last executing test programs: 7m1.77327398s ago: executing program 3 (id=1985): r0 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x2000) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m1.657006711s ago: executing program 3 (id=1986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x6) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 7m1.512776325s ago: executing program 3 (id=1989): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf25030000000c00050027000000000000000800010000000000640007800c00018008000100", @ANYRES32=r5, @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRESDEC, @ANYRES32, @ANYBLOB="0c00018008000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xfffffffffffffdf6, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x1a0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc890) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000010140100"/24], 0x18}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 7m1.228174107s ago: executing program 3 (id=1995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}]}}]}, 0x3c}}, 0x24000041) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20204441}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x114d58e0}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x200}]}, 0x84}, 0x1, 0x0, 0x0, 0x4042040}, 0x20048080) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'vlan1\x00', 0x9}) 7m1.036441521s ago: executing program 3 (id=1996): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1244, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1230, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff00}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\'-%-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x317b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "78774d075fe0dd9c761390daad6cfd5273afd0e6aae07a443024822ab9fb97be13a846bbb7f92bdf6a9613ff6a9317df4f1ad58ff5a1d63348dbfa51"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3b}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']]^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[&!\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xb0%\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0x840}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 7m0.71300266s ago: executing program 3 (id=1998): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000000700000095000000000000001147be79aa1fd004b83d76a386b51b5e46f5239474bb1086c4061732f4d670a31fcb5326c1b3e92a9aafbb73be5d6a33b66f8e7cb4a4d4eb466f2572152d9658b4e47902444c79960a83411d500d1639e463749a6d4bc4a6da2eba57119ac12278cc70f419bb7e70d7d237ad5c8d3f86e6ee6663f945efc372baab45b184d8a0dd1f9648194a65fa07d1ddaa4b3e39eb00"/198], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x4000100) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m0.505037811s ago: executing program 32 (id=1998): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000000700000095000000000000001147be79aa1fd004b83d76a386b51b5e46f5239474bb1086c4061732f4d670a31fcb5326c1b3e92a9aafbb73be5d6a33b66f8e7cb4a4d4eb466f2572152d9658b4e47902444c79960a83411d500d1639e463749a6d4bc4a6da2eba57119ac12278cc70f419bb7e70d7d237ad5c8d3f86e6ee6663f945efc372baab45b184d8a0dd1f9648194a65fa07d1ddaa4b3e39eb00"/198], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x4000100) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.824497862s ago: executing program 2 (id=5920): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0xd8a}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x2, 0xffffffff, 0x688a}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r1, 0x1, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000012c0)={r4, &(0x7f0000000280)="cee23aff6a4bacfd3006f1357c121a82512b3cf7c551b22b497d043bde7d9d2513f8f0e9d0e13fd925056890c0281ca2166ee05efb94a84462b0f98bdeeade6d398a6975e1a93fec13eda0a816a9e84542386510d31391402b558ef5d32329b62a7a450f306aa9748a1e184516fbf3b9b35029bada96d89f6c584ff885d77c5808a795b0baa52625696c338c860494decf4bf56c81d14d0ab0cb769300f54f1c69ee548a8b991da8cfe334f32318d22de84be2cd39446fef382f04c21716912cfae06bbbcea430c23b6a57f7d1dc077bd3faa82d24b95cb08e166fb594f700466ec0145d847cd4e0a728d33ec3fe7aaf4948aca24ce0c3322635b3d560283b48350d3ec086dd913e252317574098285445fb43425d4104c638b34912f8bab7390438f7b7a3476a5d7a84c522c4ca01a85535cce8a2a5092a95f3148e4d9360d91844fd83001d3ebcb1b963324362144372193f32b2d61d8e28f6523e97f8a91a7aef1ecf09daae78a8a75d000c388f326c9d0472a55d48d3502c18605e61ef85e4476371af4c515061e1a0023a1ff1731468eaf93080d31de4f8dde3c83cab77f43348364203eb44b7428447a077f7f5b5b3c79dff85b3c1f9d3a6bdacad923a653ac4d3ac7628b00da95b6cd1d226c41de43d5eb1cb53fb804333c38d375898793c3cdf9d5e8bd3fdf998b1991f462e45e98c19bfa3dcf0a7e531c21882ac9903c222f2189a0c67816bb4c4cf994f61de1892f29922f8b6f335248c17c9ada42524c77cfcc1225c0d5bccfb463c85586d0ea5c402e5409f25d42b94f1dedf85c748ffb2708b943ff72027e681d5170169cea4740dcc5307802659bfee3028e225ad18a97e5ed34e941a2cce51b27afa46b6e7e321bc06f8f6ade33b7eaa5ea22a5c86d553e5366dd8b9bcd8897b0306f3c4a65f065890b3005a6c7eec188d2bfe7eddcca2706ce60b84a0f38cb182eeb05a441c4ad443169a4537586bc92d226ffbc2f708a8fa3edf1218bdb89f67458a8ef49e6a851694095ca1e1434d2a2e6bb295f804d7f0bd67b3d0bac7221527e46ea8beb1eb693b9e738c98a7e93bb01d9a7317b2dc4cabd3dcd855dbebb095e4e6905c36878a4496862dccdb61c649414ad46197cae534214a2df5681f45809ecd51eb365971b0737d1160f34783f319826c2a40d7c6e7c7f812ee936c8d29cd74ea4c9334bdbb75abf5880ebc1e4c0fa78f2b519f0a792b977d9a5716846ddd69ef75eb82250b02de2c248908ec7f333d6e8b2b8b19807cbbcfa7067f52b3d8f644297a5d0fcb61ec47096ce9551c4af047a67c4415416d648cafe1005c00443db190a2bffe95dd5ec338eb35ccfddece2a4df6f84decbef7464390fafb9abf746e6854507b4a6af872771ea8254b8deeffa4eabbd67775aa5edc0134c13f9655acc578d7f5d4b5449699f773990a5b2da5ebc19c30207d22bb2d0f9fdef164e438739d669e467e7a9985026e2515cfa9b93dd35e3897edf2f2fe9e0125e42d7fa8862cebc56578550eba2dc1b8bebcdbadee4ac12c6eaa0b2faa803975c9dda59b2bce1cc76dccf8bb2b713f0591ecf06603e79f9c3f262a6fc5215d1efd65a19a284d4a55feae4f23956405bba991a5e5ec370ddf3367ceda72610e61598ed80270706b2a3e54a750c186e6041afbd8a9b5b50e9c07ec89d2c8df83ebbfebef655573d04b9568c6237be009e381ad5ce72fef760e93af092c14ea663012b4c6b24b09fcf14399a133c5edef9c26f64649c24d8abd540326d1fbf322af190f334d06fd7b6fd7d2e2284bf48f60bfbd74224e35e5be00595538234a79624a659f49f0bf05b3ca66b47a26f63dc14ded27dc401b97a47d589737522569b4b0a3c34824c2e9f341f48fd4354cc8309096c377ad5d1ca82d19480fd6dd43e99c2d65995edab4fccbe236a4d694bcea936450bd4e081bc89a49a54e971721d4ea777d4c9d8a71e433c554f64a26e8a75f473a0232f3327e7748dc458cb4a9865a77e3901b45a9be52b0782fcdb9e4027bdbfa0343483753f2376796e32d1310d28ee6243ce973c911b2e211e185fdd0fa677a1bb6f47e49762de6617b926477c1ea9dd2d2b214821071dc2eb61dd7e664502251ded6227d6dff69493a4440a2751d3b70c31f5c561e414b303de5483efa0a57daca4a12bddc3b5f92094c5090a4fd6e04c40e337a9c5e1d8e2458167640198fed3fe90cf171c2adf80b20f2d781c25b8f309097e10e76ca0f55fb4ab5419ea36833df996169eb526bd66a0d07c7e64288ef8553f15d72afe10649764e44c9d3505bfb0ad57aee9e64b47672ae4e779cc35ab4a6614714e32b50053d37a39331ba20fcc209d226b853954c4cccd5dff0c12e1db898f7cc5797724d6c68423524d2dbdc7218685edf23af072faddf217725d1600fa520ebf293082333a5fcc2f5e90bdc86b3f03b22a8333fa3fb369b01a368004a7cf8c5517cc5804d0e0866d0890ae09147e9de4b4f8fc57f30743d5292c24a0161d2154f2acf21495a9e4dc6f125d2bb6443a8141310c1d0072aea6fad4d9a96a825a35fdb72132fd23e01e49ef33b1cc729a68b32788a89292a07ccdaf63cda4f8b13f572e6fabd19cec70b1ddcbb4eece53547c60278aa64c575eba965ae4f70334b149e6065cacdc53b0891bed444534ab3aad22c80abc1b3e413c30f60afd43c2f69c45af238c09b7554dddff15824b9de4c3650bab9edda67db557d09f004fd61faeda05e7cdd6298569d1f4bc6e6b13fdb2d74b6370996a8cf83ac90d93dfa9f03b6b86bf1c21130dec52ded28aaefc63989ab2af71d1c790e92747dc1b97945326ccf1be60342719e34979b7fc1c5d40bdd306f06a786ecf7ebcfb39ee4f7620e190873c7fa0c6f4096daf99df39839ac3358e3311be8847103db999ccd1625baf5990e92ca6ea50525a1cbe30dd50b04da6dd78af1bddbd3b75008bd2c3906d4414f5071ed794d58aab119b9484ff45d30b7269d33360a37cf3d39126d2d316685ab4ab7a56e1c50b6f4786b2bab93de1eeab1f66eca3440cd9ff24fe0b26741ce2b42f7ecda42d153ac1b522196e92774e54dcab983f704856e77d3669a84eea2319a70fb8b7ed00f35166b59f050cdd058ad6644c3a5214622723c24586021e277ea047bd26af82a7fb665542b9803b82c2a193f3aaef43979d44e6fbfd2f18a8fe8619bb14d332e8f368693df3198c8b91be8bce23232cc525033768e1c6b7d2b9dd849ddabbed3c841cb0743d786bd213821a71c839412f6ea9ebddf8bcdb4568b882dddde6e7de0614c8c0938ceed343c09c86670496e26ec47dcd32787ca5bbbe593578d65dd97e24fa70b85556306cf80e62bccdf1af4b37a8b5e9f1f2d5100813b81fdfb5da1f89d5515414576467c52e18fddc99d508a2090ce0b6e50321a84346faed23408bcb978863d99ba59b56c22f3a61dc88f876bdd348c5c0e6fa36699808e14e040bc64b99ce24bf01adcfe3571772736bd84869ea405ef2e36227b2b7fcc36df1b66c686d803334d6223abb860e62d088b2f8ba183945d5eaa64ebb5b48e8cd42bd1f8084e0b08414448d53b038ca3b1387f3a84f5da1f382636f84a5438cf52171836e4b66a4adf3463a66ff2ac2f6a63a27fc6a6478d3e2913fb32d8fb49c2ff1f948d83181478de4ea9a5a7ec70e2faa11ac5d13ba59d091b3f4b3a04a4e009a6ad0cb0de04b83962636c7f4e79349036c7470a199e5ed7ceca8d556b62ba1492a713c50ad27810831b6ac0f300d7f73ec6b47bcf37de85d846c08694036b693497f69cd3e5db27bc0b420f4366223cc6e9f27e5b7fe90acba3e56f4c50cfe149cfbbd291bd13340cd79da3b85e5219532a91eb0267f63bd1816d52c12d1cae28b032318223dadf2c91455fc09ad6d16a4778ee1ad25f90590f86fb3239da24dd50228aab0943ab751e6eacb914fa4cff38938c3cad3adcb44361b9d49bd8c7a3d82bd5c2ab77e68d7abcf0757ff2c4543d8f45d74cc1ca39de79d9ead7af20c8f6aa5ea9ffba69435335e1cd34c2964e8e546074a2a36140ea5af2db1a00198134faf66a045eb8f1d7227e6dd1f6303d1d3c291c5c305612ab40173d2242765c3d0a1e90d7c096f876e610ea7e59a5b34f869e93bf290499b1f8482e70e03843cacfed49bd6c1b8ea1ac30d0032a57b1116a1d249d41970d5063d07421fe048c6df477d4be86b88bb1ceb24f6745825cd42d5af2bf0e13b547589a9f16004bb6a840d33079ae728db3104a1b5f7ea6cfb97f3da0d356f4636101f432f4a3928be2cdb688d52b14fc7c032c18fbc8618fba85aee7b978e6120e9ffdc19954b7b0b8d476d72dc816dbeab5d9e10a595c4e427d30c4f0e19a61b9fa8827549a588ada15927825afe476f13f5f07f262deab6a7a3fbc07aa1f54f807c46da25f948f56dd6069b6e7ec377bede7958c537f54062ad415a32a95b13c2b5a4dbfe90f6721d3a673fc9093fc819ded46a785e5f522e451accf01d3912a4fe15aac7e783a41d39fb20c9e78ad3e58e5b9116a8253099c0b92e6c7875adadcb1d5b00dd005bdc14922ddd7a3fa79cfb249a9b235ccd4770e163295558218073a14097bd7296f9a372d6ad0912f1f074b9b760d3e116b230f0b0efe87b94e3aa54e87c8b33ec65552237bfa1200a671445a5431697b7d61293671dff7b7e2eb4f7de7dc11304b8d176bfaee84bdafb2575b13b3a7e242a3d7ddce699998483c7607fdb8810d807400549ed00e2ba619ba23fe26049f03c92f64d8b609f4fced7298e2173f2ecdf52648ffb31f3dc3a5c1d868ee5ecd23e31a0da3929c309835c1836d54f7587fdbec7f8d8ab80f6d2da1d940833d4cf667abf234c7c972765b88c4f5c84edca0818d5166394426c70b1c151d43cc078ea14842566dde62083134ffb92aecb64d000610f19fb85e7c594982cce14aed41e7dea55333e94f3b910dd48c1f0e72d6f208e6d6c88dcc6929f1b86eaf2f27af0d2ef7576e6942286835bb7caf5009e1586dcd77298d28667f0aa878df79c4a9e47af0641308636376e6665859bed670f535e7bc2a6ba886943ab6c26a39e65ea67fd67a0da3cb164a516e5c5e6a502216d4508b41f64ca89358d586a4883a8cbe14d3aa9334702d9b4bafc691b1e76db9510490ecb385f729056d6143a6fab37cdcdfc0e6c52eddc0665a2d1f9e17a299ba47d6ba6d86e57117ccdccaa239d5afa0dd6127eb710af554f673980e186288e0d1a1193ebbb2d6637b27d374b857df3d95fb858d3d2e8c79be75b1d223e4ee0afe2942a45a50efc7c153397ef2e02216a93b8650f58ad7a7086bdc486cc1e75bda36e7306bed28d7b55972143056289fd7e7aa5ab81b4a839d37e6e970fb4fc03a95cf1ca89b0d214726fe025aa5edea5394fe8468041854bbb548e53786f20657c7070d823215bf8f188e25924d7f0b677d12ad84afc0a944329993a88196d4e9a60c3dc3d361e5c87b9b70d5743221e24e12fb45864ee1df9e39e24e90dfe190cebc93dae172f59fe12f0d2f4896efc2e487a4957047a6ed4a7374f288cbe8d6ce45a475e0351c790dd501e1bb797789b07052b5c25b7914855ed823aed6033fae7053928ac519531c783811e191edb887aa0d3aa8246e4592670241ad7d283c491bc351e2ef65e1add47ff506fefcae91c6723d8f127335154a91fececda1a333f396bd222cb1e78ca8283fd36cda90a2005aa6c775edcd7da74eb4b1e47905102bd122c43860a0e004ed7711439116a8733124dacf0d", &(0x7f0000001280)=@tcp=r1, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001300)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001340), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000001400)={0xfffffffffffffffd, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000001440)=0x1000, 0x4) recvmsg(r2, &(0x7f00000019c0)={&(0x7f0000001480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/100, 0x64}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000001700)=""/227, 0xe3}, {&(0x7f0000001800)=""/45, 0x2d}], 0x5, &(0x7f00000018c0)=""/228, 0xe4}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a40)={0x0, @dev, @loopback}, &(0x7f0000001a80)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001b80)={'syztnl2\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x1000, {{0x1c, 0x4, 0x2, 0x30, 0x70, 0x66, 0x0, 0xfd, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0xb, 0x87, [@private=0xa010102, @rand_addr=0x64010101]}, @cipso={0x86, 0xd, 0x1, [{0x0, 0x7, "bc63aed8dc"}]}, @timestamp={0x44, 0x2c, 0xd1, 0x0, 0x1, [0x5, 0x0, 0xd8bd, 0x7, 0x8000, 0x2, 0x80, 0x909, 0x9, 0x5]}, @noop, @lsrr={0x83, 0x7, 0x98, [@rand_addr=0x64010101]}, @generic={0x44, 0xe, "eb0d77093c9e2a3d785eac88"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001bc0)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001c00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001d80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xf0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8080) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001dc0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001e00)={0x0, 0x401}, &(0x7f0000001e40)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001e80)={r10, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x4, 0x0, 0xd549, 0x42, 0x0, 0x8}, 0x9c) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x48800) pwritev(r4, &(0x7f00000027c0)=[{&(0x7f0000002080)="604a4df16a8bfd5b7f007fa6764d872913cea160678c6adceedbc9812ff0fe9858d5c7247aa505cc2d4d6fe6ce43f77c0b901ecb165fb36ac24333", 0x3b}, {&(0x7f00000020c0)="dfa02f105106d4a1526988f2f6bdc9ca5ef25934c2f10ab473094ba1cb10fb2628407771dd061527ff4e55cbd486e0cdd7154780e4e507afbf55a46479d5ffd27db692f61588d8cb3ea23f21b6060b9bff2aa3a6bd5e84f3f9a3166f627ce4d22ca7df13cf6824c0c52d2296c7ba1f0d390e6e0330c82bc339ed3411d5f1c781737e97a5d3ee29727002", 