last executing test programs: 18.29099728s ago: executing program 3 (id=4271): r0 = socket(0x2b, 0x3, 0x1) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESOCT=r4], 0x32600) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) pipe(0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 15.35223906s ago: executing program 3 (id=4287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaac0a80102000000000000c0a80101"], 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x10001, [{0x4, 0x1, 0x6}]}]}, {0x0, [0x30, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f0000000f40)=""/4079, 0x37, 0xfef, 0x8}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000001000080181500000016d19e7f2915bf742cd53862b74d73469f13ddb862124020edaaaca07cdc4f83d12e8ecc70c0f09a33d49eb40a8702048bab32df2088e2581bbb0a3dadc4e6fc057e9a732728c2c7aa256deaf15063d01234acd1b9c613c88368836b546c00", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x200000c4) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYRES8=r9, @ANYRES16=r9, @ANYBLOB="080026bd7000fbdbdf250b0000003800058034000280080002009a6b000008000400000000000800010005000000112817bffdffeaadf3080003000000000008000100030000000800020004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 14.691997602s ago: executing program 3 (id=4292): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000018000100000000000000000002", @ANYRES32], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x4008044}, 0x4048004) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 14.425392095s ago: executing program 3 (id=4297): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC=r2], 0x9) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000000190780ad07177cfdf6bf147b1f2fb8675950a010102ac1414bb030490781200183f2500000000000000000100007f000001ac1414aa00186371ae9b1c03bcf6673a15c9d13ad0c361c0f4423cc561153c20e6e2639e7ca5ce2da2630496421a9e578c40f0f3e10b23d94edda0713e0aedbae1ee2aca8f98bc4c69"], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, '\x00', '\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000000000800700000040080200", @ANYRES32=0x1, @ANYBLOB="05000000000000bd8404d17ee6d38edfa71d85fb", @ANYRES32=r7, @ANYRES32, @ANYBLOB="0200000000000000050000000900"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03068b95"], 0x50) r9 = socket$inet(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000003500)={&(0x7f000043d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/203, 0xcb, 0x1, &(0x7f0000002500)=""/4096, 0x1000}, &(0x7f0000003540)=0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r13, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) 13.674900148s ago: executing program 3 (id=4304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @val=@perf_event={0x9}}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0xfffff557, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x2000000002ffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x6, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r1}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r11, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r12, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007010000043f0000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r14) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x31}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1ff, 0x7f, &(0x7f0000000180)=""/127, 0x41100, 0x72, '\x00', r4, @fallback=0x13, r6, 0x8, &(0x7f0000000200)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0x7, 0x8}, 0x10, r8, r9, 0x0, &(0x7f0000000940)=[r10, 0x1, r12, r13, r14]}, 0x94) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000006c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x3}, 0x4, 0xe, 0x7, 0x200, 0x3, 'syz0\x00', "716a1bf48d5380999c0854bc413cf2b2f8dca55c840e2d8a42eaa2ad39e310c4", "3ea3fcd10fc0a691c4dcd066f65a30d105aa046a17a7e7394de41c20f6515e2a", [{0x10, 0x0, {0x2, 0x100}}, {0x9, 0x5b07, {0x1, 0x3}}, {0x3a9, 0x6, {0x2, 0x5}}, {0x0, 0x1, {0x1, 0xc8b0}}, {0xd85a, 0x113, {0x0, 0x5}}, {0x1, 0x101, {0x0, 0x4}}, {0xf42, 0x1, {0x3, 0x6}}, {0x400, 0x8, {0x1, 0x1}}, {0x8, 0x7f, {0x2, 0x2bf1}}, {0x5, 0x2, {0x1, 0x4}}, {0x7, 0x3, {0x1, 0x2}}, {0x8, 0x0, {0x1, 0x3}}, {0x4, 0x3, {0x0, 0x4}}, {0x9, 0x7fff, {0x0, 0x7}}, {0x81, 0x7, {0x0, 0x1}}, {0x8, 0x2, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x401}}, {0xc65, 0xd, {0x3, 0x2}}, {0xd, 0x62, {0x3, 0x8}}, {0x8, 0x0, {0x1, 0x2}}, {0x81, 0x2, {0x0, 0x80000000}}, {0x40, 0x101, {0x3, 0x2e}}, {0xf64, 0x4, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x6}}, {0x3, 0x6, {0x3, 0xd}}, {0x769a, 0x2a52, {0x1, 0x8}}, {0x9961, 0x1, {0x0, 0x1}}, {0xd0e3, 0x4827, {0x2, 0x6}}, {0x4, 0xa8, {0x0, 0x101}}, {0x1, 0xe5, {0x2, 0x9}}, {0x9, 0xf, {0x1, 0xfffffff9}}, {0x100, 0x5, {0x2, 0x1a78}}, {0x6e6, 0x7, {0x3, 0x4}}, {0x9, 0x9, {0x1, 0x800}}, {0x4, 0xfffc, {0x1}}, {0x3, 0x7992, {0x3, 0xfffffffb}}, {0xe0f3, 0xf4, {0x2, 0x2}}, {0xffff, 0x9, {0x1, 0x80000000}}, {0x4, 0xa970, {0x1, 0x401}}, {0x1a00, 0xbec, {0x2, 0xc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.226813751s ago: executing program 3 (id=4308): unshare(0x6a020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r2, &(0x7f0000000100)="3682", 0x2, 0x48c71, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="7f34dd9e2666e29fa4f5a72146b75b5e1016b612627f59830b3873d1a302ed6cf68403a244eae63598fb99aa382b619c93b944c1c626dd7fd269bd09fa51d40b21ab544845f26199c86018ae1754a6cb60f79ec7776ea475478b203bf0e30cd7908e185655e2232cdeedc71c6f1e978d70ee55d70a49da4a1e8911cbe5e1b10cbc6e8db80570", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="3b61e65409791a3a0cc9f84107ff2af1930b98ca99f764b20a5aaa1410593d0706fee3c15dd5dcaf3c8a843411013da12c06be1c51abd497693d1c58c69c9780cf5db5dd387e8bd22601b277de46dbcb1fe34972113cbd4fe1e9c06f05f7e86997e72c3b38c074d88e740f02dc9674000b5b2ac1cdd2ddadc5ba2637913446c9328c0ff3f64064fffe177085f74e7b18e8a06535599f4c5e68efcdc39faa45b931ab21f4889311bd7a049976de335c1c3006ac5dbec97c60ad57090c43dd960d7a80fc0f8155e2b80cfd53b13f25b2053fe8ea02b3dcf2387ed19ce416", @ANYRESDEC=r0, @ANYRESDEC], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r6, 0x4}, 0x38) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r4, &(0x7f00000006c0)={0x11, 0x0, r8, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000867078c30000880100000000000000000000000000000000fe8000000000000000000000000000aa0000"], 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008000) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x80, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$kcm(r2, &(0x7f00000008c0)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x10001, @local, 0x718}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="22f6f7f9d3a3598646ec6888a181d8df2da532b5445a7d47a492c87c5d9d59b6572d368246fc2d33a5caa7438936ea9cc2b9477488439348e2b0588999c46a0906accdf3438d82692df755d936e0b2d40f1ccaed5e4f20df476b36e0510f5690e114e24c3ef5c319e8310f68109d07", 0x6f}, {&(0x7f0000000640)="b78ec138e7afbe776dd39ad1c6879f3a2474a6549928620e5eb1b428620bdc4e4088bc36c8f4a6a0d1a905707d807d431f73825d9b3ecfdbac55d47de1c43ecd7edbb468f07493c6a582e525d88240e9da43c696bf337857a6bab10c3336473292f0680110c75084fa9e3ab1d94cf0aa586d119620230d", 0x77}, {&(0x7f0000000700)="6c52876e0dd004c32cedff940255f170931b2520c5525ce38e55", 0x1a}], 0x3, &(0x7f0000000800)=[{0x90, 0x1, 0x8, "5a838af66b7b384fd825c2b1647a29a294dbcd45b311d1acdc79c05422b7cb892f65c463428877083b35c55a0b0e3f53b7e7b92f8572a99123b3f45255db7fbed22b6dabafb0882449e704d51c71d6c7faa852d6ebdba50c1ecc75f7d1baedbc6ef83b489eed5582c119834cdef7f7e6ce100f0b2145f9dbc90f55a977c43ba0"}], 0x90}, 0x8040) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x5, 0x10}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 5.690598531s ago: executing program 2 (id=4345): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61, '\x00', r4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r7) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000cc0)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000c80), r10) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000904}, 0x8c0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x94, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) syz_emit_ethernet(0xaf, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYRESHEX], 0x0) 4.997531647s ago: executing program 2 (id=4349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f00090027bd70000b000500"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4a805}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 4.892601239s ago: executing program 2 (id=4351): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x26000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 4.435196487s ago: executing program 1 (id=4354): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.221855459s ago: executing program 0 (id=4356): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x26008844}, 0x4000) 4.06696585s ago: executing program 2 (id=4357): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44841}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x9018}, {r0, 0x208}, {r2}, {r3, 0x1000}, {r0, 0xc}, {r0, 0x1000}, {r1, 0x2}], 0x7, &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={[0x1]}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xa, 0xe}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x40, 0x8, 0x8, 0x3ff, {{0xf, 0x4, 0x0, 0x1b, 0x3c, 0x64, 0x0, 0xee, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x2, [{@private=0xa010102, 0x3}, {@private=0xa010102, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x700000}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xb1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f00000006c0)='syzkaller\x00', 0x80, 0xd0, &(0x7f0000000700)=""/208, 0x0, 0x4, '\x00', r8, @fallback=0x1c, r9, 0x8, &(0x7f0000000900)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xd, 0x9, 0xb4d}, 0x10, 0x0, r7, 0x1, &(0x7f00000009c0)=[r4, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x5}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) r11 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$tun(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB="08000800060006000800ff070000400a0040006600000b04907864010103ffffffff94040000018317207f0075c407b30000ac1e0001ac14141564010100000d3ed650a8a5083d83bfcb820000008a438b5a00000000000000a57579f5fce76b4d7b88ae015ff8760ea60d8723cab1cf73d84a1c23b5"], 0x4e) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x8, 0x3, 0x6, {{0x23, 0x4, 0x1, 0x1, 0x8c, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0x81, 0x1, 0x1, [{@broadcast, 0x10000}, {@private=0xa010100, 0x800}, {@multicast2}, {@multicast2, 0x8}, {@empty, 0x50000000}]}, @rr={0x7, 0xf, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x64, 0x1, 0x1, [{@remote, 0x8}, {@multicast1, 0x7}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@remote, 0x200}]}, @rr={0x7, 0x7, 0xb, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', r12, 0x8, 0x87, 0x0, 0xf, {{0x27, 0x4, 0x3, 0x1a, 0x9c, 0x66, 0x0, 0x69, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x0, 0xf, "9d6df42514abebdd90b799d2be"}, @end, @generic={0x728a24ab026aab7d, 0x11, "59da040126022c9cdf9b9b4f94d4e2"}, @rr={0x7, 0x7, 0xad, [@loopback]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x2, [0x400, 0x0, 0x9, 0x8]}, @noop, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x5, 0x8, "c91af05cbb24"}, {0x7, 0xd, "8ac1cf3989e05737b6df59"}, {0x1, 0xb, "e2320c773b4e6d2035"}, {0x2, 0xd, "e6b73bd350643f7fbf5ae7"}, {0xbe5b62421bb213d2, 0xb, "c81c5f2e542f78d33b"}, {0x6, 0x8, "df31e255d3ef"}]}, @generic={0x82, 0x5, "da82cc"}]}}}}}) 3.971185101s ago: executing program 1 (id=4358): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) syz_emit_ethernet(0xf3, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@llc={0x4, {@llc={0xf0, 0x4e, "4df9", "cf82c2a8fde5cc5019a1078855c5a72b08254c1d55b8f81521cfb00692ba10db8cc400bfe641ea948b934c0f10241ded69697761710e45de54618af96286d9067c78fd53c40de490f3e12dffc52ca286f5374a342720160b1e664b7c48bccd103140aa895284b852443b844711b6b02628aede454eddd9dc8f5a4951d78e01889022a9157f466ee650b55f6d5e72bd47a0e9b86d2d84c482bc9d71f03d5525b5d7b59ea7ebb18bbc5180d605593c38498fe31b8efaf45c05edfe4be6ede2838b3cdf3e97b645d3002028dc89d21e3546dbc63d55922d1123ddcb6c4eb4"}}}}}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7be"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) 3.929125825s ago: executing program 0 (id=4359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x80000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x3b}, {@in=@remote, 0x4d0, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0x2, 0x8, 0x1, 0x7, 0x3}, {0x22, 0x3, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x34ff, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) 3.642318695s ago: executing program 0 (id=4361): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f0000000080)) (async) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x40403}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x12}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9015}, 0x20000000) (async) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000140081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000006ac0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="972084431fade1bc71c59aa250db508fb7e3f5b3", 0x14}, {&(0x7f0000000140)="f4478a98a653ba774b3c8c18a8b7e23ce9e3b99b5f38787b2e7cca0154057e7b365a01e308958c30846a8118b03422c607f1ca91b154fba26c7b2a9cc46531c5f20caa607337ce97b5cb8f4d39015429a4e35d532bad7c394be4ef4a3d4fc8603b2cda64c96c26bdb8d0549e9797e378cf4fe8a3c36e3a89a96241aa763b0e36f6d403753452b745d22109fb5c63bf8d8e7ba31aa3099fa5e31ff735980af1", 0x9f}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}, {{&(0x7f0000000340)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000780)="ab2726662891e044342738bf6cb67bb789d3433b67555ed63a94486bc316e85f0e22382ae8c3c5e718d67db218e365b64915259507b1b45b04e821c2b49105052caa322a872f06e42793c5a9d608f93d5173089758e0815168ecd3ca99c177da5a72f219f938ebf3d6b9fd830a871f33e80e772a44ee768b97dad3be87084e148ab3e43bd8e04cd28eadfd5cddce1499116a92b8", 0x94}, {&(0x7f0000000840)="c54c2e2c8a99b7fcaff53752aaf09f4feaf9b64c28c1439ab50ed5c90af7e0fc74eca7cf0b9a1fa01a8c7b1a3ebaa1c076238724801c49ba7b8d54639731471fad54770ba3f49ad599ffde1e2db9c992bbda7a31370bd48ba01b117ad5d09b60092f5c99d95b96029832b36b06cd51601d3737b8d48c4ca2d8aaf02df60f43542f0280985ba5da211c0ca777c32e00ab4823ac0b1171a30d76b392326e10a32ad00307993a1b5bfc64c3a5bcc668cb84b9f06e1d67fde8238cd70efeeb06", 0xbe}], 0x2, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @remote}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}], 0x70}}, {{&(0x7f00000009c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="ab72f443cb28fcf54724aad57a3027221e65e15190d4453805b11c509db6793c976bb8a2426fdfecde1a0b464fd8c86627331729164919314430caed007688a4701250244b54c3e0936ce5d06bf5bc1990034e1de1aeec4180600ef7a57eee450a429af12d9c2ac2a4c17c81e4760ef5265f218249245301573e553a9a0787c7e72dee78f22ee510020253aa91c09aa7e19afa7e0288b10ea0c5306c43960c74d4a1a156013de1a99a231aded20a4aed06cb034609aefe6b193b236f3aca607add21fa7caf30ca1d30a20e501cc22d8e3301ae", 0xd3}, {&(0x7f0000000b00)="ceb4fd74267de687aaf6c152bb8f995ab34853f5499e946b78ab3e312871bd13c2f134d19e8eb3b181641e308774f563086f37f0c3d410e1e9b9f46e268648d154a72871acdadc5e57bbe8c73ce94acd25b8419d0afdd2ee1e6510620579191cc951dff813443142ae8263aa3e9e494a3228a86f74b8648b0d63782f", 0x7c}], 0x2, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)="17ece01d327ac056d3395771b66acb1d7294dc52eddd9161154eb11cd1cf6fc5414e20641dff3229ca613536370ef42f96f3c80d190cba612b40bcf46a08e322cb62b643397e16057237f6788cf1ea838078953c2c9a3dbfc8c7dde3708de5c51e3ed6d8d2a9c910e6ee", 0x6a}, {&(0x7f0000000d40)="43fabd13b67c917e47637d88366f60b039fa6546078dfb9bec27bfe1f4846ad216892b8e1df795b1b5675bbf1723494adc8e24b74fa2cc7e34c75523a3e141b884b589fe594ce2705a26ae2cfe598e58c9d257d65c6c0eaad5a863a51377ef50abe7ea0ac1e5df13bfdddf998ad39f3ae9e4e4ca6a37b92de8187007aae6ddacbfe42cf1f43beb5da35b8de4cbccfa9d355fb8d56d7265816f55259c6fa4bff54460a1d0f83e70f177b2c508f089f4282fa663892a361ec1cdca707b219500f4993596f8587837ae36307759954f36ac", 0xd0}], 0x2, &(0x7f00000017c0)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000100000000000000000000000070000001c000000000000000000000008000000188b62a8068629f161f8a6972b7cd58847de1eb4ea039ded1b8e63206b10ba8b6e1db90d16d3114905", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000003c00000000000000000000000700000007076ae00000024424adf1ac1e00010000459effffffff000000080a01010000000001ac1414bb000010000000000000"], 0x88}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f40)="0a364c49d66ac9fdd84d91228a8b7d385c45f84e62c3f69477d4ba6a643a7f6b7564200c44fbcc3ac3a4bf39e3852cc17ce534e39ef73bd00bf67ce0e75eae28db6123c4b1bd0cab664bf5287aaa70858d6a313fc1a7dca397b5f9a2c3fcdaebedd4c941f66d645d4da3e5467dee1448570c6103f0f319f9b5306917bc17ecc0ebaaa03c1075a9cd754d6578e6480485da613f51d274d307366de545382e958292362cf2b785fde2dbaee43055925a54204a475dd6171c6dfabf", 0xba}, {&(0x7f0000001000)="067a9c225079ece961e4e8c9411e5ed551e9db50cb5145f4271791c8f99a652f81e026fd3745319d9d74824ac312af679020f98801f012381a8113c1aec5089f7efc644499ec46610f7386ae490f30698c1069d18fccda83faaa37d64eb99a6ee309a9d84e0212adc19bb9dfdee12b21fcc4bce8d24bf73365155b2bef", 0x7d}, {&(0x7f0000001080)="7abd3315b2a5a43a2dd8877609eb31331e937ced1a3cacaf1918408a083346e77b8c4ec9875bfbbc2e1d7aa17c2556597ad5f1c2629eec8c0bc33f9e30b6be8099ada37f52d42f9614a1ca96b02a6b390c11f42f9bf7bea7745dbce23df62e31", 0x60}, {&(0x7f0000001100)="a2a22d5d5f31c08d2e179dfa02a314085de32a490d9926db942e633600dce6e283d8bfa2089ecec6f1dc13d602385e77e30bc50e20eec7b203b1695258b6e3cd94d6bb5def6f0c363b4b52d4233870e808679fc35e7791720c4c9e5151e4bdedcd0794ede0a39368a36e6d6302c74ad05ee6af2faa5536ddfadf90b6b66e96bf0f8e9636c0531985a2ee02da15676780be7ca0f2b94d323b3f4c9910df5771927a5c8fc55d4a8c954c21357258975b86f613db7c99cc0708be2123fae5e9d89eb3396312177917f08d1b2bbdd164b3e9", 0xd0}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1400000000000000000000000200000001fcffff000100001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="e0000002640101020000000014000000000000000000000001000000000000000000000014010000000000000000000007000000444469d1ac14144100000009ac14141600000100ac1414aa00000009e000000100000003e00000010000000000000000000000f3fffffffffffffff7000000000000000486170000000001064f9b5c3c00097742a320918b030702892bcdac14142bac1e00010000000064010102ac1414bb0a010101000000007f000001e0000001ffffffff891364ffffffffffffffffac1e010164010102940401004424d2110a010101000000d17f000001000000ebac1e00017fffffffac141427000000034414d141ac1414aa0000000664010102ffffffff890fc00a010102ffffffffe00000028913430a0101020a010100e00000017f000001940cef4ae2869e7af6975b5000000000005c000000000000000000000007000000863f00000003010f2e17c018e5497e67f06f37ed9c0607b6f6b76d09000622c8f446000e41b2886b951deb6ddebe46be070f12776accdf97cc56c70cb521a0880d1d012757506b734801bcb1000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414bbac1414aa00000000"], 0x1e8}}, {{&(0x7f0000001500)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000004280)=[{&(0x7f0000001540)="6238c3b5d43a274653db4221cc00085acc09d8888dd0b196aced0d41675ff7e8102cac6739ecd5930292ab696e627087d683b7aaf13da808197bdaa729ae09fb175c6ba4168ad98582c5f8faefb19e4f831039538e51deb806d2bbf110edc1172535d15ffb0a710195f40fce7ba1d5fd4059c6373b45a7e3ac42c633911411ec377a47c3bea469a78f77df6671fcd6c767b2424b37c494eb92ce13a21371bd189d3f096a35d9e8e3b66611644e92f6077ea092a64d", 0xb5}, {&(0x7f0000001600)="ba5d5d0a54591b1316cac0bc6bbc439541aadcd707f159a99cb2e6d4918571acb141be5c162f24cffecc26ad0f680e8ec1ce489287f91c3c253166925b4e7b017091269ce1a8ffa746325868a293cfc30966d2498da645", 0x57}, {&(0x7f0000001680)="0c4e14ac2009c5902f747ec28e6d12d0b71518bba02f95fde90de167aff17b7a9c7447184a23d615bc815ac35e0fa7b8ddf436fe905d5ae8cc672e1e01b329977052b1d73bc6c5c97c919bcac02b8619e4bcd1e9bd802c375ac37766839134c71172a7f9c0e2788c0adbe37c8145da6db137d83b9f029a59868a63ee7934f3c979588552991474cb952c51d7eb252afd82e0685b7c0abffa4c277ddf40107c1853bb96af8a7e89eb9e06df214a9b9742b40569847ad18ddb258ae7523c43f9310caf064e", 0xc4}, {&(0x7f0000001780)="37423727f21e390af9e46e9323d517", 0xf}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="1a99688ea6e0737f4fb2fb010242e21c62f85cb78835ccd498c5c015ea90b8b1ae71d37cbaef4cb4220626bd948eb3cbcf0c27e28587110f65b72aa4db1fff0b7b03d691dca09f8a8f25fcd27013beadbc65163f53b2a3dda82785682a923881032c486b24457a01a2411cc3", 0x6c}, {&(0x7f00000040c0)="e8616270cadf5d80cba8715f032b5fc6710ce9c3232329c0b7111f961c093ef9703e559a9db407594d816407fa46c2b8d61d61a08532afda4f34dfc782523d97dadf3b9d40b81e2e9dbde65add09d9b686bbd07e4a75e6ddb62f1c64eeafacd1834aae272d52ddcc4964cca68527d22b6c87e2e080397a5d91937e5053b6e259c1fa6e386847dd225ecb4213c0df396d8a90caf62a858b44", 