/0x70 [ 433.299456][ T9280] ? __switch_to_asm+0x33/0x70 [ 433.304267][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.308868][ T9280] ret_from_fork_asm+0x1a/0x30 [ 433.313666][ T9280] [ 433.316693][ T9280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 433.323966][ T9280] CPU: 1 UID: 0 PID: 9280 Comm: kworker/u8:12 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 433.336188][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.346238][ T9280] Workqueue: netns cleanup_net [ 433.351008][ T9280] Call Trace: [ 433.354298][ T9280] [ 433.357230][ T9280] dump_stack_lvl+0x99/0x250 [ 433.361813][ T9280] ? __asan_memcpy+0x40/0x70 [ 433.366400][ T9280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.371596][ T9280] ? __pfx__printk+0x10/0x10 [ 433.376202][ T9280] panic+0x2db/0x790 [ 433.380097][ T9280] ? __pfx_panic+0x10/0x10 [ 433.384517][ T9280] ? ret_from_fork_asm+0x1a/0x30 [ 433.389457][ T9280] __warn+0x31b/0x4b0 [ 433.393456][ T9280] ? ieee80211_free_ack_frame+0x4d/0x60 [ 433.399033][ T9280] ? ieee80211_free_ack_frame+0x4d/0x60 [ 433.404684][ T9280] report_bug+0x2be/0x4f0 [ 433.409013][ T9280] ? ieee80211_free_ack_frame+0x4d/0x60 [ 433.414569][ T9280] ? ieee80211_free_ack_frame+0x4d/0x60 [ 433.420125][ T9280] ? ieee80211_free_ack_frame+0x4f/0x60 [ 433.425674][ T9280] handle_bug+0x84/0x160 [ 433.429918][ T9280] exc_invalid_op+0x1a/0x50 [ 433.434433][ T9280] asm_exc_invalid_op+0x1a/0x20 [ 433.439279][ T9280] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 433.445448][ T9280] Code: 00 00 e8 b6 ab 71 fe 31 c0 5b e9 be a0 94 00 cc e8 08 66 e4 f6 c6 05 df 0f b0 04 01 90 48 c7 c7 20 d1 ae 8c e8 44 53 a8 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 433.465068][ T9280] RSP: 0018:ffffc900057c7610 EFLAGS: 00010246 [ 433.471161][ T9280] RAX: df3f433e9e780200 RBX: ffff88803187a000 RCX: ffff88802976bc00 [ 433.479137][ T9280] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 433.487192][ T9280] RBP: ffffc900057c7718 R08: 0000000000000003 R09: 0000000000000004 [ 433.495159][ T9280] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffc900057c7680 [ 433.503140][ T9280] R13: ffff888054bb7730 R14: ffff888027b62fa8 R15: 0000000000000001 [ 433.511133][ T9280] idr_for_each+0x1b5/0x290 [ 433.515639][ T9280] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 433.521709][ T9280] ? __pfx_idr_for_each+0x10/0x10 [ 433.526772][ T9280] ? kobject_put+0x270/0x480 [ 433.531367][ T9280] ? kfree+0x18e/0x440 [ 433.535443][ T9280] ieee80211_free_hw+0xc6/0x480 [ 433.540314][ T9280] mac80211_hwsim_del_radio+0x2de/0x460 [ 433.545883][ T9280] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 433.551973][ T9280] hwsim_exit_net+0x584/0x640 [ 433.556666][ T9280] ? __pfx_hwsim_exit_net+0x10/0x10 [ 433.561873][ T9280] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 433.567695][ T9280] ops_undo_list+0x49a/0x990 [ 433.572302][ T9280] ? __pfx_ops_undo_list+0x10/0x10 [ 433.577432][ T9280] cleanup_net+0x4c5/0x800 [ 433.581872][ T9280] ? __pfx_cleanup_net+0x10/0x10 [ 433.586837][ T9280] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.592042][ T9280] ? process_scheduled_works+0x9ef/0x17b0 [ 433.597775][ T9280] ? process_scheduled_works+0x9ef/0x17b0 [ 433.603502][ T9280] process_scheduled_works+0xae1/0x17b0 [ 433.609073][ T9280] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.615070][ T9280] worker_thread+0x8a0/0xda0 [ 433.619684][ T9280] kthread+0x70e/0x8a0 [ 433.623754][ T9280] ? __pfx_worker_thread+0x10/0x10 [ 433.628878][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.633479][ T9280] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.638697][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.643895][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.648491][ T9280] ret_from_fork+0x3fc/0x770 [ 433.653094][ T9280] ? __pfx_ret_from_fork+0x10/0x10 [ 433.658223][ T9280] ? __switch_to_asm+0x39/0x70 [ 433.662987][ T9280] ? __switch_to_asm+0x33/0x70 [ 433.667759][ T9280] ? __pfx_kthread+0x10/0x10 [ 433.672358][ T9280] ret_from_fork_asm+0x1a/0x30 [ 433.677138][ T9280] [ 433.680461][ T9280] Kernel Offset: disabled [ 433.684777][ T9280] Rebooting in 86400 seconds..