0x8a}, {&(0x7f0000002180)="ace09c98395da794893fb25346099d5c75a927d11030cb579aaefa6ed0ca4451fca3019cc9adbaffa33b4812989b5f3ed7f4619f4b4177f4474fae79a6850abf8a", 0x41}, {&(0x7f0000002200)="ebf95532ac72a8de9b3b44da2b55844ae6a1e882d57166e4255b019f857cedce588bef556c744c7ff5cec2871607bedbebb5fba75400e92ed7a4c7b50ae14fb9ec3c722069e57c32ec1c6429a68d463a0fdf4dd528a5cc3e1ce75c4d3f6a6072db4b6f28f1bcf2085da91cf56cacb3aa95d148c3c3cce7136e01d9af5910b12e2af384418be041ef1c0ead07d13ed9b5cf038bcfa3352b5ae1106ef79d97ac4061e7bbeb7e09c58c5d3fd656dea5e071b9cfc778495be8d4e3e6e34f5159b39375572a56be3739ab03a40a3b30", 0xcd}, {&(0x7f0000002300)="54e0273e3fdfe85b30b2287c17c436503b7d85d90fc12b9a83329981cc72828e1403de9c691ea11c363484b5d592d87ec9c97e2171662a3bbda7ad3074ea48153f6c7a9d94755aa3f32d3e7f0ce6f691ef82d3b4b10ecd37dc2de5b0418475d7973424e601408ba383bbfe1b19262bdb1a7af335b6cdf0700db006888c8f8f8a193689638bf4e2d8b1ec9b0aa0f415704dde81ad3cb50fa92cf8b0de7c2f68f8cbb01394a296c2be36ab1902c3b0a330b625ef13da227f51d6b134e4a0e3f0525e3a458a152c32ab770e046bd09b9ccc0f03", 0xd2}, {&(0x7f0000002400)="57a834a583db7ef3c4c0ecb7d3c4c100a50914e229145d37ab7cf6b93ab4ad7ff81a3d794860b84e23d76a256b6db22e8976dceb245a1046ccd36976fa9e86c232d98c72a014a461eaf0dd304f4cedfdd08659bc1afa53a0daab91fd1734a6c72c588e50470a757d570656166e9d6d4be3d62d7ad7e95a1011838272e60004dd46c9a1ad9189b42834b806c2bbd96d62ac7c9d01217fe15342203f845134c8214a52233ee3f9d50f7bc5761d926e3a85654697f6176f90bfd35d7b846f6935d633d37e13f6c7c660253efb113661561fa39935042e97365a6afe", 0xda}, {&(0x7f0000002500)="068008ef16b78cf9322f09828c8fe5b1cd4414c45157f69d673ec5f09cdd8ed15baf6f925e1ec7db38abf817d6acac5dd9ef22a695c51c02d01be953379c3827fcb67ef2ae66befe1e8009ea5612c701fe7779670c883e52f7b9c90052015da9adf892707892eb982b2c4f2081a36d01ca41bbee8cba9ce098b23c0e2a52c4eb3acbf7c35de4999371d9f8814b6561c48f7d01b0013b7534965bcf30ea7bae40c55ba4848fd9d28412192e4fe4d8629a253fe3c6a2f953d50da178", 0xbb}, {&(0x7f00000025c0)="834794e92e8e4600d09aa24c53d6d1344363ed9de6c2668958c398cf68e7f98e409cb3e0a0b0a1033ea347e47b08e89de7fe0cfdab31d7c6ab5276d3ad56b62e7ee5eb1265ecdb7662eadfd8bad04195f6a8a107c1939299738a144c56345ea609d9e7841104345e07fc26f3ce557bb6131834e6a3526a100b63e6d89f0d87248b2d0b16a4324fc2bdcde04d4a524c024d4cbb9e4d40b1e512d700e131ac1b0c38b715d99af8b8e2397336979cba53b13ca334c225c51bf0a1ef04fbc7eced91a7337ea4986423323d785f8b76fdfae22589ad3b7100d73f0eadf0a884757805a016720f751ced7a83d5ece57fa69b10e71cf3", 0xf3}, {&(0x7f00000026c0)="617afe2d9559e501b85ad30020e772bc52149a687a6f8c693cb442", 0x1b}, {&(0x7f0000002700)="bab5e8031bcaee4326ff68ce4c770ab5ca3e51b7d0623915276e3e10fddd09fec377dd1bda28fe57f6fe8a5b83e802ea4374d2845735079e08655c79ea57524dbfe18adc98e1cb331bda0fc6e62a70c25113b7d17c6c6023c71bab7b3978136cea579c2a75778de5c62cd0ff257c4e0a1976d07e07d32a46fdde09995bec842aba3e6754f155033bb74914d0bd53cdc48e", 0x91}], 0xa, 0x5, 0x7) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002880)={0x0, 0x4, 0xab, 0x6e}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8880) recvmmsg(r2, &(0x7f0000002c80)=[{{&(0x7f00000029c0)=@hci, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/154, 0x9a}, {&(0x7f0000002b00)=""/140, 0x8c}], 0x2, &(0x7f0000002c00)=""/114, 0x72}, 0x8}], 0x1, 0x100, &(0x7f0000002cc0)={0x77359400}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002d40)={0x4, &(0x7f0000002d00)=[{0xcf, 0xe7, 0x2, 0x9}, {0xf1, 0xff, 0x8, 0x9}, {0x846, 0x4, 0x7, 0xffffc798}, {0xffff, 0x0, 0xbc, 0xf9}]}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002d80)={0x3, 0x6, 0x204, 0x10, 0x3, 0x5, 0x1, 0xffffffff, r10}, &(0x7f0000002dc0)=0x20) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000002e00)={@local, @empty}) 18.663969339s ago: executing program 2 (id=5922): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)}], 0x4, &(0x7f0000000340)=""/4096, 0x1000}, 0x2100) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000001380)={'sit0\x00', 0x0, 0x8000, 0x700, 0x8, 0x1, {{0x17, 0x4, 0x0, 0x26, 0x5c, 0x67, 0x0, 0xe, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@rr={0x7, 0xf, 0x5c, [@local, @rand_addr=0x64010101, @private=0xa010101]}, @rr={0x7, 0x13, 0x74, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0xc, [{@multicast1, 0x3513}]}, @ssrr={0x89, 0x17, 0x89, [@remote, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, r3}) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 18.602047072s ago: executing program 2 (id=5923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010ed000000000000008e590000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00090003000000ff03000008001b0000000000"], 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x244, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x100000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9de}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xa}}]}, 0x244}}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "00dacb00000200"}, 0x28) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40) 18.468696946s ago: executing program 2 (id=5927): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x80000000) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @private2, 0x6}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f0000000480)={0x3, 0x18, [0xfffffffffffffffa, 0x1, 0xe, 0x6], &(0x7f0000000400)=[0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180093ecdb0003000000000000000000000001000300005fb1412407ee46b555e0dba08f56d3c99497a5eed613aab500d3f7d9a103895d14632c412b0fe8e2872b66524b5310227eb7c039e66f4d6d195934b1491c1f5bf88aed9e5d5aeceee2339b50f3f52ddd7127bb69f4c801033f0bed5aa4347f9641c0cc6efe1cc6c93ba68dfb91396c5a6bc09b0beb1de6a7250a245efbeca4b97de408985c31e74ccb"], 0x18}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0xb4, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@nested={0x82, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e507b5292958158c869ba94bde249b83b1efc1cd3328ebf32d1f1dbe7680a7b3c529af0c870c0bb9648b60bfc81de02e599f6d4aa037c6bd68d903e2845fbd7"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r1, @ANYRESOCT=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 18.171785034s ago: executing program 2 (id=5933): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) 13.493576758s ago: executing program 0 (id=5984): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) getsockname(r0, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f00000000c0)=0x80) 11.911135717s ago: executing program 0 (id=5992): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000004000000040000000000000903000000000000000100000d0000000003000000010000000000000000000005000000000000002e2e00"], 0x0, 0x4a}, 0x20) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040081) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x40080) close(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="b800002939223de95f1ddb9a9ee6dece496307065f00"/37, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="02000000020000000400"/28], 0x50) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2a, {0x2, 0x4e20, @multicast2}, 'wlan0\x00'}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'geneve1\x00', @random="c03de485620f"}) 11.855876389s ago: executing program 0 (id=5994): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100000000000005c00000000e5ff0200", @ANYRES32=0x0, @ANYBLOB="000000000439df48200012800b00010067656e65766500001000028005000a000000000004000e00"], 0x40}}, 0x0) 11.72349066s ago: executing program 0 (id=5996): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x4, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'bridge_slave_0\x00', 0x8001}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) 11.653678541s ago: executing program 0 (id=5997): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) getpeername$packet(r1, 0x0, 0x0) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket(0x10, 0x3, 0x0) (async) getpeername$packet(r1, 0x0, 0x0) (async) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) 10.98779909s ago: executing program 2 (id=5935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x22, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}}, 0x20000084) 10.912689234s ago: executing program 0 (id=6002): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) 10.530598474s ago: executing program 33 (id=6002): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) 10.501018844s ago: executing program 34 (id=5935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x22, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}}, 0x20000084) 2.937375568s ago: executing program 4 (id=6062): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140d, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40008) (async) listen(r1, 0x200) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.700668285s ago: executing program 4 (id=6067): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x3) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) close(r5) sendto$inet6(r2, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) 2.16852804s ago: executing program 5 (id=6070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) r1 = socket$inet(0xa, 0x1, 0x6) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 1.278917095s ago: executing program 4 (id=6073): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async, rerun: 32) write(r0, &(0x7f00000000c0)="2a1d04b471253a5663bd3f45cbebc0a54bff483c78cb7f60728d68063dac17ba343fe01aaea9751ace177647d7", 0x2d) (rerun: 32) 1.078517836s ago: executing program 4 (id=6075): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000b40)={0x4, &(0x7f0000000a80)=[{0x1, 0xa0, 0x0, 0xa718}, {0x9fe, 0x0, 0x6, 0xfffffff7}, {0xff, 0xf, 0x7, 0xf3}, {0x7f, 0x85, 0x5, 0xbb2}]}, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00b082", @ANYRES16=r8, @ANYBLOB="01002dbd7000eddbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4050000", @ANYRES16=r6, @ANYBLOB="080127bd00", @ANYRES32=r9, @ANYBLOB="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"], 0x5e4}, 0x1, 0x0, 0x0, 0x8054}, 0x8000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB="acf8b26b877167323766dd306da4f6bf9926d2a95e2be7791aef"], 0x44}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) (async) r12 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3504, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x4853, 0x400000}}) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r14, 0x8b22, &(0x7f0000000040)) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="ec1d0000000000000000340012800b700010757e92c9b9a8e7ac0173ba75bdaa00240002800800070c8b927f00060003001008000008001500700f0d0008000700ac1414bb0800", @ANYRES16=r5], 0x5c}}, 0x40) 959.221889ms ago: executing program 5 (id=6076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x8, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x300, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x20, 0x57, 0x80, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x950}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x34}}, 0x40) 816.283764ms ago: executing program 1 (id=6077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2f030000000000002000128008000100677470004c00028008000100", @ANYRES32=r1, @ANYBLOB="08040400", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000140012800b00010067656e657665000004000280"], 0x34}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x24b, &(0x7f0000000c40)={@remote, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "d5094a", 0x215, 0x6, 0x0, @mcast2, @mcast2, {[@dstopts={0x3c, 0x3c, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xd, 0x101, [0x1, 0x2, 0x4, 0x5, 0x9, 0x80000001]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0xff}}, @generic={0x3, 0x85, "745e1cbab78c0a573f49fadacb598ce84405cb51f6db4ffb3639fe8c6d47a0fde33b0c87a8d70465343594492f5e158ef706a471ce0f90986bdcd7ee832bd7a54e1a349df4723615007a2da4e433e45e2141ac66f0a7264c29fbc71b5e773727294814acb82cac517eb694d5147312d766ed3cd6bba98e7dfbb14b0d1364835358e88f5ef3"}, @jumbo={0xc2, 0x4, 0x200}, @generic={0x5, 0xbf, "9609f6dc57d29a1c1f752d0801f39f450f63440553a49e63ceefc75ffa27cea5cee4cb977d586e761cb75edf6936b14aa460f7c8e3f55d9fe955b501ae9da41faa35ffb6e1441d821a6ea413ccb24e8955562fe16da0f360b2e75d1721f920fb4efd74858acf423d5c6eb128a8b0d20e0f5ac3328392e0312c59c7a4d88516c2aa5f52ded4f3e47af08eb3b33b900fe927774131587eca9df6ef53087731c532de7a1fc59f4e88b73bc9e4e4781529e1e1304d20c5181aa97c77361127415f"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0x5ab, [0x8, 0x3ff, 0x10, 0xe8a4, 0x1, 0x5, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0x791, 0x0, 0x0, 0x6, 0x6, 0x3, 0x7, 0x8, 0x4, 0x4e23, 0x4e22}, 0x0, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r6, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f00000000c0)=0x7b70f9a4, &(0x7f0000000100)=0x4) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r10, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) setsockopt$rose(r8, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@delqdisc={0x284, 0x25, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xb, 0xfff2}, {0xe, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0xfffa, 0x0, 0x0, 0x1, 0xf, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xe, 0x6, 0x9, 0x4981, 0x1, 0xadd, 0x8, 0x1}}, {0x6, 0x2, [0x400]}}]}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x6, 0xf08c, 0xe221, 0x1, 0x3, 0x2, 0x3}}, {0xa, 0x2, [0xbc, 0x5, 0x5]}}, {{0x1c, 0x1, {0x7, 0xe8, 0x1000, 0x3, 0x1, 0x38a1, 0xf490, 0x3}}, {0xa, 0x2, [0xff, 0xffff, 0x3]}}, {{0x1c, 0x1, {0xf, 0x8, 0x3, 0x69, 0x0, 0x8, 0x8001, 0x4}}, {0xc, 0x2, [0x6, 0x80fc, 0x8, 0x200]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xb1, 0xe, 0x0, 0x0, 0x3, 0xffffffff, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x81, 0x8, 0xff, 0x6, 0x0, 0x9, 0xffff, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xbe, 0x79c4, 0x7ff, 0x94]}}, {{0x1c, 0x1, {0x31, 0x4, 0x9, 0x7fff, 0x0, 0x0, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x8, 0x1, 0x9, 0x1, 0x1]}}, {{0x1c, 0x1, {0xef, 0x1, 0x3, 0x5, 0x1, 