0x98}, {&(0x7f0000004180)="47204266cc7912d55db92dd2c50fd01876708d2056b7b55c75e1f1249037dec4af73ca61ec3203d671cff3e479fd4a86e2a5136518c40763907a6dbad85223f2386d34065726fce97c8458e8a28b9a4c641843ae7e99240d9e4b0c85f0a7a7b9cfdf2017282872e70295bbe2e948dbd4b290f591a3fbfb40fddbf74bc834f75f0fc1a332da361a23574f4bf5fc6e88327c76ec2630d714b030c2926e5cf018d5d816f107a8dc70d42fecfffc13a5f00b3e876f3e9053ad5354b653657eaa94a76283fd791876f95b2780708902262c6f5ace0b2eabf17ae92f2b913f83f9094231d8bd2702af22ff04", 0xe9}], 0x8}}, {{&(0x7f0000004300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004580)=[{&(0x7f0000004340)="d286d8f3a3576935d58a593c9814b3e45b6e35fcc4ecbd1188343caa858e3036f60edb44cce75fe36be79ca76dfd62c21957e2e8c12ce8e587d458824ef3c3d043998eeeafe7f2fe0a7b506aeeca1a6e38c07271bf65772364cc68f23e964e675b26cae09181c42680d95a886d67ceba70d9c8d69a4564bd8507970c4f0292471fa85d720823228263085b2eec2203ebe0a33e563af1b534efea7f8b938504ed8aaad4ed3d2aef8375354c05179d3e03", 0xb0}, {&(0x7f0000004400)="ab09b83f543179feb5e70dcebdd30727f2b51e1e3413d330261cf4ab8ee3c4eb2560bd7f4aaa30401446c38b640c049ee9471586e332ea8c055e103c779a76fd1f10c2843794215d8cbe0f26d15521d3720fc57f8c9774ac0461614b888a880d93c422a2de1bb2408859fc0362912cf180aaec190fee547da1762c145709227a6227ad67995ec879", 0x88}, {&(0x7f00000044c0)="5018a57319dc56f99530c2a93324c462b4a209b1231eb8a611778a4e2e035436ea5dd5053a85461d1ea4f52adc390ab406dc87b2de7f3d0762b64b1110384d1cdb991b5c0cccac0b1557a2ff05e29232a7a5ad376d64d6989d8f3c3b5a7e20249038f238c93a3fb7750d1d92761ad8f79d489b0844f8fadb75fc0965ddf3bee67d5e1ad152fa930c4dfa371bc2d98a9a9dc44e77032332b2f91580dc0828852cb54fc0bdfb0649b80cca40a79fc946c239788a3ddbb29a77d818528fdb", 0xbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000006800)=[{&(0x7f00000045c0)="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", 0x1000}, {&(0x7f00000055c0)="a5435283d68a82f29b1ee19959bc413409b0d9faee", 0x15}, {&(0x7f0000005600)="9b4b7694919a7d87612af42a2de9fd3d2182f42d4e55db39ff2cf6", 0x1b}, {&(0x7f0000005640)="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", 0x1000}, {&(0x7f0000006640)="85659a2e3695fafe3755ec7d11ddcca59496b9de9d75761871cae72ecf714a828a230f1f9da262c0821dd29c8d4d54bb44c31d0af410ec3f4ae4990d911326d99f9dab0ca3376ba535daaa188e5e705de5acd8cde84c5d9fbf38779b90aab49b26f2d3606bd0ecd10bfbcd13e04fa07df8d87268c4b611d16dfc5e6c93417652e567538ac2242d3af48e1b05ea28f42f1ad16210a404cc8645d4c473b2fa67c347c9af8dd9f6b0dbe265acada749eb3d437d720b2ddce8c7775930111621e247fb3782161dd94e9d83180dfc4878cb0c7f5fc1e3b5b0b57ca2bf06537a", 0xdd}, {&(0x7f0000006740)="36286a52db27a45ce8b9f3c675903bc1a2b7aab0bf245a0f890c8f3e1ea1c0cae3d8db4cb114f5dc472e76472c604314414299bdb8f7517bcebf90de70453db2ccde999ff07eb7b77309cf89c0766a15457befc63feff63800947f687fac84860fe9ffe158918b06676ec7a5e71ee5468509eaa4ecdc0f9f5e0209dd2725b94d7cb9", 0x82}], 0x6, &(0x7f0000006880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x7a, 0xffffffffffffffff, [{0x6, 0xf, "856ed6b6baca1a5e6f9e57192c"}, {0x6, 0xa, "0b4c217c2d00a1f0"}, {0x5, 0xd, "b56698e0a3b9fcbc050fda"}, {0x0, 0xc, "0965187066aa787b293a"}, {0x5, 0x12, "b9c09e897f9334f63149a4e71b3a0aeb"}, {0x7, 0xa, "80f1de7c79421f80"}, {0x0, 0x8, "4ce5caef1f33"}, {0x7, 0x6, "897d3b98"}, {0x2, 0x11, "f0734a23b71b111f5d805a0947f13c"}, {0x6, 0x7, "c7e952cdf9"}]}, @timestamp_prespec={0x44, 0x2c, 0xfa, 0x3, 0x7, [{@remote, 0xdeb2}, {@multicast2, 0x3}, {@remote, 0x3d55}, {@rand_addr=0x64010101, 0xffffff81}, {@rand_addr=0x64010102, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xec, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xee, [@private=0xa010101, @loopback]}, @end, @timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x0, [{@empty, 0x6}, {@multicast1, 0xfd}, {@loopback, 0x5}, {@empty, 0x1e15f6c6}]}, @end, @ssrr={0x89, 0x13, 0xe9, [@loopback, @broadcast, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0x27, 0x1d, [@multicast2, @private=0xa010101, @loopback, @remote, @broadcast, @local, @multicast1, @local, @remote]}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0x2, [0x1, 0x507d, 0x913, 0x1000, 0xc]}, @end, @timestamp_addr={0x44, 0x54, 0x78, 0x1, 0x1, [{@loopback, 0x5}, {@remote, 0x400}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xaca5}, {@empty, 0x10}, {@multicast1, 0x1000}, {@multicast2, 0x8}, {@multicast1, 0xbe7}, {@empty, 0x8}, {@remote, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8176}}], 0x228}}], 0x8, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) close(0x3) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r10) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x80) (async) recvmmsg(r10, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000002040)=""/4095, 0xfff}, {&(0x7f0000000380)=""/157, 0x9d}], 0x4}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x10000, 0x0) 3.342656741s ago: executing program 1 (id=4363): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000002000010025bd7000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x3918, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000000)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x80000000}], 0x1, 0x40002000, 0x0) 2.975366018s ago: executing program 4 (id=4364): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$inet_sctp(0x2, 0x51d022a641781ba4, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x77db, 0x31, 0x73}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x100}, &(0x7f0000000140)=0x8) r3 = socket$netlink(0x10, 0x3, 0x5) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.840654143s ago: executing program 2 (id=4365): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r3 = socket$inet(0x2, 0x1, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x18, 0x2f, 0x9, 0x70bd2b, 0x25dfdc01, {0x4}, [@nested={0x4, 0x32}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044880}, 0x2400c044) sendmsg$sock(r3, 0x0, 0x0) socket$inet(0x2, 0x800, 0x7) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) connect(r3, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 2.532185276s ago: executing program 4 (id=4366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x67, 0x1, 0x200000000000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r3, 0x801, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a8, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd4e1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x797}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7c, 0x3, "6db26496d69a3b3f4796cd549f39a7338b8c487faeb4085fbd1ea735d9057cb5dc0beac039794961ab81e49b92ff5348653e345225adddb21ecea54691d9620ce58d1b90df8f4e5b7940b31daf50ed894b11f4a82a88a665e0c8afe6146bdc08a10b814024fa1fbdad3c719f8d4c94e946212d4941122df6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67a5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x80, 0xa, 0x0, 0x0, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x300}}]}, 0x5c}}, 0x40800) 2.291203787s ago: executing program 4 (id=4367): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)="7774e67ffa0a8db667a3134a7877f088ba05a5e618d92091555975ccaf7e4bdb8fe06185e8420286cbce", &(0x7f0000000300), 0xfff, 0xffffffffffffffff, 0x4}, 0x38) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r6, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x8010) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000280)="051a00000e80006558f2878f0200200000000020c2f56de640c9b908b2", 0x1d}], 0x2) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) 2.187130051s ago: executing program 0 (id=4368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x3}, 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x1405, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20048854) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0xa, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x3}, 0x8) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x1405, 0x1, 0x70bd25, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20048854) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_int(r3, 0x1, 0xa, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) connect$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) 2.094265616s ago: executing program 2 (id=4369): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)}, 0x8) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={r0, 0x0, 0x10000, 0x0, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0xd}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x7) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000022c0)={0x0, 0xfffffff9}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000022c0)={0x0, 0xfffffff9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="c3aa00fea000000071101a0000000000950000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="c3aa00fea000000071101a0000000000950000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) (async) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.00687276s ago: executing program 1 (id=4370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000037c0)={@cgroup, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = socket(0xa, 0x3, 0x85) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20004804) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x205, 0x72bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x4004000) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) (async) poll(&(0x7f0000000240)=[{r0, 0x86}], 0x1, 0x9) 1.644044833s ago: executing program 0 (id=4371): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002480)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="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", 0xfd9}], 0x1, 0x0, 0x1160, 0x4014}], 0x1, 0x24040010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000ffffff800400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.515859877s ago: executing program 0 (id=4372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002007866726d3000"/38], 0x2c}}, 0x24008080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="d13456747cf19453419a0310bf2dcd506e62f344e4e6c9c8b6c05e41b1cae0105968d4ff7ad6b841c0436141ccea2dc883302fc4c737", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000780)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x39, @void, [{0xdd, 0xce, "c6928e109827080eb5b26329bb54c1cd1314e516500e989b36350c096550e834cc52a3f4fd52f9b1337524cd162df9e3f914b90e1258725d01a97dd85daef2b8283834a033c4a51536b6b4cb79d61c46d997e6969aeb590bdd6e04c43926fa06fcec6e916617a62adef589f5abf7e0bcf4f8a5904c43c9ee674fddfddc86d6aea6659862554fb68d4d6cffb55f22ecb7402d0614eb0b205e6233a9790a3e7479c3394feaeff23219875925af928bb9ed70c65e67599c6223c5925d135f379ece953b6b35e11899263c8fe0085855"}, {0xdd, 0xe4, "c8c0d5af0ab4c2fea6ccdeec2119d2ac78caa9a48acc866ff2942622dd9bec369f1fb1ce2ee7aac7b0ed4a8c120b1369ef133a8ccd1145f22037d9d138cbf7d87fbec23d11f0df0033368d03b7e1e844f9d67d38bfdb3b4d2bf1c70a627902968f2903d555906fcfcac6aca44714698c9ff7ae0304833d349ebf1e23ed9659cad8e830f8c0db2f2bee52b711406372beaf374f8971797546478c2af754909ba494ece059065f345a4b61c0705487132a7724652fa53224065017d38e54b2e8b07ae9643da51f829b2a260b4c1174f38a1c354c409c5f6b55da2233d1c879a355f152f11f"}, {0xdd, 0xc3, "0d59737037477c7e45173676790c105aff7b609fd236fc5672d7492d0fa5ccdf085b2fc59d24300ab1b64dad2adca402b985acc969d3ce18ac9c9c69a92dc16557ad9ecdea0e42c3e809f06eb0ef8364adca525c1f07f53a3aa12ca651e4d70ede3a4654e59aa0e60ac75ea3ea2efa738fcc7aadfeb437ae4a4a20562ef9bffcdeeb093c371ef544d1344dfffdc592c22507c81e2774fa511000cd2ff4d6d33977ac5aaef497fb5deb58e9815801ce91e28e170d0cd20d7787a4c5885e210db0aa5251"}, {0xdd, 0x26, "895ded4889e93252b793aa7f1877ee6a378127e48636bea20233ce84297482810dda21e51b1c"}, {0xdd, 0x22, "563850f6a0e169584e8b71b2cf389aa73dd95a9e5b59cbce768fc383b909c546142e"}, {0xdd, 0xf1, "6717037176eba783b942fb78a9dc793d26a9e5a3bc0b399e7dc532194c07118ee889dc7137b7cb38b94b3a073563ffb708de4d9152fb878b5cdb4648be7c5d3058a4fbb38a4770490b121249f60adeb294bed58a75a5d70ebfea0a139dbf439faab766d7afca9c0ead9ef0f8195cab66cf1887e42615f4c4e0fa802fee72122b1ad20a2ce3f1e61b2ee56f59731251553033886340233b59fd051cc659ae852ce7bf8fd4dcaa1a269249e0cfc4181b1bc4edbb52715d21fe483a5c5bdb9c1a5b53f4e220ed174b5f3fc3c1875e712bbcbe02d4c3201e938a3b41df37d28ea34c6218dad7b30a1613dd0412e5448a0707e0"}, {0xdd, 0xbd, "fec2c13c41b10fee85658596b0ea67730a7ca4dcc069f9a0608f57bf73ef2a2ee89a50d728eb6701c8c1b00791d892961da56f77439c48cd4473125da05c7d678d6d040bd418b690e15896d17f8181a383a5eda6a7921454a132ec9477d52241cac0bde9551b6d12c457aab1e991154861bed3e7b38cca126fcd84e1c4dbc2188efc78c7eb52a0aa7ec526143a9d313381c27e9df1a160d8dd8d40fd395d96f335d45f970bb2491d24c56f705c256dc2056dca8c3ed414fb01a0024bc7"}, {0xdd, 0xdb, "9c3b4d04548dbc6f9b3fc61acffc9b069c91b34ff808363a46e5d951794939b3543a174824d186e68e278f5331b854e5c4ee4e87610e7a56e32d3c97e45e76c52f9c8b6e14ab96f4735b9813daeebc63bbc44b1f5d4f62ba41d6570076394754bb9466d72e78fda41f7807462aab7052126ed10e792b1f3585f13632889eb3b47b38c29859fdf2811e3a13f4c6f9aa08d8403c3ca67c558feb80b3f09d4df71067065ef76beda743ebf05154ac7b46992d7243772b509317ee3e94d05ace34d1549b5d51ade6a6171a805c6d6ba14cf9d0593431122559d50d7d7c"}, {0xdd, 0xe9, "2f842f084ddb7938e91f553abd99a13510203aa51d6aaa1efb40280277032e32b0e368dc7b8a7748e8b2bb4540ac222e5f55643949fba34585d5cc46a6953356e0c21b9056934a793725ad5810f42484751da43a56452e942bf9f9e07cc087ba1c9409ff484b8d7dd4d40469592456733252704ac21eb8f57b5b0d8f765d0196402dc0dcc2935abaaa3e575b31abf5585a356c07f3a59af0005b154b35c549ff6f9070a6f90c505962f1c3293e984b637666be914c9f9d6be2360c2542f439a210a9cb9a7c7eeeb66adbf5711664da04c0028d0be31e60658d07d342b0c543d7a92f337d4a6b629352"}, {0xdd, 0x63, "ed655176c312a0eef5b4ea8a2ddefdc9e808d966d565094ac8b63a2da44efcaf732cb2291daff46d8e8d8b5142ce356fc477dbe0f88e73861730c098d2b36095447b11a13cc42f16425a577f3f260588e446ed51dc00344d43f0039bf25be132648a61"}]}, 0x6c4) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000540)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @from_mac=@device_b, {0xf, 0x9}}, 0x1000, 0xc, @random=0x9, @val={0x1, 0x8, [{0x18}, {0x9, 0x1}, {0x1b}, {0x60, 0x1}, {0xc}, {0x0, 0x1}, {0x3d, 0x1}, {0x20}]}, @void, [{0xdd, 0x74, "5107d3db08462cb1544af777ee8a58bd3b2edb2d19a2342c4307f4d21a4a88b4f1c457a66f1712b373f8dcb5ce42bfd7c4b7a4420dc2d9c3b346e11ea0e494ccdb39e58084ed552d9a4df78706fd8ae7acffd9f0239eff893799d03eab39c3eb6527fcd2514eff21557c0302a16fd57ae32e2738"}]}, 0x9e) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1004014}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r9, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000f00)="aaf571f99f79c90d36fdaba02d48c98e25ea030098441370b86c7bcf51ee0017c3e266da67b1d1528ca2d76a93906d6286e0c38a98304668fbc5ce0d9db4ba18b74e333fb696", 0x46, 0x4000040, &(0x7f0000001000)={0x11, 0x3, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r10) 591.441535ms ago: executing program 1 (id=4373): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="028101000400c31f1fae230db8308c61ecb443044a184b0000080000000100000080000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="181e23167866093cd500"/22], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x6) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r1, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="010000000100"/28], 0x50) 506.668922ms ago: executing program 4 (id=4374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) vmsplice(r7, &(0x7f0000000740)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x1) write(r4, &(0x7f0000000240)="94", 0x1) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r3, r8, 0x8f5, 0x0) write(r5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000", @ANYRES32=0x0, @ANYBLOB="096d050025100400340012800b0001006772657461700000240002800800140004000000080005000300000005001300000000000800040002000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r9, 0x102030405060708, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r9, 0x0, {0x0, 0xee}, 0xff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) 251.807946ms ago: executing program 1 (id=4375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a030400050000000000000a0000050900010073797a310000000078000480200001800a00010071756f7461000000100002800c00014000000000000000052c200180080001006c6f670020000280080003400000000106000140000800000b0002406c6f6f6b75700000140001800b0001006c6f6f6b7570000004000280140001800a0001007265646972000000040002800900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0x1, 0xfffffffffffffffc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast1, 0x4e22, 0x3, 'lc\x00', 0x10, 0x80006, 0x6f}, 0x2c) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) recvmsg(r1, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x100) 46.811251ms ago: executing program 4 (id=4376): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200)=0xc7f, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000006740)={&(0x7f0000005000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000064c0)=[{&(0x7f0000005040)="0f", 0x1}], 0x1, &(0x7f0000006640)=[@init={0x18, 0x84, 0x0, {0x0, 0x4, 0x6a1, 0x4}}], 0x18, 0x80}, 0x20044040) 0s ago: executing program 4 (id=4377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000941000000060018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r4, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x83, 0x7b, &(0x7f00000002c0)="d1935c9d96c5f32190fdaab26b65d1058287cba5f7db990a679756c5c866d79784148bdc97c135523cf3ac7549fa730430e188d90ed072f6a7b80b938732e9b4d1d70e1615c693f8f4d48010f40403728178f4012f6aeac0577541f5e971d88fae38c9ebd72c1c42a0f3cba761188ec5a6d7dba7c08eb5dc2cc3e04b88df87f1660d64", &(0x7f0000000500)=""/123, 0x100, 0x0, 0x4a, 0x2, &(0x7f0000000580)="b484f291eeb7238615629d13f6e4b261b5b6cd66cd80aa8567c3965fcfae644c91755c2aad4931ac8ac098468388f9deb748b03a9fa602dc7ca1f77edf5e64fc9b8448d88d0f92d45911", &(0x7f0000000600)="71a0", 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000040)={0x8000, 0x4, 0x0, 0x6, 0x5}) kernel console output (not intermixed with test programs): lave bond_slave_1): Enslaving as an active interface with an up link [ 685.757756][T19642] team0: Port device team_slave_0 added [ 685.760740][T19642] team0: Port device team_slave_1 added [ 685.822771][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.973104][T11469] bond2: (slave bridge2): link status up again after 0 ms [ 685.992360][ T1010] bond2: (slave bridge2): link status up again after 0 ms [ 686.011952][T11469] bond2: (slave bridge2): link status up again after 0 ms [ 686.031896][T11476] bond2: (slave bridge2): link status up again after 0 ms [ 686.038709][T19642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.038724][T19642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.038770][T19642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.052206][T11469] bond2: (slave bridge2): link status up again after 0 ms [ 686.052276][T11469] bond2: (slave bridge2): failed to get link speed/duplex [ 686.077120][T19642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.077164][T19642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.077239][T19642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.153948][T19725] macvlan0: entered promiscuous mode [ 686.356461][T19736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.399107][T19642] hsr_slave_0: entered promiscuous mode [ 686.417977][T19642] hsr_slave_1: entered promiscuous mode [ 686.426313][T19642] debugfs: 'hsr0' already exists in 'hsr' [ 686.426384][T19642] Cannot create hsr debugfs directory [ 686.463574][T11475] bond2: (slave bridge2): failed to get link speed/duplex [ 686.715659][ T5632] Bluetooth: hci3: command tx timeout [ 687.055564][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 687.092631][T11476] bond2: (slave bridge2): failed to get link speed/duplex [ 687.323462][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 687.352527][T19642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.352569][T19642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.423084][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 687.531751][T11469] bond2: (slave bridge2): failed to get link speed/duplex [ 687.649329][T19642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.649372][T19642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.878134][T19642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.878176][T19642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.233153][T19642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.233195][T19642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.619154][T19823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.781959][ T5632] Bluetooth: hci3: command tx timeout [ 688.807068][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3274'. [ 689.008972][T11475] IPVS: starting estimator thread 0... [ 689.042750][T19642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 689.044787][T19834] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 689.057966][T19642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.111844][T19835] IPVS: using max 24 ests per chain, 57600 per kthread [ 689.150550][T19834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.151880][T19642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 689.185889][T19642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.186952][T19642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 