0xfffffffd, 0x220}}, {0x4}}, {{0x1c, 0x1, {0xff, 0xff, 0x8001, 0x2, 0x1, 0x2, 0x302, 0x6}}, {0x10, 0x2, [0x3, 0xfff9, 0xe33, 0x191, 0x8, 0x8]}}, {{0x1c, 0x1, {0x6, 0x4d, 0x2, 0x1, 0x0, 0x7c75cfa7, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0xc, 0x7, 0x7, 0x1, 0x8, 0x10, 0xa}}, {0x18, 0x2, [0x101, 0x10, 0x40, 0x3, 0x5, 0x10, 0x7, 0x101, 0x5, 0x0]}}, {{0x1c, 0x1, {0x5, 0x8, 0xd, 0x5, 0x0, 0x6, 0xffffffff, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0xe, 0x7, 0x0, 0x2, 0xff, 0xca9, 0x3}}, {0xa, 0x2, [0xffff, 0x7, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff8}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x284}}, 0x0) 754.765431ms ago: executing program 5 (id=6078): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) sendto$inet(r2, &(0x7f0000000180)="ab", 0x1, 0x40448c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x37) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8=r0], 0x24}}, 0x810) 646.900218ms ago: executing program 1 (id=6079): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r4, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) (async) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12060, 0x0) (async) socketpair(0x15, 0x6, 0x6, &(0x7f00000000c0)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async, rerun: 32) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 508.672333ms ago: executing program 4 (id=6080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r3, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/165, 0xa5, 0x1, &(0x7f0000000240)=""/90, 0x5a}, &(0x7f0000000300)=0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060300000000000000000000000000030000000000000016000300686173683a6e65742c706f72742c6e65740000000c00078005001500000000000500050002000000050004000000000013000300686173683a6e65742c69666163650000"], 0x64}}, 0x800) 499.400504ms ago: executing program 5 (id=6081): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 416.649445ms ago: executing program 1 (id=6082): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0a00ffffffaaaaaa00010000060001080006000002aaaa9773b790ac14141959342edd3d6d2b430002"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xf3, "e26e7de3f195011478636df257a20e177716c8ae038a0cb994da251fd8e30e0759a26e7c67620870f5e8e0b0e01b2716524a7c467a1a7fad089f36d157bcc43e22fa5d85eba0a32eef043be099b304447095315bab3441030f70272b635b85cd3c2a29be83535afbe97c98a60a5f1d95e1c25f4ab9e3004a6d3ece3a34f20f3bd08608719ce1300aead750188d79d4d951eb9fd89521624a6f2638470b295f19226a7a5a2a963b67b42f35cb83c4b1d38398ec33070015845b0463d566529797d08f12858a09ec016cd383b966992f2f15f0d85a40ec7aa72032ee4501e9f0b8d25425ce34f214c5f8cc85e2447c35933b8c90"}, &(0x7f0000000300)=0xfb) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8001, 0xe7ff, 0x4, r3}, &(0x7f0000000380)=0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x1f, 0x4) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000000)) 276.413061ms ago: executing program 5 (id=6083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0429bd7000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000080014"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = accept(r3, &(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a00526bd7000fddbdf252100000008000300d1eb1c77ac6b359cef2e4077d62e7227ea7d3970b2931aa2fd7db965a1866a0c519f9de0706e164e8d797cd7c54234a8ea2828fe3ecc43f9d5c33abdfca1535ca4804b9e3beb973524de742345e9dab90ec33d4bd71bb014507d77afc670041e93a6a1d55d27651798e5e0841b05e2c64490a539f7da3d", @ANYRES32=r2, @ANYBLOB="040087000400ec00"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="d9e43b79a69ad635253620cb98c54196c20e6bd8579e3a801bd358343ed4bb0a6270db0edee8d839364c3cad93f51847b56047ae678c1131206389fd8ce8e407afe8cbdaddab08beb0a7e069babc151b53e116467fd1ead114939ffa48529bc47240deeb8d3f6fe0a89b534cbb3001751acce47640dec3fbf178fe22d7a41a322e8afab0fdedf6fa9f4f9df3eec29ed108e9f8fe18958e79ca53563daac972bb271fd675199f1d8c20b95aaa9d1f87a2dd80535c26ef9ce6326a839e18c52ad0bd848fe3d117f2857fa487fc34e04ef4b6cfeadb5263880cc72e1629fba25c485bfe1800a9a8a1304d798627ee623f41d139d223825bc6", @ANYRES16=r4, @ANYRESDEC=r4, @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r7], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20040020) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r10, @ANYRES32=r12, @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x128cc92132355b66}, 0xc, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="02002abd7000fedbdf250b00000008000300", @ANYRES32=r14, @ANYBLOB="66a3437bb3b470a9f8c08539369da48eeca4fc8a559a17a9201f46a0f6a947661522734ec669b3ab1689f6054fdc2c1fb0cc19802391c6a08c758b202f639ab2c6d83138c3a4f7ec5378554b6844ebb90993b519458eadea45674699f1dea3aa08cee3ad8c7a24213d7494caefc8235be451203c7e159870f6dd70bc83cd1247ae9513a27f5a16e1fe23604bb82696ecd768a2a0f62ba496e45c36b438cd0ca6f1ab678c1f08629729f85e7897d70ceee1afda94f06d7a51a1938973f56853a8990ff0c46722b7e6f4cc12444b1c4fc0e2d2e326cbda5963700e976b3c9dfd71a902e21cf88417c0f5b65e"], 0x1c}, 0x1, 0x0, 0x0, 0x24044851}, 0x40014) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 267.912017ms ago: executing program 1 (id=6084): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x1d145aa8ea516c49}, 0x38) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = socket$pppl2tp(0x18, 0x1, 0x1) shutdown(r8, 0x1) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000000100)=0x2) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) 169.212085ms ago: executing program 4 (id=6085): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000100000000005d9812008051000f01"}}}]}, 0x48}}, 0xc014) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d720000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe0537496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7c09d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c", 0x118) r5 = accept$alg(r0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r6}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$alg(r5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x7e}], 0x18}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000000c0), 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x6, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x1e, &(0x7f0000001200)=ANY=[], 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r11, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc535", 0x38}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b03285189", 0x11}], 0x4}], 0x1, 0x840) recvmsg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000000240)=""/156, 0x9c}], 0x2}, 0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000082d54eebccd29ad5056271e45c0000000000000071100c000000000094fc090800000000ed694813427b0df03aa22c5eaf21c9b061be0b1531322ccffe0e394173544c1231a58013b00f9c789c4aab6e6295de65e91ac55f8a6a652e22fbdbc18d4a4cec0f6c0ccaeafca362e0097211437d139d5ce9ec83fecddfce6d5e095f4605738de5237b55b983411f91fda13514ca98205b8e2f5d47ca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 72.749527ms ago: executing program 1 (id=6086): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f00000002c0)=[{&(0x7f00000000c0)="215d24376d7785e61c538dc91fa568b17d6afc000593a6280accf06c8455e5664e084c47d2644895ed912c8d6cc0e93f210bc67d600579eb237a9d8e920e715f3236b159eadc25e206ddb2c68e4fbb612da5cc553bfdd4ca379bdf0190d5a1e5dce7c4b08265efc0cec1e3cff3e246ff6bb161de1970b0c5e5978b635036ab2be99a0c11aa39e575bbc0b40bab54b86c970efd59e7ecb6f4d7e221b7622cb27bc3"}, {&(0x7f0000000300)="c4d7894f6b33f2bcfd92b04da455e28012434e5d4e94d1d361c2f7a7"}, {&(0x7f00000001c0)="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"}], 0x1000006a}, 0x0) 33.608294ms ago: executing program 5 (id=6087): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @empty}, 'ip6gre0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="e708a25dba33a89bbfb02f879cd0e483b4c2a5e006476dc70dda9099a658e8ef8f437c29a66d30fcd59afaf0ccb507c21118b1b47c091f7d3b769fd5b9fb0ebea352ca210abf409bce1ff80471d71798139b17c2f0178e4221a70317356b0757fd633ac801a022ea9d0d3294b510bd690db4a3c312f84ba702f06e1cdcd349bc", 0x80}, {&(0x7f0000000440)="e05dbe503966d49737fdb49e7847fae71ef85fdfcb487c153285ead1e1b87dbd5c91115e83ce134579ff64ea937e8342bd25065c9f90be99a13e4e", 0x5}, {&(0x7f0000000600)="55d6c4b00fbfe99a5ca29923a7b2f4edd06ea0c70802f131ebf948bb706959956055cd24f48d5f049be26ca5b2668b19ea8bcec9a63df79fee1340b791d4891c526c191ef619596338464e633f4356edecb8e09c5f8de968f4b37729e3f4a46a56a0d63ecba9cecca5e2f8612e661eca7177390f01014bd8cb92cc6ab52e35c6f5365dfd101f226b634e3136b5735a4fe604fc6dd4cc4959fede5e78d086a6dd65b6091900000000000000", 0x2e}, {&(0x7f00000006c0)="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", 0x1ea}, {&(0x7f00000008c0)="989b639904030000000000000047098c78c50b343d93c29ce3e473826ba6d3cbab0582b95007bda87c8f0c7e792a055e0400000000000000f2f936f0225dc983bbd442db95ca1940f372f8c51e9becf8ab52b1eb54c13c1fba3dc4883cfd6ece4f92de85a132ab36757d0cb9fd9c55c596a6705b920ab2402c6f437dc6893f378b497d5d79b0d87e", 0x4c}], 0x5) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x52}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000070a010100000000000000000a0000035400058008000140000000040800014000000002080001400000000908000140000000150800014000000000080001400000005e0800017bdb4000000033080001400000000c080001400000000808000140000088ca"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) 0s ago: executing program 1 (id=6088): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc82, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000002e6ffffffffffffff000018250000", @ANYRES32=r2, @ANYBLOB="00000000fcffffff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x94) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (rerun: 64) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x200000c4) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) kernel console output (not intermixed with test programs): h:syzkaller0> [ 522.536549][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.656568][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.677159][T21142] xt_l2tp: unknown flags: 10 [ 522.836629][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.941562][T21148] ip6erspan0: entered promiscuous mode [ 522.949242][T21148] ip6erspan0: entered allmulticast mode [ 522.960492][T21161] netlink: 'syz.2.4366': attribute type 1 has an invalid length. [ 522.974968][T21161] netlink: 'syz.2.4366': attribute type 4 has an invalid length. [ 522.996162][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.313550][T21174] netlink: 'syz.5.4369': attribute type 23 has an invalid length. [ 523.713402][T21188] __nla_validate_parse: 70 callbacks suppressed [ 523.713422][T21188] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.4372'. [ 523.870550][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 523.887613][T21199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4376'. [ 523.898907][T21199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4376'. [ 523.909616][T21202] netlink: 'syz.5.4378': attribute type 11 has an invalid length. [ 523.939915][T21198] netlink: 'syz.2.4375': attribute type 24 has an invalid length. [ 524.001674][T21209] vlan1: entered allmulticast mode [ 524.012694][T21209] veth0_vlan: entered allmulticast mode [ 524.098787][T21213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4380'. [ 524.154363][T21218] netlink: 'syz.2.4381': attribute type 1 has an invalid length. [ 524.174985][T21218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4381'. [ 524.194795][T21218] nbd: couldn't find device at index 1048576 [ 524.293885][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4383'. [ 524.357129][T21230] netlink: 'syz.2.4385': attribute type 1 has an invalid length. [ 524.508247][T21230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.586105][T21234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4386'. [ 524.638962][T21236] netlink: 'syz.0.4387': attribute type 4 has an invalid length. [ 524.646206][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 524.653272][T21236] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4387'. [ 524.690646][T21236] `: renamed from bond0 (while UP) [ 525.713768][T21302] tipc: Enabling of bearer rejected, failed to enable media [ 525.783512][T21307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.911613][T21320] syzkaller1: entered promiscuous mode [ 525.918054][T21320] syzkaller1: entered allmulticast mode [ 525.927260][T21307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.939646][T21308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.202492][T21328] delete_channel: no stack [ 526.464143][T21346] netlink: 'syz.2.4415': attribute type 11 has an invalid length. [ 526.707179][ T7514] net_ratelimit: 25 callbacks suppressed [ 526.707201][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.820344][T21372] bond0: entered promiscuous mode [ 526.828011][T21372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.902723][T21372] bond0: (slave bridge5): making interface the new active one [ 526.911701][T21372] bridge5: entered promiscuous mode [ 526.920212][T21372] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 526.936841][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.056801][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.167830][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.212607][T21395] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 527.295732][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.345749][T21406] validate_nla: 1 callbacks suppressed [ 527.345768][T21406] netlink: 'syz.2.4433': attribute type 1 has an invalid length. [ 527.628736][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.746210][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.755584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.886528][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.996140][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.154445][T21465] nbd: illegal input index -8454144 [ 528.776297][T21494] __nla_validate_parse: 83 callbacks suppressed [ 528.776319][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4461'. [ 528.812240][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4461'. [ 528.918285][T21499] bond0: entered allmulticast mode [ 529.054431][T21511] FAULT_INJECTION: forcing a failure. [ 529.054431][T21511] name failslab, interval 1, probability 0, space 0, times 1 [ 529.088331][T21511] CPU: 0 UID: 0 PID: 21511 Comm: syz.5.4465 Not tainted syzkaller #0 PREEMPT(full) [ 529.088367][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.088379][T21511] Call Trace: [ 529.088387][T21511] [ 529.088396][T21511] dump_stack_lvl+0x189/0x250 [ 529.088425][T21511] ? __pfx____ratelimit+0x10/0x10 [ 529.088448][T21511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.088472][T21511] ? __pfx__printk+0x10/0x10 [ 529.088495][T21511] ? genl_rcv+0x28/0x40 [ 529.088520][T21511] ? ____sys_sendmsg+0x505/0x830 [ 529.088544][T21511] ? __x64_sys_sendmsg+0x19b/0x260 [ 529.088581][T21511] should_fail_ex+0x414/0x560 [ 529.088616][T21511] should_failslab+0xa8/0x100 [ 529.088648][T21511] kmem_cache_alloc_noprof+0x73/0x3c0 [ 529.088673][T21511] ? skb_clone+0x212/0x3a0 [ 529.088704][T21511] skb_clone+0x212/0x3a0 [ 529.088733][T21511] __netlink_deliver_tap+0x404/0x850 [ 529.088767][T21511] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.088787][T21511] netlink_deliver_tap+0x19c/0x1b0 [ 529.088809][T21511] netlink_sendskb+0x68/0x140 [ 529.088841][T21511] netlink_unicast+0x397/0x9e0 [ 529.088869][T21511] ? __asan_memcpy+0x40/0x70 [ 529.088900][T21511] ? __pfx_netlink_unicast+0x10/0x10 [ 529.088940][T21511] netlink_rcv_skb+0x28c/0x470 [ 529.088958][T21511] ? __lock_acquire+0xab9/0xd20 [ 529.088985][T21511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.089012][T21511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.089053][T21511] ? down_read+0x1ad/0x2e0 [ 529.089079][T21511] genl_rcv+0x28/0x40 [ 529.089102][T21511] netlink_unicast+0x82c/0x9e0 [ 529.089140][T21511] ? __pfx_netlink_unicast+0x10/0x10 [ 529.089172][T21511] ? netlink_sendmsg+0x642/0xb30 [ 529.089190][T21511] ? skb_put+0x11b/0x210 [ 529.089217][T21511] netlink_sendmsg+0x805/0xb30 [ 529.089249][T21511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.089273][T21511] ? aa_sock_msg_perm+0xf1/0x1d0 [ 529.089297][T21511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.089322][T21511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.089345][T21511] __sock_sendmsg+0x21c/0x270 [ 529.089384][T21511] ____sys_sendmsg+0x505/0x830 [ 529.089414][T21511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.089449][T21511] ? import_iovec+0x74/0xa0 [ 529.089477][T21511] ___sys_sendmsg+0x21f/0x2a0 [ 529.089505][T21511] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.089567][T21511] ? __fget_files+0x2a/0x420 [ 529.089582][T21511] ? __fget_files+0x3a0/0x420 [ 529.089610][T21511] __x64_sys_sendmsg+0x19b/0x260 [ 529.089639][T21511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.089672][T21511] ? __pfx_ksys_write+0x10/0x10 [ 529.089704][T21511] ? do_syscall_64+0xbe/0x3b0 [ 529.089731][T21511] do_syscall_64+0xfa/0x3b0 [ 529.089751][T21511] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.089771][T21511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.089790][T21511] ? clear_bhb_loop+0x60/0xb0 [ 529.089813][T21511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.089832][T21511] RIP: 0033:0x7f0a8598eec9 [ 529.089850][T21511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.089868][T21511] RSP: 002b:00007f0a867d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.089889][T21511] RAX: ffffffffffffffda RBX: 00007f0a85be6090 RCX: 00007f0a8598eec9 [ 529.089903][T21511] RDX: 0000000000008000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 529.089917][T21511] RBP: 00007f0a867d2090 R08: 0000000000000000 R09: 0000000000000000 [ 529.089929][T21511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.089941][T21511] R13: 00007f0a85be6128 R14: 00007f0a85be6090 R15: 00007ffdbb956c18 [ 529.089972][T21511] [ 529.704522][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4472'. [ 529.883771][T21545] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.170079][T21563] netlink: 'syz.2.4473': attribute type 11 has an invalid length. [ 530.962266][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 531.736909][ T12] net_ratelimit: 77 callbacks suppressed [ 531.736955][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 531.772114][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4473'. [ 531.794991][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4473'. [ 531.839754][T21575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4480'. [ 531.969517][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.010968][T21582] hsr0 speed is unknown, defaulting to 1000 [ 532.029980][T21587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.046909][T21585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4483'. [ 532.060074][T21582] caif0 speed is unknown, defaulting to 1000 [ 532.067496][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4484'. [ 532.095834][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.226598][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.356644][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.407908][T21603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4489'. [ 532.476431][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.553103][T21605] dvmrp0: entered allmulticast mode [ 532.596992][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.611828][T21605] netlink: 'syz.4.4490': attribute type 1 has an invalid length. [ 532.717861][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.941208][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.594107][T21653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4503'. [ 533.827356][T21661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4506'. [ 534.072297][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4510'. [ 534.076019][T21676] xt_HMARK: proto mask must be zero with L3 mode [ 534.097070][T21676] xt_HMARK: proto mask must be zero with L3 mode [ 534.933475][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4522'. [ 534.949787][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4522'. [ 534.960706][T21721] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4522'. [ 535.039900][T21731] netlink: 'syz.0.4525': attribute type 3 has an invalid length. [ 535.164644][T21740] netlink: 'syz.1.4527': attribute type 2 has an invalid length. [ 535.317598][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4529'. [ 535.734755][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4537'. [ 535.754578][T21770] vlan2: entered allmulticast mode [ 535.774472][T21770] hsr0: entered allmulticast mode [ 535.788956][T21770] hsr_slave_0: entered allmulticast mode [ 535.794640][T21770] hsr_slave_1: entered allmulticast mode [ 535.838357][T21771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4536'. [ 535.867278][T21734] lec:lec_atm_close: lec0: Shut down! [ 536.287298][T21794] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4542'. [ 536.404348][T21799] netlink: 'syz.5.4545': attribute type 1 has an invalid length. [ 536.445871][T21799] bond7: entered promiscuous mode [ 536.452832][T21799] 8021q: adding VLAN 0 to HW filter on device bond7 [ 536.460821][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'. [ 536.504693][T21805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 536.519134][T21805] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 536.532433][T21805] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 536.573118][T21805] bond7: (slave wireguard1): making interface the new active one [ 536.582399][T21805] wireguard1: entered promiscuous mode [ 536.594496][T21805] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 536.797948][ T8195] net_ratelimit: 26 callbacks suppressed [ 536.797970][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 536.926821][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.086698][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.191997][T21844] netlink: 'syz.5.4557': attribute type 11 has an invalid length. [ 537.207533][T21827] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 537.222539][T21827] bond2 (unregistering): Released all slaves [ 537.272886][T21848] tc_dump_action: action bad kind [ 537.298981][T21848] tc_dump_action: action bad kind [ 537.304397][T21848] tc_dump_action: action bad kind [ 537.361712][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.376977][T21848] tc_dump_action: action bad kind [ 537.383578][T21848] tc_dump_action: action bad kind [ 537.491097][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.570443][T21869] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 537.589628][T21869] bond2 (unregistering): Released all slaves [ 537.685602][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.817774][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.883541][T21893] netlink: 'syz.4.4566': attribute type 1 has an invalid length. [ 538.019311][T21893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.060996][T21900] netlink: 'syz.2.4571': attribute type 3 has an invalid length. [ 538.061422][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.217016][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.382177][T21898] syz.1.4572 (21898) used greatest stack depth: 16088 bytes left [ 538.391675][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.521509][T21933] netlink: 'syz.5.4581': attribute type 13 has an invalid length. [ 538.872193][T21950] __nla_validate_parse: 11 callbacks suppressed [ 538.872216][T21950] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4586'. [ 539.028815][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 539.043747][T21956] netlink: 'syz.5.4588': attribute type 1 has an invalid length. [ 539.098766][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4588'. [ 539.121889][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4588'. [ 539.411542][T21980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4595'. [ 539.433221][T21972] netlink: 'syz.1.4593': attribute type 1 has an invalid length. [ 539.471606][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4593'. [ 539.505866][T21980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4595'. [ 539.523042][T21980] netlink: 'syz.2.4595': attribute type 10 has an invalid length. [ 539.589488][T21972] team0: Mode "" not found [ 539.674650][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4597'. [ 539.706162][T21990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4597'. [ 539.723989][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 539.772144][T21993] tipc: Resetting bearer [ 539.896634][T22001] tipc: Resetting bearer [ 539.904357][T22001] tipc: Resetting bearer [ 540.157932][ T12] tipc: Resetting bearer [ 540.533371][T22042] Bluetooth: MGMT ver 1.23 [ 540.654490][T22054] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 540.857340][T22066] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 541.171383][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.817268][ T8196] net_ratelimit: 22 callbacks suppressed [ 541.817289][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 541.970349][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 542.463982][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 542.557576][ T5869] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 542.598548][ T3552] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 542.636428][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 542.725609][ T3552] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 542.837434][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 542.973977][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.115306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.245836][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.366073][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.536856][T22170] dvmrp0: entered allmulticast mode [ 543.579411][T22179] tap0: tun_chr_ioctl cmd 2148553947 [ 544.051180][T22216] __nla_validate_parse: 11 callbacks suppressed [ 544.051198][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 544.070978][T22214] tipc: Enabling of bearer rejected, already enabled [ 544.483866][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4672'. [ 544.930576][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'. [ 545.057954][T22277] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4680'. [ 545.079786][T22279] netlink: 'syz.0.4679': attribute type 1 has an invalid length. [ 545.259823][T22287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.285912][T22287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.462498][T22287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.478120][T22287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.504690][T22300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4683'. [ 545.615774][T22287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.633249][T22287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.688072][T22308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4687'. [ 545.712969][T22308] netlink: 'syz.5.4687': attribute type 1 has an invalid length. [ 545.802012][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'. [ 545.831053][T22287] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.842201][T22287] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.042332][T22322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4691'. [ 546.062472][ T57] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.088842][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.131151][T22327] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 546.161326][T22315] macvtap1: entered promiscuous mode [ 546.170090][T22315] vlan0: entered promiscuous mode [ 546.178002][T22315] macvtap1: entered allmulticast mode [ 546.183557][T22315] vlan0: entered allmulticast mode [ 546.191460][T22315] veth0_vlan: entered allmulticast mode [ 546.259827][T22318] macvtap2: entered promiscuous mode [ 546.266871][T22318] macvtap2: entered allmulticast mode [ 546.287166][ T57] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.296322][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.334004][ T8196] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.342477][ T8196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.394672][ T57] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.434268][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.626872][T22351] netlink: 'syz.0.4698': attribute type 2 has an invalid length. [ 546.648200][T22351] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.4698'. [ 546.862878][T22363] netlink: 'syz.2.4702': attribute type 1 has an invalid length. [ 546.867111][ T12] net_ratelimit: 24 callbacks suppressed [ 546.867132][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 546.914501][T22363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4702'. [ 547.006150][ T3552] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.137523][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.166328][T22378] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 547.267138][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.386025][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.483934][T22397] netlink: 'syz.5.4714': attribute type 1 has an invalid length. [ 547.506554][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.519324][T22397] netlink: 'syz.5.4714': attribute type 2 has an invalid length. [ 547.651016][T22411] Bluetooth: MGMT ver 1.23 [ 547.665634][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 547.758740][T22416] netlink: 'syz.4.4718': attribute type 12 has an invalid length. [ 547.811934][T22416] bond3: option primary_reselect: invalid value (255) [ 547.821708][T22416] bond3 (unregistering): Released all slaves [ 547.843078][T22420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 547.868913][T22420] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 548.246375][ T56] block nbd1: Possible stuck request ffff888025620000: control (read@0,1024B). Runtime 360 seconds [ 548.257616][ T56] block nbd1: Possible stuck request ffff8880256201c0: control (read@1024,1024B). Runtime 360 seconds [ 548.269847][ T56] block nbd1: Possible stuck request ffff888025620380: control (read@2048,1024B). Runtime 360 seconds [ 548.281673][ T56] block nbd1: Possible stuck request ffff888025620540: control (read@3072,1024B). Runtime 360 seconds [ 549.067374][T22475] __nla_validate_parse: 9 callbacks suppressed [ 549.067394][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4733'. [ 549.590500][T22502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4744'. [ 549.664043][T22502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4744'. [ 549.954779][T22524] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 550.089309][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 550.144552][T22538] netlink: 'syz.5.4754': attribute type 2 has an invalid length. [ 550.157803][T22538] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4754'. [ 550.174387][T22538] nbd: must specify a device to reconfigure [ 550.209668][T22538] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4754'. [ 550.230977][T22544] netlink: 'syz.0.4756': attribute type 2 has an invalid length. [ 550.242558][T22538] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4754'. [ 550.362841][T22556] netlink: 'syz.0.4759': attribute type 12 has an invalid length. [ 551.196552][T22570] netlink: 'syz.4.4763': attribute type 3 has an invalid length. [ 551.218266][T22570] netlink: 159136 bytes leftover after parsing attributes in process `syz.4.4763'. [ 551.429775][T22591] netlink: 'syz.0.4767': attribute type 1 has an invalid length. [ 551.445956][T22591] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4767'. [ 551.473204][T22591] siw: device registration error -23 [ 551.733684][T22603] bond9 (unregistering): Released all slaves [ 551.811375][T22613] netlink: 'syz.2.4773': attribute type 3 has an invalid length. [ 551.927608][ T57] net_ratelimit: 44 callbacks suppressed [ 551.927628][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.018519][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4776'. [ 552.078254][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.138215][T22632] 8021q: VLANs not supported on ip_vti0 [ 552.270395][T22641] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 552.456697][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.513558][T22651] netlink: 'syz.0.4786': attribute type 1 has an invalid length. [ 552.541766][T22652] netlink: 'syz.0.4786': attribute type 1 has an invalid length. [ 552.663153][T22661] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 552.676330][T22661] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 552.747905][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.866423][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.923884][T22684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.015776][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 553.147277][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 553.278628][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 553.406201][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 553.539289][T22716] macvtap1: entered promiscuous mode [ 553.555045][T22716] vlan0: entered promiscuous mode [ 553.563351][T22716] macvtap1: entered allmulticast mode [ 553.570487][T22716] vlan0: entered allmulticast mode [ 553.589844][T22716] veth0_vlan: entered allmulticast mode [ 553.872510][T22733] gtp1: entered promiscuous mode [ 553.898915][T22733] gtp1: entered allmulticast mode [ 554.080683][T22747] syzkaller1: entered promiscuous mode [ 554.087544][T22747] syzkaller1: entered allmulticast mode [ 554.107208][T22749] __nla_validate_parse: 13 callbacks suppressed [ 554.107234][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4808'. [ 554.150303][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4808'. [ 554.277622][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 554.549422][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'. [ 554.565238][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4824'. [ 554.580523][T22779] geneve3: entered promiscuous mode [ 554.586899][T22777] netlink: 'syz.1.4824': attribute type 20 has an invalid length. [ 554.595775][T22779] geneve3: entered allmulticast mode [ 554.614090][ T8195] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 554.640170][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4824'. [ 554.650199][ T8195] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 554.659107][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4824'. [ 554.668602][ T8195] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 554.678358][ T8195] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 554.941613][T22801] team0: Port device dummy0 added [ 555.042095][T22810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4833'. [ 555.449118][T22837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'. [ 555.461715][T22837] bond0: left allmulticast mode [ 555.487086][T22839] validate_nla: 2 callbacks suppressed [ 555.487105][T22839] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 555.506313][T22839] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4840'. [ 555.517821][T22839] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 555.536711][T22839] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 555.544570][T22839] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 555.739368][T22853] netlink: 'syz.2.4844': attribute type 1 has an invalid length. [ 555.752849][T22853] netlink: 'syz.2.4844': attribute type 1 has an invalid length. [ 555.762239][T22853] netlink: 'syz.2.4844': attribute type 1 has an invalid length. [ 555.773104][T22853] netlink: 'syz.2.4844': attribute type 2 has an invalid length. [ 555.936444][T22869] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 556.052272][T22878] sctp: [Deprecated]: syz.2.4851 (pid 22878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.052272][T22878] Use struct sctp_sack_info instead [ 556.442589][T22902] syzkaller0: entered promiscuous mode [ 556.448241][T22902] syzkaller0: entered allmulticast mode [ 556.473286][T22902] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 556.701138][T22922] netlink: 'syz.2.4861': attribute type 12 has an invalid length. [ 556.711149][T22922] netlink: 'syz.2.4861': attribute type 11 has an invalid length. [ 557.025856][ T57] net_ratelimit: 27 callbacks suppressed [ 557.025877][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.144972][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.278291][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.306530][T22948] bond_slave_1: mtu less than device minimum [ 557.379016][T22954] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 557.402114][T22954] bond5: (slave vcan0): Error -95 calling set_mac_address [ 557.477202][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.851756][T22986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 557.880949][T22986] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.899555][T22986] gretap3: entered promiscuous mode [ 557.920289][T22986] gretap3: entered allmulticast mode [ 557.956171][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 558.095403][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 558.241517][T23023] pim6reg: entered allmulticast mode [ 558.296165][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 558.391178][T23029] delete_channel: no stack [ 558.455834][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 558.530142][T23034] bridge6: entered promiscuous mode [ 558.554532][T23034] bridge6: entered allmulticast mode [ 558.578553][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 559.018824][T23064] pim6reg1: entered promiscuous mode [ 559.024262][T23064] pim6reg1: entered allmulticast mode [ 559.143777][T23069] __nla_validate_parse: 22 callbacks suppressed [ 559.143798][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4901'. [ 559.166858][T23066] sch_fq: defrate 0 ignored. [ 559.209575][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4901'. [ 559.745434][T22048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.757937][T22048] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.786951][T22048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.803610][T22048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.818400][T22048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.894754][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4903'. [ 560.020495][T23080] hsr0 speed is unknown, defaulting to 1000 [ 560.042033][T23080] caif0 speed is unknown, defaulting to 1000 [ 560.468342][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 560.526564][T23111] validate_nla: 4 callbacks suppressed [ 560.526584][T23111] netlink: 'syz.2.4910': attribute type 3 has an invalid length. [ 560.747072][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4911'. [ 560.829728][T23114] netlink: 'syz.2.4911': attribute type 29 has an invalid length. [ 560.842602][T23114] netlink: 'syz.2.4911': attribute type 29 has an invalid length. [ 560.868623][T23114] netlink: 'syz.2.4911': attribute type 29 has an invalid length. [ 560.899813][T23114] netlink: 'syz.2.4911': attribute type 29 has an invalid length. [ 560.916143][T23114] netlink: 'syz.2.4911': attribute type 1 has an invalid length. [ 560.929765][T23114] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4911'. [ 560.988750][T23080] chnl_net:caif_netlink_parms(): no params data found [ 561.205394][T23131] veth0: entered promiscuous mode [ 561.284318][T23130] veth0: left promiscuous mode [ 561.290066][T23080] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.341293][T23080] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.368256][T23080] bridge_slave_0: entered allmulticast mode [ 561.378605][T23080] bridge_slave_0: entered promiscuous mode [ 561.393370][T23080] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.401581][T23080] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.442959][T23080] bridge_slave_1: entered allmulticast mode [ 561.451648][T23080] bridge_slave_1: entered promiscuous mode [ 561.607287][T23080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.628902][T23080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.741276][T23080] team0: Port device team_slave_0 added [ 561.789413][T23080] team0: Port device team_slave_1 added [ 561.915260][T22048] Bluetooth: hci0: command tx timeout [ 562.106072][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4921'. [ 562.202822][T23080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.222281][T23080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.281227][T23080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.297375][T23080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.304584][T23080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.341895][T23080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.345395][ T3552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.362372][T23183] tipc: Enabling of bearer rejected, already enabled [ 562.377296][ T7515] net_ratelimit: 18 callbacks suppressed [ 562.377316][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 562.403295][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4926'. [ 562.436977][T23184] block nbd0: NBD_DISCONNECT [ 562.456527][T23184] block nbd0: Send disconnect failed -32 [ 562.462578][T23184] block nbd0: shutting down sockets [ 562.488450][T23188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4926'. [ 562.503245][T23188] netlink: 'syz.0.4926': attribute type 7 has an invalid length. [ 562.512891][T23188] netlink: 'syz.0.4926': attribute type 8 has an invalid length. [ 562.540217][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 562.684010][T23080] hsr_slave_0: entered promiscuous mode [ 562.692558][T23080] hsr_slave_1: entered promiscuous mode [ 562.700498][T23080] debugfs: 'hsr0' already exists in 'hsr' [ 562.707338][T23080] Cannot create hsr debugfs directory [ 562.968463][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.118163][T23222] block nbd0: not configured, cannot reconfigure [ 563.245877][ T3552] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 