689.200739][T19642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.218991][T19837] bond3: entered promiscuous mode [ 689.219015][T19837] bond3: entered allmulticast mode [ 689.220962][T19642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 689.256818][T19642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.551689][T19642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.604115][T19642] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.626084][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.626242][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.685899][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.686029][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.306209][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 690.629637][T19873] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.629679][T19873] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 690.755764][T19879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3287'. [ 690.871982][ T5632] Bluetooth: hci3: command tx timeout [ 691.003267][T11479] net_ratelimit: 19 callbacks suppressed [ 691.003362][T11479] bond2: (slave bridge2): failed to get link speed/duplex [ 691.133744][ T5632] Bluetooth: hci5: unexpected cc 0x2003 length: 10 > 9 [ 691.134819][T11479] bond2: (slave bridge2): failed to get link speed/duplex [ 691.203165][T19642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.247208][T11479] bond2: (slave bridge2): failed to get link speed/duplex [ 691.447592][T19642] veth0_vlan: entered promiscuous mode [ 691.515639][T19642] veth1_vlan: entered promiscuous mode [ 691.564134][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 691.653362][T19642] veth0_macvtap: entered promiscuous mode [ 691.658248][T19642] veth1_macvtap: entered promiscuous mode [ 691.676625][T11479] bond2: (slave bridge2): failed to get link speed/duplex [ 691.703363][T19919] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3292'. [ 691.867563][T19924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3293'. [ 691.908644][T19919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 691.923035][T11475] bond2: (slave bridge2): link status up again after 0 ms [ 691.939351][T19922] netlink: 'syz.2.3292': attribute type 3 has an invalid length. [ 691.939613][T19922] netlink: 'syz.2.3292': attribute type 3 has an invalid length. [ 691.943235][T11475] bond2: (slave bridge2): link status up again after 0 ms [ 691.961715][T11476] bond2: (slave bridge2): link status up again after 0 ms [ 691.983288][T11476] bond2: (slave bridge2): link status up again after 0 ms [ 692.002121][T11475] bond2: (slave bridge2): link status up again after 0 ms [ 692.005898][T19925] tipc: Enabling of bearer rejected, failed to enable media [ 692.029864][T19642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.097270][T19642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.169448][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.212003][T11476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.212078][T11476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.212117][T11476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.212155][T11476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.570073][T18885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.570098][T18885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.684391][T11465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.684416][T11465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.768816][T19950] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 692.982319][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3299'. [ 693.152321][T19957] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 693.152349][T19957] netlink: 'syz.0.3248': attribute type 4 has an invalid length. [ 693.152366][T19957] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3248'. [ 693.238492][T19955] vxcan2: entered promiscuous mode [ 693.741213][T17857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.748304][T17857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.750012][T17857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.777174][T17857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.777847][T17857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.075949][T19981] Bluetooth: hci0: unsupported parameter 512 [ 694.075976][T19981] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 694.766922][T20012] netlink: 'syz.4.3313': attribute type 21 has an invalid length. [ 694.767009][T20012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3313'. [ 695.259305][T20029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3317'. [ 695.690317][T19967] lo speed is unknown, defaulting to 1000 [ 695.902547][ T5632] Bluetooth: hci1: command tx timeout [ 696.189365][T20039] syzkaller0: entered promiscuous mode [ 696.189393][T20039] syzkaller0: entered allmulticast mode [ 696.272494][T11472] net_ratelimit: 31 callbacks suppressed [ 696.272521][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 696.274365][T20049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.438915][T20048] syzkaller0: entered promiscuous mode [ 696.438945][T20048] syzkaller0: entered allmulticast mode [ 697.525093][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 697.986143][ T5632] Bluetooth: hci1: command tx timeout [ 700.070049][ T5632] Bluetooth: hci1: command tx timeout [ 700.812910][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 701.211024][T19967] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.211212][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.212745][T19967] bridge_slave_0: entered allmulticast mode [ 701.218070][T19967] bridge_slave_0: entered promiscuous mode [ 701.238477][T20092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3326'. [ 701.239380][T19967] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.241688][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.243733][T19967] bridge_slave_1: entered allmulticast mode [ 701.257500][T19967] bridge_slave_1: entered promiscuous mode [ 701.391063][T20091] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3327'. [ 701.876040][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.960276][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.143442][ T5632] Bluetooth: hci1: command tx timeout [ 702.249728][T20077] xt_nfacct: accounting object `syz0' does not exist [ 702.250785][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3331'. [ 702.277969][T19967] team0: Port device team_slave_0 added [ 702.297427][T19967] team0: Port device team_slave_1 added [ 702.368006][T20114] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 702.489455][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 702.518923][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.518942][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.518971][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.521533][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 702.579360][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.579379][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.579409][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.672701][T11465] bond2: (slave bridge2): failed to get link speed/duplex [ 702.765643][T20122] syzkaller0: entered promiscuous mode [ 702.765671][T20122] syzkaller0: entered allmulticast mode [ 702.880935][T19967] hsr_slave_0: entered promiscuous mode [ 702.884776][T19967] hsr_slave_1: entered promiscuous mode [ 702.895760][T19967] debugfs: 'hsr0' already exists in 'hsr' [ 702.895781][T19967] Cannot create hsr debugfs directory [ 702.998730][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'. [ 703.017281][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3335'. [ 703.081453][T11476] bond2: (slave bridge2): failed to get link speed/duplex [ 703.087209][T20135] bridge_slave_1: left allmulticast mode [ 703.087234][T20135] bridge_slave_1: left promiscuous mode [ 703.087454][T20135] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.134960][T20135] bridge_slave_0: left allmulticast mode [ 703.134991][T20135] bridge_slave_0: left promiscuous mode [ 703.135227][T20135] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.275752][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 703.379072][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 703.379100][T20150] openvswitch: netlink: Flow actions attr not present in new flow. [ 703.507130][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3339'. [ 703.625906][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3339'. [ 703.633145][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3339'. [ 703.711549][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 703.862656][T11465] bond2: (slave bridge2): failed to get link speed/duplex [ 703.862861][T20166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.989401][T20166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.158184][T20165] erspan0: entered promiscuous mode [ 704.204920][T20180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 704.276990][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 704.493831][T19967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.701636][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 704.789688][T20208] netlink: 'syz.0.3350': attribute type 5 has an invalid length. [ 704.789712][T20208] netlink: 'syz.0.3350': attribute type 6 has an invalid length. [ 704.946662][T20195] syzkaller0: entered promiscuous mode [ 704.946692][T20195] syzkaller0: entered allmulticast mode [ 704.952852][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 705.034257][T19967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.941948][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 707.530570][T19967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.589047][T18881] net_ratelimit: 1 callbacks suppressed [ 707.589070][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 707.753528][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 707.873257][T20254] __nla_validate_parse: 95 callbacks suppressed [ 707.873282][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 707.881752][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 708.085259][T20272] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3362'. [ 708.165872][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 708.312849][T11479] bond2: (slave bridge2): failed to get link speed/duplex [ 708.559226][T11476] bond2: (slave bridge2): failed to get link speed/duplex [ 708.625323][T19967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 708.630285][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.631978][T19967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.671164][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.685912][T19967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.715491][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.719886][T19967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.764902][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.863716][T11468] bond2: (slave bridge2): failed to get link speed/duplex [ 708.954838][T20281] siw: device registration error -23 [ 709.014584][T11476] bond2: (slave bridge2): failed to get link speed/duplex [ 709.184467][T19967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.243028][T19967] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.262670][T11468] bond2: (slave bridge2): failed to get link speed/duplex [ 709.290004][T11471] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.290118][T11471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.327064][T11471] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.327177][T11471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.390885][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3367'. [ 709.472020][T11467] bond2: (slave bridge2): failed to get link speed/duplex [ 709.649480][T20287] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 709.658737][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 710.018781][T20324] gtp0: entered promiscuous mode [ 710.018807][T20324] gtp0: entered allmulticast mode [ 710.198189][T20328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3373'. [ 710.199108][T20328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3373'. [ 710.939720][T19967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.125290][T19967] veth0_vlan: entered promiscuous mode [ 711.157888][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 711.160779][T19967] veth1_vlan: entered promiscuous mode [ 711.186724][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 711.394800][T19967] veth0_macvtap: entered promiscuous mode [ 711.418198][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 711.438757][T19967] veth1_macvtap: entered promiscuous mode [ 711.536452][T19967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.569690][T19967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.691581][T11465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.692952][T11465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.693666][T11471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.693749][T11471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.837500][T11471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.837524][T11471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.923552][T20377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3383'. [ 711.927771][T11470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.927792][T11470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.038259][T20379] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 712.453361][T20400] x_tables: duplicate underflow at hook 3 [ 712.664170][T11471] net_ratelimit: 22 callbacks suppressed [ 712.664195][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 712.772752][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 712.881853][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 712.992240][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 713.103906][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 713.232040][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 713.276047][T20425] xt_addrtype: ipv6 does not support BROADCAST matching [ 713.387530][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 713.493093][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 713.601562][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 713.735723][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 713.921504][ T3342] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.922551][ T3342] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.922593][ T3342] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.922632][ T3342] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.177452][T20456] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 714.177479][T20456] __nla_validate_parse: 2 callbacks suppressed [ 714.177504][T20456] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3402'. [ 714.342374][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 714.409506][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'. [ 714.770297][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3408'. [ 714.955125][T20486] tipc: Enabling of bearer rejected, failed to enable media [ 715.018170][T20491] bridge_slave_0: left allmulticast mode [ 715.018199][T20491] bridge_slave_0: left promiscuous mode [ 715.018439][T20491] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.095755][T20491] bridge_slave_1: left allmulticast mode [ 715.095783][T20491] bridge_slave_1: left promiscuous mode [ 715.096030][T20491] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.124770][T20490] trusted_key: syz.0.3411 sent an empty control message without MSG_MORE. [ 715.164780][T20491] bond0: (slave bond_slave_0): Releasing backup interface [ 715.223896][T20491] bond0: (slave bond_slave_1): Releasing backup interface [ 715.280226][T20491] team0: Port device team_slave_0 removed [ 715.309942][T20491] team0: Port device team_slave_1 removed [ 715.318922][T20491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.318947][T20491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.343783][T20491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.343810][T20491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.348016][T20486] syzkaller1: entered promiscuous mode [ 715.348037][T20486] syzkaller1: entered allmulticast mode [ 715.806516][T20515] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 715.915771][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3415'. [ 715.952388][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 715.952416][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'. [ 716.090546][T20519] netlink: 'syz.1.3415': attribute type 4 has an invalid length. [ 716.090577][T20519] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3415'. [ 716.119123][T20519] .`: renamed from bond0 [ 716.479239][T20541] netlink: 'syz.0.3422': attribute type 1 has an invalid length. [ 716.578895][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 716.983310][T20559] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 717.014824][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3429'. [ 719.457253][T18881] net_ratelimit: 22 callbacks suppressed [ 719.457279][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 719.561676][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 719.592323][T20587] __nla_validate_parse: 3 callbacks suppressed [ 719.592353][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3437'. [ 719.593348][T20587] netlink: 'syz.1.3437': attribute type 1 has an invalid length. [ 719.740080][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 719.793311][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 720.054396][T20611] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3440'. [ 720.131717][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 720.243176][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 720.352181][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 720.401791][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 720.463160][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 720.583079][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 720.703413][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 720.843387][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 720.875706][T20632] syzkaller0: entered promiscuous mode [ 720.875736][T20632] syzkaller0: entered allmulticast mode [ 721.777593][T20664] tc_dump_action: action bad kind [ 722.905330][T20689] batman_adv: batadv0: Adding interface: dummy0 [ 722.905350][T20689] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.905384][T20689] batman_adv: batadv0: Interface activated: dummy0 [ 723.306623][ T31] audit: type=1804 audit(1789163494.254:7): pid=20707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3463" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=474 res=1 errno=0 [ 723.306733][ T31] audit: type=1800 audit(1789163494.254:8): pid=20707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3463" name="cgroup.controllers" dev="tmpfs" ino=474 res=0 errno=0 [ 723.310827][T20700] lo speed is unknown, defaulting to 1000 [ 723.333104][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 723.333179][T20707] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 723.512149][T20713] netlink: 'syz.0.3466': attribute type 3 has an invalid length. [ 723.777084][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 723.953590][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'. [ 724.305585][T20733] : renamed from lo (while UP) [ 724.409901][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'. [ 724.464143][T20739] netlink: 'syz.4.3472': attribute type 1 has an invalid length. [ 724.464499][T20739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3472'. [ 724.466013][T20739] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3472'. [ 724.478565][ T9948] net_ratelimit: 43 callbacks suppressed [ 724.478611][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 724.586360][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 724.622954][T20745] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3475'. [ 724.695778][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 724.821963][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 725.004323][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 725.151604][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 725.261621][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 725.391430][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 725.393083][T20778] netlink: 'syz.1.3482': attribute type 5 has an invalid length. [ 725.487408][T20786] ip_tables: iptables: counters copy to user failed while replacing table [ 725.488837][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 725.510537][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 725.918325][T20801] Bluetooth: MGMT ver 1.23 [ 726.660147][T20825] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 726.928291][T20801] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 727.030827][T20825] bond1 (unregistering): Released all slaves [ 727.149347][T20845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3497'. [ 727.174654][T20848] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3498'. [ 728.063095][ T5632] Bluetooth: hci0: command 0x0401 tx timeout [ 728.332881][T20869] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 729.124737][T20843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3497'. [ 729.175231][T20869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 729.227241][T20870] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 729.473570][T20883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3505'. [ 729.482062][T11470] net_ratelimit: 12 callbacks suppressed [ 729.482117][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 729.594446][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 729.703196][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 729.713606][T20894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3509'. [ 729.812410][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 729.922808][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 729.945897][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 729.946576][T20909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 730.035035][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 730.105036][T20913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.147990][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 730.178173][T20915] ip6t_REJECT: ECHOREPLY is not supported [ 730.193483][T20917] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3516'. [ 730.194124][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 730.251619][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 730.363806][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 730.486329][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'. [ 730.786844][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3520'. [ 731.187190][T20954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3527'. [ 731.193487][T20954] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3527'. [ 731.281862][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 731.303791][T20959] hsr_slave_0: left promiscuous mode [ 731.317142][T20949] can: request_module (can-proto-0) failed. [ 731.319450][T20959] hsr_slave_1: left promiscuous mode [ 731.377499][T20963] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 731.395013][T20966] netlink: 'syz.0.3529': attribute type 27 has an invalid length. [ 732.096704][T20993] ipvlan0: entered promiscuous mode [ 732.113545][T20993] ipvlan0: left promiscuous mode [ 732.684248][T21002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.718471][T21002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.740958][T21002] bond0 (unregistering): Released all slaves [ 733.239263][T21050] syzkaller0: entered promiscuous mode [ 733.239291][T21050] syzkaller0: entered allmulticast mode [ 733.260175][T21050] tipc: Started in network mode [ 733.260210][T21050] tipc: Node identity ca002de27551, cluster identity 4711 [ 733.260481][T21050] tipc: Enabled bearer , priority 0 [ 733.299634][T21048] tipc: Resetting bearer [ 733.388391][T21048] tipc: Disabling bearer [ 733.565141][T21063] sctp: [Deprecated]: syz.2.3554 (pid 21063) Use of int in maxseg socket option. [ 733.565141][T21063] Use struct sctp_assoc_value instead [ 733.565339][T21063] netlink: 'syz.2.3554': attribute type 4 has an invalid length. [ 733.602082][T21063] netlink: 'syz.2.3554': attribute type 4 has an invalid length. [ 734.036659][T21088] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 734.390868][T21105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.390888][T21105] IPv6: NLM_F_CREATE should be set when creating new route [ 734.390937][T21105] IPv6: NLM_F_CREATE should be set when creating new route [ 734.390963][T21105] IPv6: NLM_F_CREATE should be set when creating new route [ 734.438559][T21105] dvmrp0: entered allmulticast mode [ 734.583995][T11471] net_ratelimit: 31 callbacks suppressed [ 734.584021][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 734.692738][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 734.802337][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 734.912376][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 735.021839][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 735.133451][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 735.241489][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 735.353588][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 735.461674][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 735.571368][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 735.823032][T21160] __nla_validate_parse: 6 callbacks suppressed [ 735.823057][T21160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3579'. [ 735.940406][T21164] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 735.940436][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 735.940701][T21164] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.941794][T21164] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.942152][T21164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.309304][T21171] syzkaller1: entered promiscuous mode [ 736.309334][T21171] syzkaller1: entered allmulticast mode [ 736.340222][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'. [ 736.658735][T21190] netlink: 'syz.3.3590': attribute type 2 has an invalid length. [ 736.658763][T21190] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3590'. [ 736.719183][T21192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3586'. [ 736.784007][T21195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3586'. [ 736.990603][T21176] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 736.990627][T21176] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 737.021161][T21179] 8021q: adding VLAN 0 to HW filter on device .` [ 737.059260][T21179] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 737.081130][T21192] batman_adv: batadv0: Interface deactivated: dummy0 [ 737.107112][T21192] batman_adv: batadv0: Removing interface: dummy0 [ 737.469393][T21204] syzkaller0: entered promiscuous mode [ 737.469420][T21204] syzkaller0: entered allmulticast mode [ 737.571828][T21211] netlink: 'syz.3.3599': attribute type 32 has an invalid length. [ 737.709694][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 737.709721][T21214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.709751][T21214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.724248][T21214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.724312][T21214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.757558][T21214] batman_adv: batadv0: Interface deactivated: macvlan2 [ 737.757582][T21214] batman_adv: batadv0: Removing interface: macvlan2 [ 738.884221][T21285] erspan0: entered promiscuous mode [ 738.885826][T21285] vlan2: entered promiscuous mode [ 739.241588][T21301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3616'. [ 739.267899][T21302] Bluetooth: ISO socket layer initialized [ 739.612525][T11473] net_ratelimit: 24 callbacks suppressed [ 739.612544][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 739.721740][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 739.833173][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 739.951708][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 740.063206][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 740.179428][T21335] ovs-s!: entered promiscuous mode [ 740.191908][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 740.223040][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 740.312332][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 740.421986][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 740.531570][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 740.644964][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 741.236242][T21255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.254283][T21294] netlink: 'syz.3.3614': attribute type 2 has an invalid length. [ 741.254392][T21294] netlink: 'syz.3.3614': attribute type 2 has an invalid length. [ 741.808805][T21397] netlink: 'syz.1.3625': attribute type 1 has an invalid length. [ 741.808831][T21397] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3625'. [ 741.963696][T21410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3629'. [ 742.241828][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 742.416206][T21442] netlink: 'syz.4.3637': attribute type 13 has an invalid length. [ 742.795641][T21453] syzkaller0: entered promiscuous mode [ 742.795665][T21453] syzkaller0: entered allmulticast mode [ 743.608597][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3649'. [ 744.123055][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3655'. [ 744.227963][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 744.357319][T21525] lo speed is unknown, defaulting to 1000 [ 744.522038][T21538] bond0: option ad_select: invalid value (34) [ 744.526957][T21538] bond0 (unregistering): Released all slaves [ 744.666514][ T31] audit: type=1804 audit(1789163515.614:9): pid=21546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3661" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=380 res=1 errno=0 [ 744.666572][ T31] audit: type=1800 audit(1789163515.614:10): pid=21546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3661" name="cgroup.controllers" dev="tmpfs" ino=380 res=0 errno=0 [ 744.717579][T20373] net_ratelimit: 31 callbacks suppressed [ 744.717602][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 744.822583][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 745.103092][T21559] hsr0: entered promiscuous mode [ 745.103117][T21559] hsr0: entered allmulticast mode [ 745.103130][T21559] hsr_slave_0: entered allmulticast mode [ 745.103147][T21559] hsr_slave_1: entered allmulticast mode [ 745.198996][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 745.304146][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 745.411392][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 745.467697][T21581] set match dimension is over the limit! [ 745.506844][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3668'. [ 745.508033][T21578] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 745.530875][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 745.631387][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 745.689274][T21587] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 745.743575][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 745.824278][T21587] netlink: Failed to add GPL helper -22 [ 745.824337][T21587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.947484][T21600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3674'. [ 746.068200][T21603] netlink: 'syz.4.3674': attribute type 9 has an invalid length. [ 746.163296][T21600] netlink: 'syz.4.3674': attribute type 9 has an invalid length. [ 746.434471][T21618] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 746.487582][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 746.570881][T21618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.934975][T21636] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 747.147926][T21647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3683'. [ 747.966330][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'. [ 748.140773][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 748.207094][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 748.207135][T21689] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 748.258490][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 748.258531][T21689] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 748.439851][T21696] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3698'. [ 748.464572][T21694] syzkaller0: entered promiscuous mode [ 748.464595][T21694] syzkaller0: entered allmulticast mode [ 748.488502][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'. [ 748.488528][T21696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3698'. [ 748.489410][T21694] FAULT_INJECTION: forcing a failure. [ 748.489410][T21694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.489443][T21694] CPU: 0 UID: 0 PID: 21694 Comm: syz.3.3697 Not tainted syzkaller #0 PREEMPT(full) [ 748.489476][T21694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.489491][T21694] Call Trace: [ 748.489501][T21694] [ 748.489511][T21694] dump_stack_lvl+0xe8/0x150 [ 748.489554][T21694] should_fail_ex+0x410/0x560 [ 748.489585][T21694] _copy_from_user+0x2d/0xb0 [ 748.489616][T21694] ___sys_sendmsg+0x1c6/0x360 [ 748.489648][T21694] ? __lock_acquire+0x747/0x2de0 [ 748.489679][T21694] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.489747][T21694] ? __fget_files+0x2a/0x420 [ 748.489780][T21694] ? __fget_files+0x3a2/0x420 [ 748.489822][T21694] __x64_sys_sendmsg+0x1b1/0x290 [ 748.489855][T21694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.489909][T21694] do_syscall_64+0x166/0x520 [ 748.489939][T21694] ? trace_irq_disable+0x3b/0x140 [ 748.489962][T21694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.489986][T21694] ? clear_bhb_loop+0x70/0xc0 [ 748.490015][T21694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.490038][T21694] RIP: 0033:0x7f343099e159 [ 748.490057][T21694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.490076][T21694] RSP: 002b:00007f3431810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.490101][T21694] RAX: ffffffffffffffda RBX: 00007f3430c25fa0 RCX: 00007f343099e159 [ 748.490118][T21694] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 748.490133][T21694] RBP: 00007f3431810090 R08: 0000000000000000 R09: 0000000000000000 [ 748.490147][T21694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.490160][T21694] R13: 00007f3430c26038 R14: 00007f3430c25fa0 R15: 00007ffd11ee8f58 [ 748.490194][T21694] [ 748.490743][T21700] netlink: 'syz.4.3699': attribute type 2 has an invalid length. [ 748.554288][T21696] syzkaller0: entered promiscuous mode [ 748.554352][T21696] syzkaller0: entered allmulticast mode [ 749.023643][T21713] tap0: tun_chr_ioctl cmd 1074025677 [ 749.023729][T21713] tap0: linktype set to 823 [ 749.078131][T21713] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.196754][T21713] bridge_slave_1 (unregistering): left allmulticast mode [ 749.196784][T21713] bridge_slave_1 (unregistering): left promiscuous mode [ 749.196899][T21713] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.252372][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 749.326704][T21727] team0: entered allmulticast mode [ 749.326728][T21727] team_slave_0: entered allmulticast mode [ 749.326747][T21727] team_slave_1: entered allmulticast mode [ 749.430979][T21730] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3708'. [ 749.682531][T21737] netlink: 'syz.3.3711': attribute type 9 has an invalid length. [ 749.682557][T21737] netlink: 'syz.3.3711': attribute type 7 has an invalid length. [ 749.682572][T21737] netlink: 'syz.3.3711': attribute type 8 has an invalid length. [ 749.742283][ T3342] net_ratelimit: 25 callbacks suppressed [ 749.742305][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 749.856125][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 749.961500][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 750.072669][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 750.181539][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 750.305172][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 750.421604][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 750.532458][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 750.642137][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 750.752995][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 750.802847][T17857] Bluetooth: hci1: link tx timeout [ 750.803094][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.810473][T17857] Bluetooth: hci1: link tx timeout [ 750.810492][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.810597][T17857] Bluetooth: hci1: link tx timeout [ 750.810610][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.810707][T17857] Bluetooth: hci1: link tx timeout [ 750.810720][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.810816][T17857] Bluetooth: hci1: link tx timeout [ 750.810829][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.810926][T17857] Bluetooth: hci1: link tx timeout [ 750.810938][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.811034][T17857] Bluetooth: hci1: link tx timeout [ 750.811047][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.811142][T17857] Bluetooth: hci1: link tx timeout [ 750.811155][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.908546][T17857] Bluetooth: hci1: link tx timeout [ 750.908567][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936142][T17857] Bluetooth: hci1: link tx timeout [ 750.936161][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936272][T17857] Bluetooth: hci1: link tx timeout [ 750.936286][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936393][T17857] Bluetooth: hci1: link tx timeout [ 750.936407][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936507][T17857] Bluetooth: hci1: link tx timeout [ 750.936519][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936615][T17857] Bluetooth: hci1: link tx timeout [ 750.936628][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936727][T17857] Bluetooth: hci1: link tx timeout [ 750.936739][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936834][T17857] Bluetooth: hci1: link tx timeout [ 750.936846][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.936942][T17857] Bluetooth: hci1: link tx timeout [ 750.936954][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.937049][T17857] Bluetooth: hci1: link tx timeout [ 750.937061][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.937154][T17857] Bluetooth: hci1: link tx timeout [ 750.937167][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.937256][T17857] Bluetooth: hci1: link tx timeout [ 750.937268][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.940531][T17857] Bluetooth: hci1: link tx timeout [ 750.940547][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.940650][T17857] Bluetooth: hci1: link tx timeout [ 750.940664][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.940792][T17857] Bluetooth: hci1: link tx timeout [ 750.940812][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.940909][T17857] Bluetooth: hci1: link tx timeout [ 750.940922][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.941017][T17857] Bluetooth: hci1: link tx timeout [ 750.941029][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 750.941124][T17857] Bluetooth: hci1: link tx timeout [ 750.941136][T17857] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 751.191679][T21786] syzkaller0: entered promiscuous mode [ 751.191705][T21786] syzkaller0: entered allmulticast mode [ 752.111043][T21835] netlink: 'syz.2.3739': attribute type 4 has an invalid length. [ 752.183407][T20262] block nbd64: NBD_DISCONNECT [ 752.555656][T21853] __nla_validate_parse: 16 callbacks suppressed [ 752.555680][T21853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3742'. [ 752.557377][T21855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3742'. [ 752.706213][ T31] audit: type=1804 audit(1789163523.644:11): pid=21853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3742" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=774 res=1 errno=0 [ 752.706278][ T31] audit: type=1800 audit(1789163523.644:12): pid=21853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3742" name="cgroup.controllers" dev="tmpfs" ino=774 res=0 errno=0 [ 752.770784][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 752.770812][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3744'. [ 752.798655][T21850] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3742'. [ 752.864240][T17857] Bluetooth: hci1: command 0x0405 tx timeout [ 753.086556][T21878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3748'. [ 753.227577][T21883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3750'. [ 753.332414][T21885] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3752'. [ 753.332881][T21885] syzkaller0: entered promiscuous mode [ 753.332902][T21885] syzkaller0: entered allmulticast mode [ 753.387655][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'. [ 753.536307][T21894] netlink: 'syz.1.3754': attribute type 2 has an invalid length. [ 754.102034][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 754.521672][T21931] netlink: 'syz.2.3762': attribute type 9 has an invalid length. [ 754.521695][T21931] netlink: 'syz.2.3762': attribute type 6 has an invalid length. [ 754.521710][T21931] netlink: 'syz.2.3762': attribute type 7 