563.358595][T23239] IPv6: addrconf: prefix option has invalid lifetime [ 563.432074][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 563.461939][T23242] hsr0 speed is unknown, defaulting to 1000 [ 563.530538][T23080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.543012][T23080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.578358][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 563.587758][T23242] caif0 speed is unknown, defaulting to 1000 [ 563.703818][T23247] netlink: 'syz.2.4944': attribute type 4 has an invalid length. [ 563.758199][T23250] netlink: 'syz.2.4944': attribute type 83 has an invalid length. [ 564.002228][T22048] Bluetooth: hci0: command tx timeout [ 564.043853][T23255] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 564.170456][ T8195] dvmrp0 (unregistering): left allmulticast mode [ 564.538307][ T8195] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.549000][ T8195] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.560858][ T8195] ` (unregistering): (slave team0): Releasing backup interface [ 564.573873][ T8195] ` (unregistering): Released all slaves [ 564.592772][ T8195] bond0 (unregistering): (slave veth11): Releasing backup interface [ 564.602537][ T8195] bond0 (unregistering): Released all slaves [ 564.615935][ T8195] bond1 (unregistering): Released all slaves [ 564.634218][ T8195] bond2 (unregistering): Released all slaves [ 564.651418][ T8195] bond3 (unregistering): Released all slaves [ 564.665951][ T8195] bond4 (unregistering): Released all slaves [ 564.817401][ T8195] bond5 (unregistering): (slave veth15): Releasing active interface [ 564.828022][ T8195] bond5 (unregistering): Released all slaves [ 564.843885][ T8195] bond6 (unregistering): Released all slaves [ 564.874274][T23080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.892644][T23080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.942850][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.147008][T23080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.168006][T23080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.193963][ T8195] tipc: Disabling bearer [ 565.200781][ T8195] tipc: Disabling bearer [ 565.207393][ T8195] tipc: Left network mode [ 565.215623][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.327851][T23080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.342780][T23080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.388133][T23263] __nla_validate_parse: 9 callbacks suppressed [ 565.388151][T23263] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4948'. [ 565.404116][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.653241][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.757037][T23278] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4953'. [ 565.767001][T23278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4953'. [ 565.772836][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'. [ 565.785216][T23278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4953'. [ 565.869467][T23280] tipc: Enabling of bearer rejected, already enabled [ 565.991258][T23280] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 566.007440][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 566.052247][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 566.079474][T22048] Bluetooth: hci0: command tx timeout [ 566.116832][T23080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.160261][T23280] hsr0 speed is unknown, defaulting to 1000 [ 566.170845][ T8195] hsr_slave_0: left promiscuous mode [ 566.178935][ T8195] hsr_slave_1: left promiscuous mode [ 566.311360][T23295] validate_nla: 4 callbacks suppressed [ 566.311408][T23295] netlink: 'syz.0.4958': attribute type 1 has an invalid length. [ 566.332340][T23295] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4958'. [ 566.346893][T23295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4958'. [ 566.750178][ T8195] batadv_slave_1 (unregistering): left allmulticast mode [ 566.842989][ T8195] team0 (unregistering): Port device team_slave_1 removed [ 566.898272][ T8195] team0 (unregistering): Port device team_slave_0 removed [ 567.199767][ T8195] team0 (unregistering): Port device dummy0 removed [ 567.333879][ T8195] vcan0 (unregistering): left allmulticast mode [ 567.348905][T23080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.362147][T23280] caif0 speed is unknown, defaulting to 1000 [ 567.365890][T23080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.450445][T23295] bond0: (slave bridge5): Releasing backup interface [ 567.459688][T23295] bridge5: left promiscuous mode [ 567.506388][ T8196] net_ratelimit: 1 callbacks suppressed [ 567.506409][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 567.565391][T23080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.651071][T23300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.685929][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 567.759419][T23080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.780489][T23080] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.813229][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.820450][ T7524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.840226][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.847469][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.965389][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.155250][T22048] Bluetooth: hci0: command tx timeout [ 568.161979][T23326] netlink: 'syz.4.4965': attribute type 1 has an invalid length. [ 568.197346][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.220867][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4966'. [ 568.313025][ T8195] IPVS: stop unused estimator thread 0... [ 568.342225][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.486984][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.605301][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.719480][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 568.892713][T23353] macvtap1: entered promiscuous mode [ 568.902987][T23353] vlan0: entered promiscuous mode [ 568.911611][T23353] macvtap1: entered allmulticast mode [ 568.919846][T23353] vlan0: entered allmulticast mode [ 568.926409][T23353] veth0_vlan: entered allmulticast mode [ 568.933938][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 569.034088][T23357] bond0: (slave bridge_slave_1): Releasing backup interface [ 569.142745][T23080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.212640][T23366] netlink: 'syz.1.4977': attribute type 2 has an invalid length. [ 569.237508][T23366] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 569.530122][T23380] netlink: 'syz.2.4982': attribute type 10 has an invalid length. [ 569.597728][T23380] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 569.678114][T23385] gtp0: entered promiscuous mode [ 569.714906][T23385] gtp0: entered allmulticast mode [ 569.847689][T23401] bridge0: port 1(vlan3) entered blocking state [ 569.854621][T23401] bridge0: port 1(vlan3) entered disabled state [ 569.868109][T23401] vlan3: entered allmulticast mode [ 569.873265][T23401] bridge0: entered allmulticast mode [ 569.892973][T23401] vlan3: left allmulticast mode [ 569.913147][T23401] bridge0: left allmulticast mode [ 570.013654][T23408] macvtap0: left allmulticast mode [ 570.039506][T23080] veth0_vlan: entered promiscuous mode [ 570.124100][T23080] veth1_vlan: entered promiscuous mode [ 570.193054][T23080] veth0_macvtap: entered promiscuous mode [ 570.217678][T23080] veth1_macvtap: entered promiscuous mode [ 570.269046][T23080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.300207][T23080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.343660][ T8196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.443954][ T8196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.488038][ T7524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.520832][ T7524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.679431][T23441] syzkaller0: entered promiscuous mode [ 570.710733][T23441] syzkaller0: entered allmulticast mode [ 570.782697][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.798245][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.973772][ T7508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.000877][ T7508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.054362][T23456] __nla_validate_parse: 9 callbacks suppressed [ 571.054381][T23456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5000'. [ 571.123176][T23461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5000'. [ 571.162368][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5001'. [ 571.198045][T23467] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5003'. [ 571.363744][T23479] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5004'. [ 571.417016][T23484] tipc: Enabling of bearer rejected, already enabled [ 571.651577][T23494] veth0_to_team: entered promiscuous mode [ 571.675702][T23494] veth0_to_team: entered allmulticast mode [ 571.698160][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5008'. [ 571.748933][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5008'. [ 571.762696][T23494] bridge_slave_0: left allmulticast mode [ 571.768999][T23494] bridge_slave_0: left promiscuous mode [ 571.777295][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.893213][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5013'. [ 571.913010][T23508] netlink: 'syz.5.5014': attribute type 1 has an invalid length. [ 571.923409][T23508] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5014'. [ 571.941272][T23508] netlink: 'syz.5.5014': attribute type 1 has an invalid length. [ 572.172869][T23512] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 572.203866][T23516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5017'. [ 572.428492][T23524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.608288][ T8195] net_ratelimit: 28 callbacks suppressed [ 572.608309][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 572.621829][T23536] netlink: 'syz.0.5019': attribute type 1 has an invalid length. [ 572.831869][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 572.957396][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 572.971065][T23563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.977851][T23563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.011305][T23566] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 573.077692][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 573.196062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.215719][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 573.361660][T23588] netlink: 'syz.1.5036': attribute type 2 has an invalid length. [ 573.371268][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 573.568115][T23596] netlink: 'syz.5.5038': attribute type 1 has an invalid length. [ 574.144224][T23629] netlink: 'syz.2.5047': attribute type 5 has an invalid length. [ 574.608619][T23654] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 574.688619][T23660] nbd: must specify at least one socket [ 574.812934][T23667] netlink: 'syz.1.5059': attribute type 1 has an invalid length. [ 574.841636][T23667] netlink: 'syz.1.5059': attribute type 2 has an invalid length. [ 575.113292][T23687] netlink: 'syz.2.5066': attribute type 1 has an invalid length. [ 575.825708][T23721] tipc: Bearer : already 2 bearers with priority 10 [ 575.833212][T23721] tipc: Bearer : trying with adjusted priority [ 575.841469][T23721] tipc: Enabling of bearer rejected, failed to enable media [ 576.001874][T23737] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 576.102613][T23741] __nla_validate_parse: 17 callbacks suppressed [ 576.102632][T23741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 576.995214][T23798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5101'. [ 577.144329][T23806] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 577.200111][T23808] tipc: Started in network mode [ 577.205223][T23808] tipc: Node identity 7e8462f9f005, cluster identity 4711 [ 577.217754][T23808] tipc: Enabled bearer , priority 0 [ 577.229568][T23808] syzkaller0: entered promiscuous mode [ 577.237565][T23808] syzkaller0: entered allmulticast mode [ 577.290415][T23808] tipc: Resetting bearer [ 577.303082][T23807] tipc: Resetting bearer [ 577.349065][T23807] tipc: Disabling bearer [ 577.550931][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5114'. [ 577.561673][T23829] netlink: 'syz.2.5114': attribute type 3 has an invalid length. [ 577.929835][T23845] net_ratelimit: 27 callbacks suppressed [ 577.929878][T23845] team_slave_0: mtu greater than device maximum [ 578.043492][T23848] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.5121'. [ 578.049589][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.177819][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.188888][T23853] Bluetooth: MGMT ver 1.23 [ 578.338005][ T56] block nbd1: Possible stuck request ffff888025620000: control (read@0,1024B). Runtime 390 seconds [ 578.349201][ T56] block nbd1: Possible stuck request ffff8880256201c0: control (read@1024,1024B). Runtime 390 seconds [ 578.361094][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.361415][ T56] block nbd1: Possible stuck request ffff888025620380: control (read@2048,1024B). Runtime 390 seconds [ 578.379941][ T56] block nbd1: Possible stuck request ffff888025620540: control (read@3072,1024B). Runtime 390 seconds [ 578.489485][T23870] netlink: 'syz.1.5127': attribute type 21 has an invalid length. [ 578.526176][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.570175][T23872] netlink: 'syz.1.5127': attribute type 21 has an invalid length. [ 578.587338][T23879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5128'. [ 578.594315][T23870] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5127'. [ 578.609473][T23872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5127'. [ 578.740083][T23885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.757463][T23870] netlink: 'syz.1.5127': attribute type 4 has an invalid length. [ 