has an invalid length. [ 754.521723][T21931] netlink: 'syz.2.3762': attribute type 8 has an invalid length. [ 754.773226][T11470] net_ratelimit: 31 callbacks suppressed [ 754.773249][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 754.901709][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 755.017093][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 755.125256][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 755.244124][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 755.363458][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 755.475470][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 755.587910][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 755.603914][T21979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.604902][T21977] netlink: 'syz.4.3775': attribute type 32 has an invalid length. [ 755.682763][T21977] bond1: option coupled_control: invalid value (10) [ 755.684943][T21977] bond1 (unregistering): Released all slaves [ 755.745115][T21989] syzkaller0: entered promiscuous mode [ 755.745137][T21989] syzkaller0: entered allmulticast mode [ 755.782407][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 755.828859][T17857] Bluetooth: hci1: command 0x0405 tx timeout [ 756.076016][T21997] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 756.079531][T21997] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 760.374364][T22048] net_ratelimit: 13 callbacks suppressed [ 760.374387][T22048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 760.456499][T22051] Bluetooth: MGMT ver 1.23 [ 760.564393][T22051] __nla_validate_parse: 10 callbacks suppressed [ 760.564415][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 760.567508][T22052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 760.740956][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'. [ 760.744274][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 760.851474][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 761.006711][T22070] veth3: entered allmulticast mode [ 761.023936][T22071] netlink: 'syz.3.3799': attribute type 11 has an invalid length. [ 761.051187][T22081] netlink: 'syz.1.3800': attribute type 3 has an invalid length. [ 761.064183][T22081] netlink: 'syz.1.3800': attribute type 32 has an invalid length. [ 761.124764][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 761.150520][T20373] IPVS: starting estimator thread 0... [ 761.236715][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 761.247576][T22086] IPVS: using max 25 ests per chain, 60000 per kthread [ 761.344792][T22069] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3797'. [ 761.436935][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 761.543207][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 761.646862][T22097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3805'. [ 761.651763][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 761.723262][T22106] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 761.743712][T22107] netlink: 'syz.0.3806': attribute type 4 has an invalid length. [ 761.747850][T22101] openvswitch: netlink: IPv4 tunnel dst address is zero [ 761.772399][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 762.224543][T22125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 762.308584][T22128] netlink: 'syz.0.3813': attribute type 2 has an invalid length. [ 762.308608][T22128] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3813'. [ 762.344765][T22129] netlink: 'syz.4.3811': attribute type 3 has an invalid length. [ 762.407862][T22129] netlink: 6696 bytes leftover after parsing attributes in process `syz.4.3811'. [ 762.513413][T22133] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3814'. [ 762.614972][T22137] netlink: 4724 bytes leftover after parsing attributes in process `syz.1.3816'. [ 763.711097][T22178] dvmrp8: entered allmulticast mode [ 763.959197][T22188] nbd: couldn't find device at index 65536 [ 765.461779][T11471] net_ratelimit: 31 callbacks suppressed [ 765.461804][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 765.571648][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 765.681676][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 765.791807][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 765.904436][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 766.011629][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 766.121695][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 766.231674][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 766.341888][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 766.451751][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 770.522215][T11473] net_ratelimit: 36 callbacks suppressed [ 770.522240][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 770.631911][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 770.741999][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 770.851605][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 770.961542][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 771.071733][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 771.181541][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 771.292349][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 771.401484][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 771.522037][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 774.941481][T17857] Bluetooth: hci4: command 0x0406 tx timeout [ 775.602275][T11473] net_ratelimit: 36 callbacks suppressed [ 775.602301][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 775.711678][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 775.822796][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 775.932158][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 776.042111][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 776.151604][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 776.262759][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 776.371609][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 776.482118][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 776.592113][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 780.671897][T11473] net_ratelimit: 36 callbacks suppressed [ 780.671924][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 780.782407][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 780.891626][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 781.001713][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 781.111772][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 781.221658][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 781.331859][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 781.441753][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 781.551863][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 781.663303][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 785.761530][T20373] net_ratelimit: 36 callbacks suppressed [ 785.761555][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 785.871572][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 785.981837][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 786.091597][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 786.201535][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 786.311698][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 786.421631][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 786.531526][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 786.641839][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 786.751716][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 790.822061][T11470] net_ratelimit: 36 callbacks suppressed [ 790.822087][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 790.932007][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 791.041787][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 791.151628][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 791.262611][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 791.371587][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 791.481808][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 791.591564][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 791.701836][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 791.811527][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 795.881736][T20373] net_ratelimit: 36 callbacks suppressed [ 795.881777][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 795.991581][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 796.101628][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 796.212007][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 796.321623][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 796.431495][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 796.541877][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 796.651603][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 796.761897][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 796.872381][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 800.942305][T11473] net_ratelimit: 36 callbacks suppressed [ 800.942329][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 801.051425][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 801.161639][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 801.271542][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 801.381545][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 801.491999][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 801.601572][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 801.711518][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 801.832401][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 801.941545][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 802.116867][T22202] xt_l2tp: invalid flags combination: 8 [ 802.231632][T22213] __nla_validate_parse: 4 callbacks suppressed [ 802.231656][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.231917][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.232155][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.232375][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.232591][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.232815][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.235532][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.235787][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.236024][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 802.236248][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 803.130883][T22249] bridge0: port 3(vlan2) entered blocking state [ 803.131041][T22249] bridge0: port 3(vlan2) entered disabled state [ 803.145941][T22249] vlan2: entered allmulticast mode [ 803.145964][T22249] geneve0: entered allmulticast mode [ 803.162557][T22249] vlan2: entered promiscuous mode [ 804.168388][T22301] netlink: 'syz.4.3860': attribute type 2 has an invalid length. [ 804.196600][T22301] netlink: 'syz.4.3860': attribute type 10 has an invalid length. [ 804.240230][T22301] team0: Port device dummy0 added [ 804.465998][T22315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.559176][T22315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.852464][T22336] veth3: entered allmulticast mode [ 804.870778][T22334] veth3: left allmulticast mode [ 804.903153][T22335] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 804.988466][T22335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 805.146669][T22335] xt_nfacct: accounting object `syz0' does not exist [ 805.673246][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 805.673291][ T5632] Bluetooth: hci0: command 0x0401 tx timeout [ 805.796607][T22373] xt_hashlimit: size too large, truncated to 1048576 [ 805.881546][T22378] netlink: 'syz.1.3878': attribute type 1 has an invalid length. [ 805.908882][T22371] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 806.022620][T22378] bond0: entered promiscuous mode [ 806.023051][T22378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.051401][T11471] net_ratelimit: 47 callbacks suppressed [ 806.051421][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 806.165558][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 806.346275][T22395] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 806.348328][T22395] bond1 (unregistering): Released all slaves [ 806.571515][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 806.686461][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 806.767405][T22414] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 806.769403][T22414] bond1 (unregistering): Released all slaves [ 806.770876][T22418] openvswitch: netlink: Multiple metadata blocks provided [ 806.868625][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 806.971721][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 807.005266][T11471] IPVS: starting estimator thread 0... [ 807.085797][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 807.091426][T22427] IPVS: using max 27 ests per chain, 64800 per kthread [ 807.211619][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 807.324231][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 807.656058][T22466] __nla_validate_parse: 57 callbacks suppressed [ 807.656080][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 807.747658][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 808.056002][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'. [ 808.400004][T22509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3907'. [ 811.282354][T22495] syzkaller0: entered promiscuous mode [ 811.282382][T22495] syzkaller0: entered allmulticast mode [ 811.328607][T11471] net_ratelimit: 9 callbacks suppressed [ 811.328631][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 811.437151][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 811.535693][T22524] netlink: 'syz.0.3911': attribute type 11 has an invalid length. [ 811.535720][T22524] netlink: 'syz.0.3911': attribute type 4 has an invalid length. [ 811.535735][T22524] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3911'. [ 811.568715][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 811.676110][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 811.695129][T22535] netlink: 'syz.4.3915': attribute type 1 has an invalid length. [ 811.756703][T22535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 811.788464][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3913'. [ 811.797869][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 811.821707][T22539] syzkaller0: entered promiscuous mode [ 811.821729][T22539] syzkaller0: entered allmulticast mode [ 811.824843][T22539] tipc: Started in network mode [ 811.824875][T22539] tipc: Node identity 8ed3aba2187e, cluster identity 4711 [ 811.826982][T22539] tipc: Enabled bearer , priority 0 [ 811.830096][T22535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3915'. [ 811.863032][T22538] tipc: Resetting bearer [ 811.925774][T22538] tipc: Disabling bearer [ 811.959294][T22541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3917'. [ 811.982010][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 812.007646][T22544] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3919'. [ 812.009054][T22544] syzkaller0: entered promiscuous mode [ 812.009075][T22544] syzkaller0: entered allmulticast mode [ 812.048089][T22551] vcan0: tx address claim with different name [ 812.048730][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 812.131426][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 812.756556][T22566] bridge_slave_0: left allmulticast mode [ 812.756586][T22566] bridge_slave_0: left promiscuous mode [ 812.756840][T22566] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.878756][T22566] .`: (slave bond_slave_0): Releasing backup interface [ 812.939476][T22566] .`: (slave bond_slave_1): Releasing backup interface [ 813.001055][T22566] team0: Port device team_slave_0 removed [ 813.027262][T22566] team0: Port device team_slave_1 removed [ 813.028680][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.028704][T22566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.069804][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.069832][T22566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.268899][T22581] __nla_validate_parse: 1 callbacks suppressed [ 813.268931][T22581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3929'. [ 813.301990][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 813.365769][T22584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3929'. [ 813.412223][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 813.440669][T22595] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 813.440669][T22595] Please contact the netfilter-devel mailing list or update your nftables rules. [ 813.522044][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 813.755054][T22602] team0: Port device team_slave_0 removed [ 813.779616][T22602] team0: Port device team_slave_1 removed [ 813.789520][T22602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.789543][T22602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.826507][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 814.170968][T22630] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.267210][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.286259][T22630] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 814.288670][T22630] vxcan2: left promiscuous mode [ 814.310081][T22630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.338481][T22630] syzkaller0: left promiscuous mode [ 814.787707][T22661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.810568][T22661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.827206][T22661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.916396][T22658] Unknown options in mask 6 [ 814.917888][T22668] Unknown options in mask 6 [ 814.918179][T22658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3948'. [ 814.918218][T22658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3948'. [ 814.920345][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3948'. [ 814.920374][T22668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3948'. [ 814.927901][T22658] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 814.927954][T22658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3948'. [ 815.674409][T22704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3959'. [ 815.775617][T22706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3959'. [ 815.870844][T22709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3961'. [ 816.412189][T18881] net_ratelimit: 20 callbacks suppressed [ 816.412214][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 816.523585][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 816.643387][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 816.752623][T11470] bond2: (slave bridge2): failed to get link speed/duplex [ 816.756367][T22747] TCP: TCP_TX_DELAY enabled [ 816.862843][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 816.997233][T22752] dummy0: entered promiscuous mode [ 817.009486][T22759] xt_l2tp: missing protocol rule (udp|l2tpip) [ 817.028723][T22752] debugfs: 'hsr0' already exists in 'hsr' [ 817.028748][T22752] Cannot create hsr debugfs directory [ 817.073258][T22757] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 817.104255][T18887] bond2: (slave bridge2): failed to get link speed/duplex [ 817.198550][T22761] bond0: left promiscuous mode [ 817.264027][T22761] dummy0: left promiscuous mode [ 817.361878][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 817.471782][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 817.586823][T22771] syzkaller1: entered promiscuous mode [ 817.586847][T22771] syzkaller1: entered allmulticast mode [ 817.605929][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 817.742458][T22781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.745142][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 818.183732][T22809] xt_IDLETIMER: timeout value is too big [ 818.567945][T22829] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 818.626045][T22833] __nla_validate_parse: 6 callbacks suppressed [ 818.626068][T22833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3993'. [ 818.741518][T22839] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3996'. [ 818.745856][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 818.876113][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 819.180317][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 819.524343][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 819.524383][T22862] netlink: 'syz.2.4000': attribute type 29 has an invalid length. [ 819.524398][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 819.678894][T22873] SET target dimension over the limit! [ 819.759391][T22875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4007'. [ 820.204231][T22882] bond2: (slave veth0_to_bond): Releasing backup interface [ 820.315486][T22887] bridge3: entered promiscuous mode [ 820.366299][T22902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4010'. [ 820.368303][T22902] unsupported nlmsg_type 40 [ 820.472031][T22892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'. [ 820.680186][T22905] syzkaller1: entered promiscuous mode [ 820.680212][T22905] syzkaller1: entered allmulticast mode [ 821.275339][T22941] bridge_slave_0: entered promiscuous mode [ 821.445565][T22952] xt_hashlimit: size too large, truncated to 1048576 [ 821.452211][T18881] net_ratelimit: 25 callbacks suppressed [ 821.452231][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 821.563146][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 821.672939][T18887] bond2: (slave bridge2): failed to get link speed/duplex [ 821.841735][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 821.953799][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 822.104325][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 822.316118][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 822.423827][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 822.531863][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 822.643943][T18887] bond2: (slave bridge2): failed to get link speed/duplex [ 824.253173][T22942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.507453][T22999] __nla_validate_parse: 4 callbacks suppressed [ 824.507477][T22999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4036'. [ 824.535278][T22999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4036'. [ 824.590237][T23000] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4038'. [ 824.712838][T23012] xt_LOG: prefix is not null-terminated [ 824.728315][T23013] x_tables: ip6_tables: TRACE target: only valid in raw table, not aw [ 824.763199][T23009] syzkaller0: entered promiscuous mode [ 824.920077][T23018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.953601][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'. [ 825.159309][T23026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.249065][T23037] netlink: 'syz.3.4049': attribute type 10 has an invalid length. [ 825.249091][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4049'. [ 825.281994][T23035] lo speed is unknown, defaulting to 1000 [ 825.282041][T23035] lo speed is unknown, defaulting to 1000 [ 825.282590][T23035] lo speed is unknown, defaulting to 1000 [ 825.287210][T23035] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 825.287238][T23035] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 825.287269][T23035] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 825.383254][T23035] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 825.430733][T23041] bridge_slave_0: left promiscuous mode [ 825.578608][T23041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.602377][T23041] gtp0: left promiscuous mode [ 825.660281][T14221] lo speed is unknown, defaulting to 1000 [ 825.697241][T23035] lo speed is unknown, defaulting to 1000 [ 825.717430][T23035] lo speed is unknown, defaulting to 1000 [ 825.719677][T23035] lo speed is unknown, defaulting to 1000 [ 825.734933][T23035] lo speed is unknown, defaulting to 1000 [ 825.736968][T23035] lo speed is unknown, defaulting to 1000 [ 825.739519][T23035] lo speed is unknown, defaulting to 1000 [ 825.764151][T23035] lo speed is unknown, defaulting to 1000 [ 825.766440][T23035] lo speed is unknown, defaulting to 1000 [ 825.869631][T23060] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 825.870803][T23060] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20003 [ 825.971671][T11473] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.971712][T11473] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.107185][T23074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4060'. [ 826.496432][T11471] net_ratelimit: 30 callbacks suppressed [ 826.496455][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 826.565373][T23098] netlink: 'syz.1.4064': attribute type 2 has an invalid length. [ 826.608512][T23098] netlink: 'syz.1.4064': attribute type 2 has an invalid length. [ 826.616984][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 826.675046][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 826.675084][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 826.722495][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 826.815021][T23108] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4068'. [ 826.831453][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 826.849307][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 826.943328][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 827.051779][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 827.161374][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 827.274055][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 827.382361][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 827.500937][T23141] lo speed is unknown, defaulting to 1000 [ 827.502661][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 827.533882][T23141] lo speed is unknown, defaulting to 1000 [ 827.726940][T23145] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 827.726970][T23145] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 827.864680][T23161] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003 [ 828.177151][T23171] bond5: option ad_select: invalid value (34) [ 828.192749][T23177] netlink: 'syz.1.4082': attribute type 5 has an invalid length. [ 828.210410][T23171] bond5 (unregistering): Released all slaves [ 828.546956][T23172] bond5: option ad_select: invalid value (34) [ 828.563816][T23172] bond5 (unregistering): Released all slaves [ 828.999481][T23193] syzkaller0: entered promiscuous mode [ 828.999510][T23193] syzkaller0: entered allmulticast mode [ 829.010972][T23192] hsr0: entered allmulticast mode [ 829.011033][T23192] hsr_slave_0: entered allmulticast mode [ 829.011079][T23192] hsr_slave_1: entered allmulticast mode [ 829.013345][T23191] hsr0: left allmulticast mode [ 829.013399][T23191] hsr_slave_0: left allmulticast mode [ 829.013442][T23191] hsr_slave_1: left allmulticast mode [ 829.059783][T23189] tipc: Enabled bearer , priority 0 [ 829.059948][T23196] hsr_slave_0: left promiscuous mode [ 829.061007][T23196] hsr_slave_1: left promiscuous mode [ 829.109360][T23204] batman_adv: batadv0: Adding interface: macvtap1 [ 829.109373][T23204] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.109394][T23204] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 829.288012][T11471] tipc: Resetting bearer [ 829.289489][T23170] tipc: Resetting bearer [ 831.565830][T23170] tipc: Disabling bearer [ 831.581296][T23235] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 831.599373][T14221] tipc: Node number set to 3209768418 [ 831.629748][T11471] net_ratelimit: 5 callbacks suppressed [ 831.629771][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 831.735996][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 831.809862][T23252] Cannot find add_set index 34 as target [ 831.810047][T23252] Cannot find add_set index 34 as target [ 831.810201][T23252] Cannot find add_set index 34 as target [ 831.810360][T23252] Cannot find add_set index 34 as target [ 831.810553][T23252] Cannot find add_set index 34 as target [ 831.810709][T23252] Cannot find add_set index 34 as target [ 831.810855][T23252] Cannot find add_set index 34 as target [ 831.811004][T23252] Cannot find add_set index 34 as target [ 831.837431][T23252] Cannot find add_set index 34 as target [ 831.837934][T23252] Cannot find add_set index 34 as target [ 831.912250][T23251] __nla_validate_parse: 50 callbacks suppressed [ 831.912281][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.912792][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.913092][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.913377][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.913670][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.933160][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.944874][T23251] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4092'. [ 831.973515][T20373] bond2: (slave bridge2): failed to get link speed/duplex [ 831.987165][T23249] netlink: ct family unspecified [ 831.987193][T23249] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.990507][T23250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4092'. [ 832.000948][T23263] syzkaller1: entered promiscuous mode [ 832.001002][T23263] syzkaller1: entered allmulticast mode [ 832.075630][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 832.369694][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 832.474575][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 832.545621][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'. [ 832.594688][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 832.705676][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 832.796006][T23287] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4099'. [ 833.008709][T22374] udevd[22374]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 833.047779][T22372] udevd[22372]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 834.653305][T23342] bond3 (unregistering): Released all slaves [ 834.956709][T23331] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 835.118981][T23357] tipc: Enabling of bearer rejected, failed to enable media [ 835.590405][T23368] bond3 (unregistering): Released all slaves [ 836.083516][T23397] gtp1: entered promiscuous mode [ 836.083535][T23397] gtp1: entered allmulticast mode [ 836.183779][T23370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.683041][ T9948] net_ratelimit: 23 callbacks suppressed [ 836.683065][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 836.764986][T23412] netlink: 'syz.1.4129': attribute type 7 has an invalid length. [ 836.793301][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 836.892050][T23412] ip6gretap0: entered promiscuous mode [ 836.892611][T23412] macsec0: entered allmulticast mode [ 836.892630][T23412] ip6gretap0: entered allmulticast mode [ 837.121723][T23412] ip6gretap0: left allmulticast mode [ 837.121758][T23412] ip6gretap0: left promiscuous mode [ 837.541106][T23432] __nla_validate_parse: 7 callbacks suppressed [ 837.541130][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4132'. [ 837.557599][T23432] netlink: 'syz.3.4132': attribute type 21 has an invalid length. [ 837.631860][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 837.922741][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 838.032410][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 838.035135][T23440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4133'. [ 838.035172][T23440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4133'. [ 838.148985][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 838.333117][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 838.437335][T23453] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 838.456763][T23454] SET target dimension over the limit! [ 838.496622][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4137'. [ 838.514814][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 838.622033][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 838.676562][T23456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 838.679539][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 838.851609][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 838.875172][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4140'. [ 838.875204][T23467] bond0: Unable to set up delay as MII monitoring is disabled [ 839.284008][T23482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4143'. [ 839.288491][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 841.008244][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 841.316714][T23534] erspan0: left promiscuous mode [ 842.950257][T23534] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode [ 842.950288][T23534] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode [ 842.993476][T23562] bridge3: entered promiscuous mode [ 843.024755][T11471] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.024809][T11471] net_ratelimit: 19 callbacks suppressed [ 843.024824][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 843.024876][T11471] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.024916][T11471] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.024954][T11471] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.133152][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 843.240798][T23598] xt_REDIRECT: bad rangesize 26624. [ 843.241091][T23597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4160'. [ 843.295320][T23601] netlink: 'syz.1.4159': attribute type 3 has an invalid length. [ 843.482169][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 843.594195][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 843.691016][T23620] FAULT_INJECTION: forcing a failure. [ 843.691016][T23620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.691053][T23620] CPU: 1 UID: 0 PID: 23620 Comm: syz.2.4167 Not tainted syzkaller #0 PREEMPT(full) [ 843.691080][T23620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.691094][T23620] Call Trace: [ 843.691104][T23620] [ 843.691114][T23620] dump_stack_lvl+0xe8/0x150 [ 843.691158][T23620] should_fail_ex+0x410/0x560 [ 843.691203][T23620] _copy_from_user+0x2d/0xb0 [ 843.691234][T23620] ___sys_sendmsg+0x1c6/0x360 [ 843.691266][T23620] ? __lock_acquire+0x747/0x2de0 [ 843.691297][T23620] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.691366][T23620] ? __fget_files+0x2a/0x420 [ 843.691398][T23620] ? __fget_files+0x3a2/0x420 [ 843.691441][T23620] __x64_sys_sendmsg+0x1b1/0x290 [ 843.691475][T23620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.691528][T23620] do_syscall_64+0x166/0x520 [ 843.691556][T23620] ? trace_irq_disable+0x3b/0x140 [ 843.691579][T23620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.691604][T23620] ? clear_bhb_loop+0x70/0xc0 [ 843.691632][T23620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.691655][T23620] RIP: 0033:0x7f114719e159 [ 843.691677][T23620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.691696][T23620] RSP: 002b:00007f11453f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.691721][T23620] RAX: ffffffffffffffda RBX: 00007f1147425fa0 RCX: 00007f114719e159 [ 843.691738][T23620] RDX: 0000000024040884 RSI: 00002000000001c0 RDI: 0000000000000003 [ 843.691754][T23620] RBP: 00007f11453f6090 R08: 0000000000000000 R09: 0000000000000000 [ 843.691767][T23620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.691781][T23620] R13: 00007f1147426038 R14: 00007f1147425fa0 R15: 00007ffc6f53fb88 [ 843.691817][T23620] [ 843.962618][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 843.979399][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 843.989504][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 844.091546][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 844.121827][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 844.202564][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 844.273116][T23645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4175'. [ 844.311557][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 844.367334][T23650] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4174'. [ 844.367555][T23650] bond_slave_0: entered promiscuous mode [ 844.421436][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 844.531658][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 844.612392][T23654] bond5: entered promiscuous mode [ 844.612850][T23654] 8021q: adding VLAN 0 to HW filter on device bond5 [ 844.652808][T23655] bond6: ARP target 9.0.0.0 is already present [ 844.652827][T23655] bond6: option arp_ip_target: invalid value (9) [ 844.654163][T23655] bond6 (unregistering): Released all slaves [ 844.698968][T23663] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 844.698991][T23663] CPU: 0 UID: 0 PID: 23663 Comm: syz.1.4179 Not tainted syzkaller #0 PREEMPT(full) [ 844.699019][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.699033][T23663] Call Trace: [ 844.699043][T23663] [ 844.699053][T23663] dump_stack_lvl+0xe8/0x150 [ 844.699094][T23663] sysfs_warn_dup+0x8e/0xa0 [ 844.699133][T23663] sysfs_do_create_link_sd+0xc0/0x110 [ 844.699172][T23663] device_add_class_symlinks+0x1cf/0x240 [ 844.699205][T23663] device_add+0x467/0xb80 [ 844.699233][T23663] wiphy_register+0x1fc8/0x2ff0 [ 844.699291][T23663] ? __pfx_wiphy_register+0x10/0x10 [ 844.699328][T23663] ? __pfx_netdev_run_todo+0x10/0x10 [ 844.699362][T23663] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 844.699402][T23663] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 844.699447][T23663] ieee80211_register_hw+0x3d3d/0x4a50 [ 844.699489][T23663] ? ieee80211_register_hw+0x1941/0x4a50 [ 844.699548][T23663] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 844.699580][T23663] ? __asan_memset+0x22/0x50 [ 844.699623][T23663] ? __hrtimer_setup+0x1b7/0x260 [ 844.699647][T23663] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 844.699671][T23663] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 844.699718][T23663] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 844.699736][T23663] ? kstrndup+0xbd/0x160 [ 844.699759][T23663] ? kstrndup+0xbd/0x160 [ 844.699776][T23663] hwsim_new_radio_nl+0xd8b/0xf90 [ 844.699807][T23663] genl_family_rcv_msg_doit+0x233/0x340 [ 844.699834][T23663] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 844.699864][T23663] ? bpf_lsm_capable+0x9/0x20 [ 844.699878][T23663] ? security_capable+0x7e/0x2c0 [ 844.699904][T23663] genl_rcv_msg+0x614/0x7a0 [ 844.699928][T23663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.699945][T23663] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 844.699975][T23663] netlink_rcv_skb+0x226/0x4a0 [ 844.700000][T23663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 844.700019][T23663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 844.700055][T23663] ? down_read+0x2be/0x330 [ 844.700079][T23663] genl_rcv+0x28/0x40 [ 844.700096][T23663] netlink_unicast+0x7bd/0x940 [ 844.700128][T23663] netlink_sendmsg+0x813/0xb40 [ 844.700159][T23663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.700190][T23663] ? apparmor_socket_sendmsg+0x98/0x360 [ 844.700210][T23663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.700233][T23663] sock_sendmsg_nosec+0x13a/0x180 [ 844.700261][T23663] ____sys_sendmsg+0x54e/0x850 [ 844.700287][T23663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.700319][T23663] ? import_iovec+0x73/0xa0 [ 844.700342][T23663] ___sys_sendmsg+0x2a5/0x360 [ 844.700362][T23663] ? __lock_acquire+0x747/0x2de0 [ 844.700382][T23663] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.700406][T23663] ? futex_wait+0x2a2/0x390 [ 844.700455][T23663] ? __fget_files+0x2a/0x420 [ 844.700477][T23663] ? __fget_files+0x3a2/0x420 [ 844.700508][T23663] __x64_sys_sendmsg+0x1b1/0x290 [ 844.700532][T23663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.700571][T23663] do_syscall_64+0x166/0x520 [ 844.700587][T23663] ? trace_irq_disable+0x3b/0x140 [ 844.700634][T23663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.700660][T23663] ? clear_bhb_loop+0x70/0xc0 [ 844.700689][T23663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.700717][T23663] RIP: 0033:0x7f3a6a99e159 [ 844.700732][T23663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.700746][T23663] RSP: 002b:00007f3a6b905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.700763][T23663] RAX: ffffffffffffffda RBX: 00007f3a6ac25fa0 RCX: 00007f3a6a99e159 [ 844.700775][T23663] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 844.700785][T23663] RBP: 00007f3a6aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 844.700795][T23663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.700805][T23663] R13: 00007f3a6ac26038 R14: 00007f3a6ac25fa0 R15: 00007ffd0a26e4d8 [ 844.700832][T23663] [ 844.914442][T23665] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4178'. [ 845.602263][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 845.777332][T23700] FAULT_INJECTION: forcing a failure. [ 845.777332][T23700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.777369][T23700] CPU: 1 UID: 0 PID: 23700 Comm: syz.3.4188 Not tainted syzkaller #0 PREEMPT(full) [ 845.777394][T23700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.777407][T23700] Call Trace: [ 845.777415][T23700] [ 845.777425][T23700] dump_stack_lvl+0xe8/0x150 [ 845.777463][T23700] should_fail_ex+0x410/0x560 [ 845.777506][T23700] _copy_from_iter+0x1d3/0x1660 [ 845.777529][T23700] ? skb_set_owner_w+0x263/0x3d0 [ 845.777573][T23700] ? __pfx__copy_from_iter+0x10/0x10 [ 845.777607][T23700] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 845.777642][T23700] skb_copy_datagram_from_iter+0xe6/0x720 [ 845.777759][T23700] ? skb_put+0x112/0x210 [ 845.777789][T23700] tun_get_user+0xc7f/0x44d0 [ 845.777882][T23700] ? aa_file_perm+0x18b/0x15f0 [ 845.777917][T23700] ? aa_file_perm+0x4ed/0x15f0 [ 845.777946][T23700] ? __pfx_tun_get_user+0x10/0x10 [ 845.777972][T23700] ? __lock_acquire+0x747/0x2de0 [ 845.777999][T23700] ? kstrtoull+0x137/0x1d0 [ 845.778039][T23700] ? ref_tracker_alloc+0x341/0x4b0 [ 845.778094][T23700] ? lock_acquire+0x115/0x350 [ 845.778117][T23700] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 845.778145][T23700] ? lock_acquire+0x115/0x350 [ 845.778166][T23700] ? tun_get+0x1c/0x2f0 [ 845.778194][T23700] ? tun_get+0x1c/0x2f0 [ 845.778216][T23700] ? tun_get+0x1c/0x2f0 [ 845.778243][T23700] tun_chr_write_iter+0x113/0x200 [ 845.778270][T23700] vfs_write+0x612/0xba0 [ 845.778313][T23700] ? __pfx_vfs_write+0x10/0x10 [ 845.778358][T23700] ? __fget_files+0x2a/0x420 [ 845.778399][T23700] ksys_write+0x150/0x270 [ 845.778435][T23700] ? __pfx_ksys_write+0x10/0x10 [ 845.778490][T23700] do_syscall_64+0x166/0x520 [ 845.778514][T23700] ? trace_irq_disable+0x3b/0x140 [ 845.778537][T23700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.778560][T23700] ? clear_bhb_loop+0x70/0xc0 [ 845.778588][T23700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.778611][T23700] RIP: 0033:0x7f343099e159 [ 845.778632][T23700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.778652][T23700] RSP: 002b:00007f3431810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.778694][T23700] RAX: ffffffffffffffda RBX: 00007f3430c25fa0 RCX: 00007f343099e159 [ 845.778712][T23700] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 845.778727][T23700] RBP: 00007f3431810090 R08: 0000000000000000 R09: 0000000000000000 [ 845.778742][T23700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.778756][T23700] R13: 00007f3430c26038 R14: 00007f3430c25fa0 R15: 00007ffd11ee8f58 [ 845.778792][T23700] [ 845.779149][T23696] netlink: 'syz.0.4187': attribute type 27 has an invalid length. [ 845.907052][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 846.635644][T23725] block nbd6: server does not support multiple connections per device. [ 846.638456][T23725] block nbd6: shutting down sockets [ 846.699228][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 846.743143][T23737] block nbd6: server does not support multiple connections per device. [ 846.743503][T23737] block nbd6: shutting down sockets [ 847.417147][T23772] FAULT_INJECTION: forcing a failure. [ 847.417147][T23772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.417256][T23772] CPU: 1 UID: 0 PID: 23772 Comm: syz.3.4204 Not tainted syzkaller #0 PREEMPT(full) [ 847.417282][T23772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.417297][T23772] Call Trace: [ 847.417306][T23772] [ 847.417316][T23772] dump_stack_lvl+0xe8/0x150 [ 847.417355][T23772] should_fail_ex+0x410/0x560 [ 847.417387][T23772] _copy_from_iter+0x1d3/0x1660 [ 847.417426][T23772] ? __alloc_skb+0x27a/0x7a0 [ 847.417454][T23772] ? __alloc_skb+0x27a/0x7a0 [ 847.417482][T23772] ? __alloc_skb+0x27a/0x7a0 [ 847.417509][T23772] ? __pfx__copy_from_iter+0x10/0x10 [ 847.417533][T23772] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 847.417570][T23772] ? __alloc_skb+0x27a/0x7a0 [ 847.417593][T23772] ? __alloc_skb+0x27a/0x7a0 [ 847.417625][T23772] ? netlink_sendmsg+0x650/0xb40 [ 847.417659][T23772] ? skb_put+0x112/0x210 [ 847.417689][T23772] netlink_sendmsg+0x6c0/0xb40 [ 847.417738][T23772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.417782][T23772] ? apparmor_socket_sendmsg+0x18b/0x360 [ 847.417812][T23772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.417844][T23772] sock_sendmsg_nosec+0x13a/0x180 [ 847.417885][T23772] ____sys_sendmsg+0x54e/0x850 [ 847.417922][T23772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.417964][T23772] ? import_iovec+0x73/0xa0 [ 847.417996][T23772] ___sys_sendmsg+0x2a5/0x360 [ 847.418025][T23772] ? __lock_acquire+0x747/0x2de0 [ 847.418048][T23772] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.418105][T23772] ? __fget_files+0x2a/0x420 [ 847.418132][T23772] ? __fget_files+0x3a2/0x420 [ 847.418170][T23772] __x64_sys_sendmsg+0x1b1/0x290 [ 847.418199][T23772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.418247][T23772] do_syscall_64+0x166/0x520 [ 847.418269][T23772] ? trace_irq_disable+0x3b/0x140 [ 847.418290][T23772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.418312][T23772] ? clear_bhb_loop+0x70/0xc0 [ 847.418338][T23772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.418361][T23772] RIP: 0033:0x7f343099e159 [ 847.418380][T23772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.418409][T23772] RSP: 002b:00007f3431810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.418433][T23772] RAX: ffffffffffffffda RBX: 00007f3430c25fa0 RCX: 00007f343099e159 [ 847.418450][T23772] RDX: 0000000024040884 RSI: 00002000000001c0 RDI: 0000000000000003 [ 847.418465][T23772] RBP: 00007f3431810090 R08: 0000000000000000 R09: 0000000000000000 [ 847.418480][T23772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.418494][T23772] R13: 00007f3430c26038 R14: 00007f3430c25fa0 R15: 00007ffd11ee8f58 [ 847.418531][T23772] [ 848.031350][T11471] net_ratelimit: 21 callbacks suppressed [ 848.031386][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 848.142176][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 848.147946][T23794] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20004 [ 848.251902][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 848.363887][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 848.482785][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 848.602223][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 848.721807][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 848.776849][T23817] __nla_validate_parse: 1 callbacks suppressed [ 848.776888][T23817] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4217'. [ 848.776908][T23817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4217'. [ 848.776925][T23817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4217'. [ 848.832012][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 848.944715][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 849.051407][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 849.457247][T23852] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4228'. [ 849.628135][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 849.628162][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 849.631047][T23856] veth3: entered allmulticast mode [ 849.769605][T23857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 849.786628][T23854] veth3: left allmulticast mode [ 849.915626][T23868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4232'. [ 850.005841][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 850.005870][T23870] block nbd6: Unsupported socket: should be TCP or UNIX. [ 850.041663][T23872] netlink: 'syz.2.4233': attribute type 23 has an invalid length. [ 850.576964][T23887] tipc: Enabling of bearer rejected, failed to enable media [ 850.652368][T23887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4237'. [ 850.737718][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4239'. [ 850.996366][T23901] bond0: Removing last arp target with arp_interval on [ 851.402176][T23924] netlink: 'syz.1.4251': attribute type 1 has an invalid length. [ 851.419852][T23927] netlink: 'syz.0.4253': attribute type 4 has an invalid length. [ 851.437054][T23929] netlink: 'syz.0.4253': attribute type 4 has an invalid length. [ 851.503457][T23924] bond2: entered promiscuous mode [ 851.510135][T23924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.609017][T23934] netlink: 'syz.1.4251': attribute type 9 has an invalid length. [ 852.105605][T23924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.109084][T23924] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 852.109119][T23924] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 852.147740][T23924] bond2: (slave gre2): making interface the new active one [ 852.147773][T23924] gre2: entered promiscuous mode [ 852.164805][T23924] bond2: (slave gre2): Enslaving as an active interface with an up link [ 852.392312][T23952] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 852.591935][T23959] netlink: 'syz.2.4257': attribute type 3 has an invalid length. [ 852.591964][T23959] netlink: 'syz.2.4257': attribute type 5 has an invalid length. [ 852.623455][T23940] bond2 (unregistering): (slave gre2): Releasing backup interface [ 852.623487][T23940] gre2: left promiscuous mode [ 852.665665][T23940] bond2 (unregistering): Released all slaves [ 854.145764][ T9948] net_ratelimit: 19 callbacks suppressed [ 854.145790][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 854.256093][T23959] geneve5: entered promiscuous mode [ 854.256121][T23959] geneve5: entered allmulticast mode [ 854.273024][T11472] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 53025 - 0 [ 854.273083][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 854.282233][T11471] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 53025 - 0 [ 854.282777][T11471] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 53025 - 0 [ 854.382370][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 854.443536][T23962] __nla_validate_parse: 6 callbacks suppressed [ 854.443561][T23962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 854.491515][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 854.601503][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 854.650817][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4262'. [ 854.711450][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 854.809702][T23975] netlink: 'syz.4.4261': attribute type 1 has an invalid length. [ 854.809727][T23975] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4261'. [ 854.922205][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 855.031535][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 855.141554][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 855.251524][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 855.734261][T24001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4268'. [ 855.734299][T24001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4268'. [ 856.309389][T24017] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.313781][T24017] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.349318][T24017] team0: left allmulticast mode [ 856.349342][T24017] team_slave_0: left allmulticast mode [ 856.349359][T24017] team_slave_1: left allmulticast mode [ 856.786384][T24017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.050001][T24043] netlink: 'syz.1.4276': attribute type 10 has an invalid length. [ 857.372862][T24017] syzkaller0: left promiscuous mode [ 857.372889][T24017] syzkaller0: left allmulticast mode [ 857.378486][T24017] bond5: left promiscuous mode [ 857.384119][T11471] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.384380][T11471] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.384494][T11471] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.384593][T11471] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.603121][T24046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4277'. [ 857.603858][T24046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4277'. [ 858.019124][T24059] bridge_slave_0: default FDB implementation only supports local addresses [ 858.859665][T24084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4285'. [ 858.871995][T24087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4285'. [ 859.171540][T11471] net_ratelimit: 21 callbacks suppressed [ 859.171564][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 859.214220][T24095] : renamed from bond_slave_0 (while UP) [ 859.281325][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 859.391659][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 859.458347][T24104] netlink: 'syz.2.4290': attribute type 26 has an invalid length. [ 859.503387][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 859.614551][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 859.721653][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 859.820882][T24113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4292'. [ 859.832100][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 859.941900][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 859.942786][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4296'. [ 859.942865][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'. [ 860.051445][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 860.138524][T24134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4299'. [ 860.154005][T24134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4299'. [ 860.154730][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 860.160249][T24134] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4299'. [ 860.160373][T24134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4299'. [ 860.170094][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 860.314111][T24124] cgroup: fork rejected by pids controller in /syz3 [ 860.421746][T24202] xt_hashlimit: size too large, truncated to 1048576 [ 860.577055][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 860.672532][T24248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4302'. [ 860.814343][T24248] ipvlan2: entered promiscuous mode [ 860.833620][T24248] team0: Device ipvlan2 failed to register rx_handler [ 861.027132][T24258] IPVS: set_ctl: invalid protocol: 2 172.20.20.16:20000 [ 862.140752][T22267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.162598][T22267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.164086][T22267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.166783][T22267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.168187][T22267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 862.213090][T24273] syzkaller1: entered promiscuous mode [ 862.213113][T24273] syzkaller1: entered allmulticast mode [ 862.574401][T24304] geneve2: entered promiscuous mode [ 862.703867][T24310] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 862.848601][T24310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 862.993190][T24318] bond6: (slave geneve6): making interface the new active one [ 862.999996][T24318] bond6: (slave geneve6): Enslaving as an active interface with an up link [ 863.392555][ T1010] bridge_slave_1: left allmulticast mode [ 863.392585][ T1010] bridge_slave_1: left promiscuous mode [ 863.392812][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.426063][ T1010] bridge_slave_0: left allmulticast mode [ 863.426092][ T1010] bridge_slave_0: left promiscuous mode [ 863.430300][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.900892][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.920176][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.926297][ T1010] bond0 (unregistering): Released all slaves [ 863.960383][ T1010] bond1 (unregistering): Released all slaves [ 864.009493][ T1010] bond2 (unregistering): Released all slaves [ 864.041930][ T1010] bond3 (unregistering): Released all slaves [ 864.068216][ T1010] bond4 (unregistering): Released all slaves [ 864.118666][ T1010] bond5 (unregistering): Released all slaves [ 864.231457][T17857] Bluetooth: hci2: command tx timeout [ 864.326871][ T1010] tipc: Disabling bearer [ 864.327005][ T1010] tipc: Left network mode [ 864.329421][T24293] lo speed is unknown, defaulting to 1000 [ 864.345778][T18881] net_ratelimit: 13 callbacks suppressed [ 864.345867][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 864.370212][T24293] lo speed is unknown, defaulting to 1000 [ 864.549046][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 864.553138][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 864.762092][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 864.796753][ T1010] batman_adv: batadv0: Removing interface: macvtap1 [ 864.863285][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 864.946053][T24386] __nla_validate_parse: 2 callbacks suppressed [ 864.946077][T24386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'. [ 865.109511][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 865.109537][T24392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4328'. [ 865.109882][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 865.109896][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4328'. [ 865.155952][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.416465][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 865.434267][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 865.625662][T24293] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.625840][T24293] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.625947][T24293] bridge_slave_0: entered allmulticast mode [ 865.627319][T24293] bridge_slave_0: entered promiscuous mode [ 865.656815][T24293] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.656995][T24293] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.657158][T24293] bridge_slave_1: entered allmulticast mode [ 865.659158][T24293] bridge_slave_1: entered promiscuous mode [ 865.721666][T24293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.725184][T24293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.790054][T24293] team0: Port device team_slave_0 added [ 865.793878][T24293] team0: Port device team_slave_1 added [ 865.848561][T24293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.848581][T24293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.848611][T24293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.885327][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 865.912419][T24293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.912438][T24293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.912467][T24293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.016951][T24293] hsr_slave_0: entered promiscuous mode [ 866.017902][T24293] hsr_slave_1: entered promiscuous mode [ 866.018447][T24293] debugfs: 'hsr0' already exists in 'hsr' [ 866.018468][T24293] Cannot create hsr debugfs directory [ 866.192586][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 866.301585][T17857] Bluetooth: hci2: command tx timeout [ 866.304420][T24342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.450479][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 866.591402][ T3342] bond2: (slave bridge2): failed to get link speed/duplex [ 866.925986][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 867.051507][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 867.395983][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4335'. [ 867.479068][T24429] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4337'. [ 867.520975][T24438] bridge0: port 1(veth0) entered blocking state [ 867.521905][T24438] bridge0: port 1(veth0) entered disabled state [ 867.526951][T24438] veth0: entered allmulticast mode [ 867.544306][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4335'. [ 867.544332][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 867.559168][T24438] veth0: entered promiscuous mode [ 867.575629][T24438] bridge0: port 1(veth0) entered blocking state [ 867.575756][T24438] bridge0: port 1(veth0) entered forwarding state [ 867.617717][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 867.617746][T24436] nbd: must specify a size in bytes for the device [ 867.946286][T24293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.961729][T24450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.984999][T24293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.994028][T24293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 868.023241][T24293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.118503][T14218] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 868.121139][T24452] macsec0: entered allmulticast mode [ 868.137059][T24452] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 868.171940][T24452] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 868.201718][T24452] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 868.258635][T24293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.285948][T24293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.308241][T14218] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 868.318893][T24293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.358665][T24293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.382606][T22267] Bluetooth: hci2: command tx timeout [ 868.677444][T24454] =v: renamed from veth0_to_bond [ 869.094363][T24293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.237994][T24293] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.261909][T11471] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.262019][T11471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.372086][T18881] net_ratelimit: 7 callbacks suppressed [ 869.372109][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 869.403484][T11471] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.403598][T11471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.638177][T24517] netlink: 