578.777304][T23885] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5131'. [ 578.835030][T23870] netlink: 'syz.1.5127': attribute type 5 has an invalid length. [ 578.866175][T23870] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5127'. [ 578.925908][T23872] netlink: 'syz.1.5127': attribute type 4 has an invalid length. [ 578.971649][T23872] netlink: 'syz.1.5127': attribute type 5 has an invalid length. [ 578.984526][T23872] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5127'. [ 579.031923][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.170061][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.186417][T23903] sctp: [Deprecated]: syz.1.5135 (pid 23903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.186417][T23903] Use struct sctp_sack_info instead [ 579.270714][T23913] tap0: tun_chr_ioctl cmd 1074025678 [ 579.282278][T23913] tap0: group set to 0 [ 579.348917][ T7508] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.448516][T23925] sctp: [Deprecated]: syz.1.5141 (pid 23925) Use of int in max_burst socket option. [ 579.448516][T23925] Use struct sctp_assoc_value instead [ 579.500004][T23930] netlink: 'syz.2.5139': attribute type 3 has an invalid length. [ 579.524580][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 579.694749][T23937] bond2: option miimon: invalid value (18446744073709551585) [ 579.703111][T23937] bond2: option miimon: allowed values 0 - 2147483647 [ 579.732308][T23937] bond2 (unregistering): Released all slaves [ 580.242207][T23969] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.264363][T23972] netlink: 'syz.0.5154': attribute type 2 has an invalid length. [ 580.273031][T23972] netlink: 'syz.0.5154': attribute type 2 has an invalid length. [ 580.440876][T23973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.018087][T23992] bridge8: entered promiscuous mode [ 581.045172][T23992] bridge8: entered allmulticast mode [ 581.284629][T24018] __nla_validate_parse: 7 callbacks suppressed [ 581.284649][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5163'. [ 581.922551][T24039] team0: Port device dummy0 removed [ 581.940533][T24039] bond1: (slave geneve2): Releasing active interface [ 581.957071][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5167'. [ 582.012573][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.019019][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5169'. [ 582.023222][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.099122][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.131762][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5170'. [ 582.142218][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.170074][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5170'. [ 582.207618][T24051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5170'. [ 582.327407][T24045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.419409][T24065] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5172'. [ 582.764048][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5174'. [ 582.778617][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5175'. [ 582.789699][T24078] tipc: Enabling of bearer rejected, failed to enable media [ 582.801406][T24078] syzkaller0: entered promiscuous mode [ 582.807634][T24078] syzkaller0: entered allmulticast mode [ 582.995856][ T7524] net_ratelimit: 19 callbacks suppressed [ 582.995878][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 583.306869][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 583.366948][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5183'. [ 583.414732][T24104] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.428521][T24104] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 583.521173][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 583.558223][T24117] validate_nla: 4 callbacks suppressed [ 583.558243][T24117] netlink: 'syz.0.5187': attribute type 10 has an invalid length. [ 583.607051][T24117] veth1_macvtap: left promiscuous mode [ 583.860716][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.450772][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.567515][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.691394][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.847390][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.962558][T24187] tipc: Enabled bearer , priority 0 [ 584.988533][T24190] syzkaller0: entered promiscuous mode [ 585.022338][T24190] syzkaller0: entered allmulticast mode [ 585.085065][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.106373][T24187] tipc: Resetting bearer [ 585.129681][T24185] tipc: Resetting bearer [ 585.208018][T24185] tipc: Disabling bearer [ 585.246988][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.462110][T24208] vlan3: entered allmulticast mode [ 585.492996][T24208] bond0: entered allmulticast mode [ 585.943774][T24235] bond7: option miimon: invalid value (18446744073709551585) [ 586.018357][T24235] bond7: option miimon: allowed values 0 - 2147483647 [ 586.051812][T24235] bond7 (unregistering): Released all slaves [ 588.489498][T24285] netlink: 'syz.4.5238': attribute type 14 has an invalid length. [ 588.559763][ T7514] net_ratelimit: 5 callbacks suppressed [ 588.559783][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 588.697730][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 588.730004][T24297] __nla_validate_parse: 6 callbacks suppressed [ 588.730025][T24297] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5244'. [ 588.766881][T24297] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5244'. [ 588.791807][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5244'. [ 588.820813][T24301] netlink: 620 bytes leftover after parsing attributes in process `syz.4.5239'. [ 588.832738][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 588.833548][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5244'. [ 588.885661][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 588.900695][T24297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5244'. [ 589.016103][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.062732][T24313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5247'. [ 589.114651][T24314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5247'. [ 589.277739][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.396833][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.506912][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.616462][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.764099][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 589.931839][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.025154][T24365] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 590.065612][T24365] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 590.076026][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.115852][T24374] vlan1: entered promiscuous mode [ 590.121155][T24374] vlan1: entered allmulticast mode [ 590.126343][T24374] hsr_slave_1: entered allmulticast mode [ 590.294366][T24384] netlink: 'syz.5.5270': attribute type 24 has an invalid length. [ 590.572623][T24402] netlink: 'syz.5.5277': attribute type 2 has an invalid length. [ 590.918032][T24425] netlink: 'syz.0.5286': attribute type 3 has an invalid length. [ 591.257648][T24445] tipc: Enabled bearer , priority 10 [ 591.632901][T24466] xfrm1: entered allmulticast mode [ 592.375389][ T9779] tipc: Node number set to 2390844153 [ 592.421865][T24519] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 592.446884][T24519] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 592.820502][T22048] Bluetooth: hci4: link tx timeout [ 592.835416][T22048] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 593.626816][ T8196] net_ratelimit: 32 callbacks suppressed [ 593.626836][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 593.746063][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 593.781008][T24589] __nla_validate_parse: 17 callbacks suppressed [ 593.781030][T24589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5335'. [ 593.858006][T24593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5337'. [ 593.878850][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 593.972258][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5339'. [ 594.034080][T24598] netlink: 'syz.2.5339': attribute type 3 has an invalid length. [ 594.042771][T24598] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5339'. [ 594.056126][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.165618][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.253645][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'. [ 594.277522][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.315148][ T7524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.324562][T24608] openvswitch: netlink: IP tunnel TTL not specified. [ 594.420839][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.503765][T24623] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5346'. [ 594.530561][ T9780] IPVS: starting estimator thread 0... [ 594.569980][T24623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 594.586325][T24622] netlink: 62465 bytes leftover after parsing attributes in process `syz.1.5348'. [ 594.616436][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.635507][T24625] IPVS: using max 27 ests per chain, 64800 per kthread [ 594.679641][T24630] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5350'. [ 594.690274][T24631] netlink: 'syz.5.5350': attribute type 10 has an invalid length. [ 594.710026][T24631] veth0_virt_wifi: entered allmulticast mode [ 594.754575][T24631] team0: Port device veth0_virt_wifi added [ 594.756336][T24634] syz.2.5352: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 594.787692][ T7514] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 594.811185][T24634] CPU: 1 UID: 0 PID: 24634 Comm: syz.2.5352 Not tainted syzkaller #0 PREEMPT(full) [ 594.811216][T24634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.811229][T24634] Call Trace: [ 594.811237][T24634] [ 594.811246][T24634] dump_stack_lvl+0x189/0x250 [ 594.811281][T24634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.811307][T24634] ? __pfx__printk+0x10/0x10 [ 594.811342][T24634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 594.811368][T24634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 594.811394][T24634] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 594.811422][T24634] warn_alloc+0x214/0x310 [ 594.811455][T24634] ? stack_depot_save_flags+0x40/0x860 [ 594.811488][T24634] ? __pfx_warn_alloc+0x10/0x10 [ 594.811522][T24634] ? kasan_save_track+0x4f/0x80 [ 594.811548][T24634] ? xskq_create+0x56/0x170 [ 594.811567][T24634] ? xsk_init_queue+0xb0/0x110 [ 594.811584][T24634] ? xsk_setsockopt+0x4dc/0x8d0 [ 594.811612][T24634] ? do_sock_setsockopt+0x179/0x1b0 [ 594.811635][T24634] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 594.811657][T24634] ? do_syscall_64+0xfa/0x3b0 [ 594.811679][T24634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.811708][T24634] __vmalloc_node_range_noprof+0x125/0x12f0 [ 594.811772][T24634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 594.811809][T24634] ? __kasan_kmalloc+0x93/0xb0 [ 594.811840][T24634] vmalloc_user_noprof+0xad/0xf0 [ 594.811869][T24634] ? xskq_create+0xbf/0x170 [ 594.811890][T24634] xskq_create+0xbf/0x170 [ 594.811913][T24634] xsk_init_queue+0xb0/0x110 [ 594.811936][T24634] xsk_setsockopt+0x4dc/0x8d0 [ 594.811968][T24634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 594.811998][T24634] ? __pfx_aa_sk_perm+0x10/0x10 [ 594.812032][T24634] ? aa_sock_opt_perm+0xff/0x1b0 [ 594.812058][T24634] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 594.812079][T24634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 594.812111][T24634] do_sock_setsockopt+0x179/0x1b0 [ 594.812140][T24634] __x64_sys_setsockopt+0x13f/0x1b0 [ 594.812170][T24634] do_syscall_64+0xfa/0x3b0 [ 594.812192][T24634] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.812212][T24634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.812232][T24634] ? clear_bhb_loop+0x60/0xb0 [ 594.812257][T24634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.812276][T24634] RIP: 0033:0x7f9bac38eec9 [ 594.812295][T24634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.812311][T24634] RSP: 002b:00007f9bad2f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 594.812340][T24634] RAX: ffffffffffffffda RBX: 00007f9bac5e5fa0 RCX: 00007f9bac38eec9 [ 594.812354][T24634] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 594.812364][T24634] RBP: 00007f9bac411f91 R08: 0000000000000004 R09: 0000000000000000 [ 594.812375][T24634] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.812388][T24634] R13: 00007f9bac5e6038 R14: 00007f9bac5e5fa0 R15: 00007ffdad8ddb08 [ 594.812420][T24634] [ 594.812438][T24634] Mem-Info: [ 594.876121][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 594.898137][T24634] active_anon:4822 inactive_anon:0 isolated_anon:0 [ 594.898137][T24634] active_file:3141 inactive_file:40054 isolated_file:0 [ 594.898137][T24634] unevictable:1061 dirty:91 writeback:0 [ 594.898137][T24634] slab_reclaimable:13024 slab_unreclaimable:132262 [ 594.898137][T24634] mapped:29211 shmem:1364 pagetables:1103 [ 594.898137][T24634] sec_pagetables:0 bounce:0 [ 594.898137][T24634] kernel_misc_reclaimable:0 [ 594.898137][T24634] free:1286088 free_pcp:14215 free_cma:0 [ 594.980144][T24640] netlink: 'syz.0.5353': attribute type 1 has an invalid length. [ 595.015046][T24634] Node 0 active_anon:19560kB inactive_anon:0kB active_file:12564kB inactive_file:160012kB unevictable:4092kB isolated(anon):0kB isolated(file):0kB mapped:116764kB dirty:364kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14084kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 595.293261][T24634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 595.358374][T24634] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 595.367808][T24645] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 595.445282][T24634] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 595.451116][T24634] Node 