'syz.1.4350': attribute type 12 has an invalid length. [ 869.671824][T24517] block nbd0: reconnected socket [ 869.671854][T24517] block nbd0: Unsupported socket: should be TCP or UNIX. [ 869.699335][T22267] block nbd0: Receive control failed (result -32) [ 869.712694][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 870.022188][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 870.108826][T24539] __nla_validate_parse: 3 callbacks suppressed [ 870.108851][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4354'. [ 870.140949][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 870.242885][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 870.353359][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 870.474537][T22267] Bluetooth: hci2: command tx timeout [ 870.475379][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 870.517529][T24552] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 870.763396][T24552] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 870.763839][T24550] syzkaller1: entered promiscuous mode [ 870.763863][T24550] syzkaller1: entered allmulticast mode [ 870.963892][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 871.215310][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4362'. [ 871.807153][T24293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.006388][T24293] veth0_vlan: entered promiscuous mode [ 872.043422][T24293] veth1_vlan: entered promiscuous mode [ 872.214240][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 872.483799][T24611] xt_CT: No such helper "snmp" [ 872.505302][T24293] veth0_macvtap: entered promiscuous mode [ 872.991508][T24293] veth1_macvtap: entered promiscuous mode [ 873.666459][T24293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.707935][T24293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.767126][T18881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.767236][T18881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.767289][T18881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.767330][T18881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.179164][T24693] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4375'. [ 874.179192][T24693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4375'. [ 874.382973][T18881] net_ratelimit: 12 callbacks suppressed [ 874.382996][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 874.454125][T24704] veth0_to_bridge: entered promiscuous mode [ 874.454399][T24704] macvtap1: entered allmulticast mode [ 874.454420][T24704] veth0_to_bridge: entered allmulticast mode [ 874.458235][T24704] veth0_to_bridge: left allmulticast mode [ 874.458262][T24704] veth0_to_bridge: left promiscuous mode [ 874.605324][T24704] [ 874.607723][T24704] ====================================================== [ 874.614765][T24704] WARNING: possible circular locking dependency detected [ 874.621831][T24704] syzkaller #0 Not tainted [ 874.626272][T24704] ------------------------------------------------------ [ 874.633344][T24704] syz.4.4377/24704 is trying to acquire lock: [ 874.639433][T24704] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 874.649406][T24704] [ 874.649406][T24704] but task is already holding lock: [ 874.656800][T24704] ffffffff8f801600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 874.665619][T24704] [ 874.665619][T24704] which lock already depends on the new lock. [ 874.665619][T24704] [ 874.676050][T24704] [ 874.676050][T24704] the existing dependency chain (in reverse order) is: [ 874.685091][T24704] [ 874.685091][T24704] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 874.692432][T24704] __mutex_lock+0x19d/0x1550 [ 874.697595][T24704] get_device_parent+0x16f/0x3a0 [ 874.703100][T24704] device_add+0x2d4/0xb80 [ 874.707987][T24704] device_create+0x269/0x300 [ 874.713143][T24704] msr_device_create+0x33/0x50 [ 874.718505][T24704] cpuhp_invoke_callback+0x434/0x810 [ 874.724378][T24704] cpuhp_thread_fun+0x362/0x780 [ 874.729806][T24704] smpboot_thread_fn+0x565/0xa70 [ 874.735359][T24704] kthread+0x38b/0x480 [ 874.739995][T24704] ret_from_fork+0x514/0xb70 [ 874.745170][T24704] ret_from_fork_asm+0x1a/0x30 [ 874.750510][T24704] [ 874.750510][T24704] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 874.758122][T24704] cpuhp_thread_fun+0x127/0x780 [ 874.763554][T24704] smpboot_thread_fn+0x565/0xa70 [ 874.769059][T24704] kthread+0x38b/0x480 [ 874.773689][T24704] ret_from_fork+0x514/0xb70 [ 874.778836][T24704] ret_from_fork_asm+0x1a/0x30 [ 874.784177][T24704] [ 874.784177][T24704] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 874.791957][T24704] cpus_read_lock+0x42/0x160 [ 874.797113][T24704] static_key_slow_inc+0x12/0x30 [ 874.802619][T24704] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 874.808999][T24704] nbd_genl_foreach_sock+0x265/0x450 [ 874.814845][T24704] nbd_genl_reconfigure+0xbbb/0x1040 [ 874.820695][T24704] genl_family_rcv_msg_doit+0x233/0x340 [ 874.826828][T24704] genl_rcv_msg+0x614/0x7a0 [ 874.831898][T24704] netlink_rcv_skb+0x226/0x4a0 [ 874.837232][T24704] genl_rcv+0x28/0x40 [ 874.841778][T24704] netlink_unicast+0x7bd/0x940 [ 874.847112][T24704] netlink_sendmsg+0x813/0xb40 [ 874.852457][T24704] sock_sendmsg_nosec+0x13a/0x180 [ 874.858049][T24704] ____sys_sendmsg+0x54e/0x850 [ 874.863374][T24704] ___sys_sendmsg+0x2a5/0x360 [ 874.868618][T24704] __x64_sys_sendmsg+0x1b1/0x290 [ 874.874134][T24704] do_syscall_64+0x166/0x520 [ 874.879271][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.885692][T24704] [ 874.885692][T24704] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 874.893530][T24704] __mutex_lock+0x19d/0x1550 [ 874.898684][T24704] nbd_queue_rq+0x373/0xff0 [ 874.903768][T24704] blk_mq_dispatch_rq_list+0x499/0x1990 [ 874.909947][T24704] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 874.916899][T24704] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 874.923442][T24704] blk_mq_run_work_fn+0x16c/0x300 [ 874.929075][T24704] process_scheduled_works+0xc3d/0x1630 [ 874.935189][T24704] worker_thread+0xa47/0xfb0 [ 874.940351][T24704] kthread+0x38b/0x480 [ 874.944986][T24704] ret_from_fork+0x514/0xb70 [ 874.950173][T24704] ret_from_fork_asm+0x1a/0x30 [ 874.955523][T24704] [ 874.955523][T24704] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 874.962786][T24704] __mutex_lock+0x19d/0x1550 [ 874.967948][T24704] nbd_queue_rq+0xc1/0xff0 [ 874.972937][T24704] blk_mq_dispatch_rq_list+0x499/0x1990 [ 874.979048][T24704] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 874.985940][T24704] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 874.992491][T24704] blk_mq_run_work_fn+0x16c/0x300 [ 874.998092][T24704] process_scheduled_works+0xc3d/0x1630 [ 875.004177][T24704] worker_thread+0xa47/0xfb0 [ 875.009308][T24704] kthread+0x38b/0x480 [ 875.013911][T24704] ret_from_fork+0x514/0xb70 [ 875.019053][T24704] ret_from_fork_asm+0x1a/0x30 [ 875.024361][T24704] [ 875.024361][T24704] -> #5 (set->srcu){.+.+}-{0:0}: [ 875.031512][T24704] __synchronize_srcu+0xc9/0x2f0 [ 875.037012][T24704] elevator_switch+0x1e8/0x7b0 [ 875.042408][T24704] elevator_change+0x2fa/0x480 [ 875.047704][T24704] elevator_set_default+0x375/0x440 [ 875.053440][T24704] blk_register_queue+0x3f3/0x4e0 [ 875.059058][T24704] __add_disk+0x6b8/0xdb0 [ 875.063926][T24704] add_disk_fwnode+0x100/0x3a0 [ 875.069236][T24704] nbd_dev_add+0x733/0xb60 [ 875.074207][T24704] nbd_init+0x168/0x1f0 [ 875.079068][T24704] do_one_initcall+0x250/0x870 [ 875.084441][T24704] do_initcall_level+0x10a/0x1a0 [ 875.090023][T24704] do_initcalls+0x59/0xa0 [ 875.094959][T24704] kernel_init_freeable+0x29d/0x3e0 [ 875.100695][T24704] kernel_init+0x22/0x1d0 [ 875.105604][T24704] ret_from_fork+0x514/0xb70 [ 875.110795][T24704] ret_from_fork_asm+0x1a/0x30 [ 875.116107][T24704] [ 875.116107][T24704] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 875.123937][T24704] __mutex_lock+0x19d/0x1550 [ 875.129070][T24704] elevator_change+0x1af/0x480 [ 875.134367][T24704] elevator_set_none+0xb5/0x140 [ 875.139788][T24704] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 875.146166][T24704] nbd_start_device+0x189/0xb30 [ 875.151567][T24704] nbd_genl_connect+0x167d/0x1cd0 [ 875.157201][T24704] genl_family_rcv_msg_doit+0x233/0x340 [ 875.163280][T24704] genl_rcv_msg+0x614/0x7a0 [ 875.168316][T24704] netlink_rcv_skb+0x226/0x4a0 [ 875.173616][T24704] genl_rcv+0x28/0x40 [ 875.178131][T24704] netlink_unicast+0x7bd/0x940 [ 875.183540][T24704] netlink_sendmsg+0x813/0xb40 [ 875.188845][T24704] sock_sendmsg_nosec+0x13a/0x180 [ 875.194418][T24704] ____sys_sendmsg+0x54e/0x850 [ 875.199728][T24704] ___sys_sendmsg+0x2a5/0x360 [ 875.204977][T24704] __x64_sys_sendmsg+0x1b1/0x290 [ 875.210488][T24704] do_syscall_64+0x166/0x520 [ 875.215637][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.222112][T24704] [ 875.222112][T24704] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 875.230826][T24704] blk_alloc_queue+0x544/0x690 [ 875.236151][T24704] __blk_mq_alloc_disk+0x194/0x390 [ 875.241833][T24704] nbd_dev_add+0x494/0xb60 [ 875.246805][T24704] nbd_init+0x168/0x1f0 [ 875.251520][T24704] do_one_initcall+0x250/0x870 [ 875.256861][T24704] do_initcall_level+0x10a/0x1a0 [ 875.262392][T24704] do_initcalls+0x59/0xa0 [ 875.267286][T24704] kernel_init_freeable+0x29d/0x3e0 [ 875.273137][T24704] kernel_init+0x22/0x1d0 [ 875.278035][T24704] ret_from_fork+0x514/0xb70 [ 875.283177][T24704] ret_from_fork_asm+0x1a/0x30 [ 875.288540][T24704] [ 875.288540][T24704] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 875.295825][T24704] fs_reclaim_acquire+0x71/0x100 [ 875.301340][T24704] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 875.307709][T24704] alloc_inode+0xb8/0x1b0 [ 875.312572][T24704] iget_locked+0x131/0x6a0 [ 875.317522][T24704] kernfs_get_inode+0x4f/0x770 [ 875.322835][T24704] kernfs_get_tree+0x5cd/0x980 [ 875.328161][T24704] vfs_get_tree+0x92/0x2a0 [ 875.333108][T24704] do_new_mount+0x319/0xdc0 [ 875.338191][T24704] __se_sys_mount+0x31d/0x420 [ 875.343408][T24704] do_syscall_64+0x166/0x520 [ 875.348568][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.354989][T24704] [ 875.354989][T24704] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 875.360225][T24617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.371719][T24704] down_write+0x96/0x200 [ 875.376534][T24704] kernfs_remove_by_name_ns+0x4e/0x140 [ 875.382569][T24704] device_links_driver_bound+0x4ab/0x1440 [ 875.388918][T24704] driver_bound+0xd8/0x2e0 [ 875.393954][T24704] really_probe+0x774/0xae0 [ 875.399022][T24704] __driver_probe_device+0x1e8/0x360 [ 875.404863][T24704] driver_probe_device+0x4f/0x240 [ 875.410461][T24704] __device_attach_driver+0x270/0x410 [ 875.416396][T24704] bus_for_each_drv+0x258/0x2f0 [ 875.421819][T24704] __device_attach+0x2c4/0x450 [ 875.427138][T24704] device_initial_probe+0xa1/0xd0 [ 875.432727][T24704] bus_probe_device+0x12a/0x220 [ 875.438150][T24704] device_add+0x7d7/0xb80 [ 875.443044][T24704] faux_device_create_with_groups+0x1a5/0x2b0 [ 875.449775][T24704] regulator_dummy_init+0x19/0x40 [ 875.455443][T24704] regulator_init+0xca/0x110 [ 875.460602][T24704] do_one_initcall+0x250/0x870 [ 875.465938][T24704] do_initcall_level+0x10a/0x1a0 [ 875.471441][T24704] do_initcalls+0x59/0xa0 [ 875.476328][T24704] kernel_init_freeable+0x29d/0x3e0 [ 875.482083][T24704] kernel_init+0x22/0x1d0 [ 875.486988][T24704] ret_from_fork+0x514/0xb70 [ 875.492125][T24704] ret_from_fork_asm+0x1a/0x30 [ 875.497447][T24704] [ 875.497447][T24704] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 875.506084][T24704] __lock_acquire+0x164c/0x2de0 [ 875.511493][T24704] lock_acquire+0x115/0x350 [ 875.516544][T24704] down_read+0x4a/0x330 [ 875.521248][T24704] kernfs_remove+0x35/0x80 [ 875.526227][T24704] __kobject_del+0xe0/0x310 [ 875.531366][T24704] kobject_del+0x45/0x60 [ 875.536172][T24704] cleanup_glue_dir+0x1a3/0x220 [ 875.541571][T24704] device_del+0x77d/0x8f0 [ 875.546458][T24704] device_destroy+0xb2/0x1a0 [ 875.551598][T24704] macvtap_device_event+0x226/0x400 [ 875.557502][T24704] notifier_call_chain+0x1a5/0x3d0 [ 875.563171][T24704] unregister_netdevice_many_notify+0x17f9/0x2140 [ 875.570171][T24704] rtnl_newlink_create+0x664/0x7b0 [ 875.575895][T24704] rtnl_newlink+0x166d/0x1c30 [ 875.581123][T24704] rtnetlink_rcv_msg+0x802/0xc00 [ 875.586604][T24704] netlink_rcv_skb+0x226/0x4a0 [ 875.591925][T24704] netlink_unicast+0x7bd/0x940 [ 875.597245][T24704] netlink_sendmsg+0x813/0xb40 [ 875.602562][T24704] sock_sendmsg_nosec+0x13a/0x180 [ 875.608161][T24704] ____sys_sendmsg+0x54e/0x850 [ 875.613472][T24704] ___sys_sendmsg+0x2a5/0x360 [ 875.618700][T24704] __x64_sys_sendmsg+0x1b1/0x290 [ 875.624189][T24704] do_syscall_64+0x166/0x520 [ 875.629328][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.635762][T24704] [ 875.635762][T24704] other info that might help us debug this: [ 875.635762][T24704] [ 875.646007][T24704] Chain exists of: [ 875.646007][T24704] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 875.646007][T24704] [ 875.659496][T24704] Possible unsafe locking scenario: [ 875.659496][T24704] [ 875.667002][T24704] CPU0 CPU1 [ 875.672389][T24704] ---- ---- [ 875.677812][T24704] lock(gdp_mutex); [ 875.681733][T24704] lock(cpuhp_state-up); [ 875.688608][T24704] lock(gdp_mutex); [ 875.695042][T24704] rlock(&root->kernfs_supers_rwsem); [ 875.700521][T24704] [ 875.700521][T24704] *** DEADLOCK *** [ 875.700521][T24704] [ 875.708725][T24704] locks held by syz.4.4377/24704: 3, last CPU#0: [ 875.715135][T24704] #0: ffffffff907a6fd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 875.724664][T24704] #1: ffffffff902524a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 875.733745][T24704] #2: ffffffff8f801600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 875.742919][T24704] [ 875.742919][T24704] stack backtrace: [ 875.748845][T24704] CPU: 0 UID: 0 PID: 24704 Comm: syz.4.4377 Not tainted syzkaller #0 PREEMPT(full) [ 875.758233][T24704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.768331][T24704] Call Trace: [ 875.771646][T24704] [ 875.774697][T24704] dump_stack_lvl+0xe8/0x150 [ 875.779336][T24704] print_circular_bug+0x2e2/0x300 [ 875.784404][T24704] check_noncircular+0x12f/0x150 [ 875.789375][T24704] __lock_acquire+0x164c/0x2de0 [ 875.794264][T24704] lock_acquire+0x115/0x350 [ 875.798791][T24704] ? kernfs_remove+0x35/0x80 [ 875.803412][T24704] down_read+0x4a/0x330 [ 875.807596][T24704] ? kernfs_remove+0x35/0x80 [ 875.812220][T24704] kernfs_remove+0x35/0x80 [ 875.816664][T24704] __kobject_del+0xe0/0x310 [ 875.821199][T24704] kobject_del+0x45/0x60 [ 875.825479][T24704] cleanup_glue_dir+0x1a3/0x220 [ 875.830456][T24704] device_del+0x77d/0x8f0 [ 875.834809][T24704] ? __pfx_device_del+0x10/0x10 [ 875.839682][T24704] ? kobject_put+0x50f/0x550 [ 875.844302][T24704] device_destroy+0xb2/0x1a0 [ 875.848953][T24704] ? __pfx_device_destroy+0x10/0x10 [ 875.854181][T24704] ? kernfs_remove_by_name_ns+0x101/0x140 [ 875.859929][T24704] macvtap_device_event+0x226/0x400 [ 875.865155][T24704] ? __pfx_ipvlan_device_event+0x10/0x10 [ 875.870887][T24704] ? __pfx_macvtap_device_event+0x10/0x10 [ 875.876638][T24704] notifier_call_chain+0x1a5/0x3d0 [ 875.881790][T24704] unregister_netdevice_many_notify+0x17f9/0x2140 [ 875.888248][T24704] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 875.895046][T24704] ? netdev_upper_dev_unlink+0x99/0xe0 [ 875.900551][T24704] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 875.906560][T24704] ? macvlan_dellink+0x3e4/0x470 [ 875.911541][T24704] rtnl_newlink_create+0x664/0x7b0 [ 875.916688][T24704] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 875.922359][T24704] ? __pfx___mutex_lock+0x10/0x10 [ 875.927416][T24704] ? ns_capable+0x89/0xe0 [ 875.931781][T24704] rtnl_newlink+0x166d/0x1c30 [ 875.936488][T24704] ? __pfx_rtnl_newlink+0x10/0x10 [ 875.941535][T24704] ? do_syscall_64+0x166/0x520 [ 875.946326][T24704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.952438][T24704] ? kasan_quarantine_put+0xbb/0x1f0 [ 875.957747][T24704] ? lockdep_hardirqs_on+0x7b/0x110 [ 875.962972][T24704] ? nlmon_xmit+0xb0/0x100 [ 875.967472][T24704] ? kmem_cache_free+0x182/0x650 [ 875.972459][T24704] ? __lock_acquire+0x747/0x2de0 [ 875.977435][T24704] ? __local_bh_enable_ip+0xd6/0x140 [ 875.982743][T24704] ? lockdep_hardirqs_on+0x7b/0x110 [ 875.987963][T24704] ? __dev_queue_xmit+0x29b/0x3820 [ 875.993149][T24704] ? __local_bh_enable_ip+0xd6/0x140 [ 875.998467][T24704] ? __dev_queue_xmit+0x29b/0x3820 [ 876.003607][T24704] ? lock_acquire+0x115/0x350 [ 876.008307][T24704] ? __pfx_rtnl_newlink+0x10/0x10 [ 876.013365][T24704] rtnetlink_rcv_msg+0x802/0xc00 [ 876.018328][T24704] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 876.023471][T24704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 876.028958][T24704] ? ref_tracker_free+0x689/0x830 [ 876.034013][T24704] ? __pfx_ref_tracker_free+0x10/0x10 [ 876.039411][T24704] netlink_rcv_skb+0x226/0x4a0 [ 876.044203][T24704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 876.049684][T24704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 876.055007][T24704] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.060254][T24704] ? netlink_deliver_tap+0x2e/0x1b0 [ 876.065485][T24704] netlink_unicast+0x7bd/0x940 [ 876.070452][T24704] netlink_sendmsg+0x813/0xb40 [ 876.075272][T24704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.080602][T24704] ? apparmor_socket_sendmsg+0x98/0x360 [ 876.086260][T24704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.091579][T24704] sock_sendmsg_nosec+0x13a/0x180 [ 876.096645][T24704] ____sys_sendmsg+0x54e/0x850 [ 876.101446][T24704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.106768][T24704] ? import_iovec+0x73/0xa0 [ 876.111302][T24704] ___sys_sendmsg+0x2a5/0x360 [ 876.116014][T24704] ? __lock_acquire+0x747/0x2de0 [ 876.120972][T24704] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.126212][T24704] ? futex_wait+0x2a2/0x390 [ 876.130771][T24704] ? __fget_files+0x2a/0x420 [ 876.135390][T24704] ? __fget_files+0x3a2/0x420 [ 876.140100][T24704] __x64_sys_sendmsg+0x1b1/0x290 [ 876.145065][T24704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.150577][T24704] do_syscall_64+0x166/0x520 [ 876.155279][T24704] ? trace_irq_disable+0x3b/0x140 [ 876.160342][T24704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.166452][T24704] ? clear_bhb_loop+0x70/0xc0 [ 876.171243][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.177159][T24704] RIP: 0033:0x7f440839e159 [ 876.181597][T24704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.201229][T24704] RSP: 002b:00007f4409274028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.209683][T24704] RAX: ffffffffffffffda RBX: 00007f4408626090 RCX: 00007f440839e159 [ 876.217682][T24704] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000008 [ 876.225679][T24704] RBP: 00007f440843503b R08: 0000000000000000 R09: 0000000000000000 [ 876.233681][T24704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.241687][T24704] R13: 00007f4408626128 R14: 00007f4408626090 R15: 00007fffd7b13268 [ 876.249691][T24704] [ 876.308839][T24293] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht' [ 876.333648][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 876.360376][T11471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.360399][T11471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.379559][T24293] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht' [ 876.425525][T18881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.425551][T18881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.441861][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 876.552010][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 876.661395][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 876.771377][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 876.881323][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 876.991374][T18881] bond2: (slave bridge2): failed to get link speed/duplex [ 877.101346][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 877.211477][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 879.431520][T11472] net_ratelimit: 19 callbacks suppressed [ 879.431538][T11472] bond2: (slave bridge2): failed to get link speed/duplex [ 879.541318][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 879.651365][ T1010] bond2: (slave bridge2): failed to get link speed/duplex [ 879.761369][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 879.871564][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 879.981485][T11471] bond2: (slave bridge2): failed to get link speed/duplex [ 880.091368][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 880.201349][T11473] bond2: (slave bridge2): failed to get link speed/duplex [ 880.312178][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 880.431489][ T9948] bond2: (slave bridge2): failed to get link speed/duplex [ 884.511674][T11472] net_ratelimit: 36 callbacks suppressed [ 884.511700][T11472] bond2: (slave bridge2): failed to get link speed/duplex