0 DMA32 free:1236236kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19508kB inactive_anon:0kB active_file:12564kB inactive_file:158452kB unevictable:1592kB writepending:364kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:36576kB local_pcp:18264kB free_cma:0kB [ 595.488425][T24645] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 595.509301][T24657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5356'. [ 595.545373][T24634] lowmem_reserve[]: 0 0 1 1 1 [ 595.550354][T24634] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 595.649340][T24634] lowmem_reserve[]: 0 0 0 0 0 [ 595.664635][T24634] Node 1 Normal free:3888636kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19780kB local_pcp:11488kB free_cma:0kB [ 595.700222][T24634] lowmem_reserve[]: 0 0 0 0 0 [ 595.731307][T24634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 595.739527][T24657] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 595.749525][T24634] Node 0 [ 595.757810][T24657] bond4 (unregistering): Released all slaves [ 595.771737][T24634] DMA32: 437*4kB (UM) 569*8kB (UME) 97*16kB (UME) 675*32kB (UME) 462*64kB (UM) 137*128kB (UM) 94*256kB (UM) 62*512kB (UME) 46*1024kB (UME) 4*2048kB (UM) 256*4096kB (UM) = 1236236kB [ 595.811440][T24634] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 595.829027][T24634] Node 1 Normal: 213*4kB (UE) 65*8kB (UME) 46*16kB (UME) 90*32kB (UME) 30*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888636kB [ 595.853071][T24634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.864465][T24634] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 595.875767][T24634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.883483][T24665] bond1: option all_slaves_active: invalid value (222) [ 595.886866][T24634] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.903616][T24634] 44556 total pagecache pages [ 595.909556][T24634] 0 pages in swap cache [ 595.913823][T24634] Free swap = 124996kB [ 595.921130][T24634] Total swap = 124996kB [ 595.926385][T24634] 2097051 pages RAM [ 595.930212][T24634] 0 pages HighMem/MovableOnly [ 595.936218][T24634] 425673 pages reserved [ 595.938289][T24665] bond1 (unregistering): Released all slaves [ 595.940385][T24634] 0 pages cma reserved [ 596.039881][T24673] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 596.271662][T24686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5364'. [ 596.412987][T24696] netlink: 'syz.0.5369': attribute type 1 has an invalid length. [ 596.482810][T24696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.526828][T24698] veth7: entered promiscuous mode [ 596.573605][T24696] veth7: entered promiscuous mode [ 596.591289][T24706] tipc: Enabled bearer , priority 12 [ 596.602016][T24709] netlink: 'syz.2.5371': attribute type 1 has an invalid length. [ 596.791499][T24719] tipc: Enabled bearer , priority 0 [ 596.801596][T24717] netlink: 'syz.2.5374': attribute type 1 has an invalid length. [ 596.802855][T24719] syzkaller0: entered promiscuous mode [ 596.819440][T24719] syzkaller0: entered allmulticast mode [ 597.007489][T24681] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 597.559747][T24718] tipc: Resetting bearer [ 597.608216][T24718] tipc: Disabling bearer [ 597.705390][ T9780] tipc: Node number set to 123854988 [ 598.380720][T24788] netlink: 'syz.2.5389': attribute type 33 has an invalid length. [ 598.393369][T24790] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 598.685492][ T8195] net_ratelimit: 17 callbacks suppressed [ 598.685514][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 598.985272][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.005510][T24830] tipc: Enabled bearer , priority 0 [ 599.013128][T24829] syzkaller0: entered promiscuous mode [ 599.036253][T24829] syzkaller0: entered allmulticast mode [ 599.069963][T24835] netlink: 'syz.1.5406': attribute type 9 has an invalid length. [ 599.146405][T24829] tipc: Resetting bearer [ 599.183828][T24828] tipc: Resetting bearer [ 599.231174][T24828] tipc: Disabling bearer [ 599.248911][T24844] __nla_validate_parse: 9 callbacks suppressed [ 599.248930][T24844] netlink: 81 bytes leftover after parsing attributes in process `syz.4.5408'. [ 599.306145][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.445661][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.528391][T24861] netlink: 'syz.5.5413': attribute type 4 has an invalid length. [ 599.567753][T24861] netlink: 'syz.5.5413': attribute type 4 has an invalid length. [ 599.605894][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.708039][T24872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5413'. [ 599.724900][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.756463][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5416'. [ 599.876199][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 599.946393][T24889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5416'. [ 600.006505][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.135154][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.223091][T24903] netlink: 'syz.0.5427': attribute type 10 has an invalid length. [ 600.256034][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.396817][T24909] sctp: [Deprecated]: syz.1.5430 (pid 24909) Use of int in max_burst socket option deprecated. [ 600.396817][T24909] Use struct sctp_assoc_value instead [ 600.744776][T24930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5434'. [ 600.801958][T24932] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5436'. [ 601.008204][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 601.018983][T24950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5436'. [ 601.034246][T24950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5436'. [ 601.096998][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5439'. [ 601.143056][T24949] netlink: 'syz.0.5439': attribute type 8 has an invalid length. [ 601.548487][T24964] : entered promiscuous mode [ 601.791149][T24998] tipc: Enabling of bearer rejected, failed to enable media [ 602.176420][T25017] gtp0: entered promiscuous mode [ 602.181622][T25017] gtp0: entered allmulticast mode [ 602.208589][T25022] tipc: Enabled bearer , priority 0 [ 602.318671][T25017] tipc: Resetting bearer [ 602.490561][T25017] tipc: Resetting bearer [ 602.674591][T25047] netlink: 'syz.5.5464': attribute type 1 has an invalid length. [ 602.681372][ T12] nci: nci_rx_work: unknown MT 0x7 [ 602.690789][T25047] IPv6: sit1: Disabled Multicast RS [ 602.921178][T25056] netlink: 'syz.4.5466': attribute type 7 has an invalid length. [ 603.032974][T25067] netlink: 'syz.1.5471': attribute type 1 has an invalid length. [ 603.092797][T25067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 603.106343][T25067] bond4: (slave bond5): making interface the new active one [ 603.114250][T25067] bond4: (slave bond5): Enslaving as an active interface with an up link [ 603.134024][T25067] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.146740][T25067] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 603.226242][ T5921] tipc: Node number set to 116538005 [ 603.547447][T25099] bond6: Removing last ns target with arp_interval on [ 603.559330][T25099] netlink: 'syz.1.5478': attribute type 13 has an invalid length. [ 603.570908][T25099] netlink: 'syz.1.5478': attribute type 58 has an invalid length. [ 603.668993][T25105] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 603.729968][ T7515] net_ratelimit: 28 callbacks suppressed [ 603.729990][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 603.796072][T25105] netlink: 'syz.4.5481': attribute type 3 has an invalid length. [ 603.869053][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 603.997306][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.126820][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.235872][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.357671][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.434376][T25148] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 604.468813][T25150] syzkaller1: entered promiscuous mode [ 604.474488][T25150] syzkaller1: entered allmulticast mode [ 604.583324][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 604.613519][T25160] hsr0 speed is unknown, defaulting to 1000 [ 604.702063][T25160] caif0 speed is unknown, defaulting to 1000 [ 604.717399][T25168] netlink: 'syz.2.5495': attribute type 32 has an invalid length. [ 604.728824][T25168] __nla_validate_parse: 21 callbacks suppressed [ 604.728840][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'. [ 604.856741][T25168] bond7: option coupled_control: invalid value (110) [ 604.871445][T25168] bond7 (unregistering): Released all slaves [ 604.966354][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.118872][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5500'. [ 605.163221][T25185] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 605.196882][T25184] hsr0 speed is unknown, defaulting to 1000 [ 605.224562][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.354662][T25194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5503'. [ 605.394499][T25184] caif0 speed is unknown, defaulting to 1000 [ 605.446510][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5502'. [ 605.716882][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 605.989369][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'. [ 605.997768][T22048] Bluetooth: hci1: command 0x0406 tx timeout [ 606.008072][T25218] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5505'. [ 606.100209][T25218] gretap0: entered promiscuous mode [ 606.115214][T25215] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5505'. [ 606.143690][T25215] 0ªî{X¹¦: renamed from gretap0 [ 606.177325][T25215] 0ªî{X¹¦: left promiscuous mode [ 606.187720][T25215] 0ªî{X¹¦: entered allmulticast mode [ 606.247156][T25215] nbd: couldn't find device at index 0 [ 607.509026][T25288] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5526'. [ 607.558502][T25288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5526'. [ 607.622296][T25293] sctp: [Deprecated]: syz.0.5527 (pid 25293) Use of int in maxseg socket option. [ 607.622296][T25293] Use struct sctp_assoc_value instead [ 607.674033][T25293] netlink: 'syz.0.5527': attribute type 3 has an invalid length. [ 607.682517][T25293] netlink: 192312 bytes leftover after parsing attributes in process `syz.0.5527'. [ 607.703206][T25296] netlink: 'syz.2.5529': attribute type 11 has an invalid length. [ 608.052671][T25319] delete_channel: no stack [ 608.094630][T25322] dvmrp0: left allmulticast mode [ 608.399042][ T56] block nbd1: Possible stuck request ffff888025620000: control (read@0,1024B). Runtime 420 seconds [ 608.416782][ T56] block nbd1: Possible stuck request ffff8880256201c0: control (read@1024,1024B). Runtime 420 seconds [ 608.435924][ T56] block nbd1: Possible stuck request ffff888025620380: control (read@2048,1024B). Runtime 420 seconds [ 608.447317][ T56] block nbd1: Possible stuck request ffff888025620540: control (read@3072,1024B). Runtime 420 seconds [ 608.541568][T25338] ip6erspan0: entered promiscuous mode [ 608.547604][T25338] ip6erspan0: entered allmulticast mode [ 608.782560][ T7524] net_ratelimit: 17 callbacks suppressed [ 608.782580][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 608.916571][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.066804][T25369] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 609.124458][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.152026][T25388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 609.173752][T25378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.263285][T25387] syzkaller0: entered promiscuous mode [ 609.275875][T25387] syzkaller0: entered allmulticast mode [ 609.287173][T25393] netlink: 'syz.5.5557': attribute type 10 has an invalid length. [ 609.290112][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.336930][T25393] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.346289][T25393] bridge_slave_1: left allmulticast mode [ 609.354334][T25393] bridge_slave_1: left promiscuous mode [ 609.366230][T25393] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.397544][T25393] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 609.467402][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.587686][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.668009][T25418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 609.711335][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 609.730637][T25423] netlink: 'syz.4.5566': attribute type 1 has an invalid length. [ 609.793386][T25418] bond1: Removing last arp target with arp_interval on [ 609.825747][T25423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.871735][T25424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.879365][T25424] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 609.891795][T25424] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 609.972583][T25435] veth7: entered promiscuous mode [ 609.986741][T25435] bond3: (slave veth7): Enslaving as an active interface with a down link [ 610.000696][T25442] __nla_validate_parse: 8 callbacks suppressed [ 610.000715][T25442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5570'. [ 610.052443][T25444] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 612.062178][T25440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5570'. [ 612.092317][T25448] netlink: 'syz.2.5569': attribute type 33 has an invalid length. [ 612.258526][T25449] macvtap2: entered promiscuous mode [ 612.338485][T25449] macvtap2: entered allmulticast mode [ 612.345726][T25449] bond_slave_0: entered promiscuous mode [ 612.351480][T25449] bond_slave_1: entered promiscuous mode [ 612.430636][T25449] bond0: entered promiscuous mode [ 612.453724][T25449] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 612.462907][T25449] team0: Device macvtap2 failed to register rx_handler [ 612.472066][T25449] bond0: left promiscuous mode [ 612.479005][T25449] bond_slave_0: left promiscuous mode [ 612.484518][T25449] bond_slave_1: left promiscuous mode [ 612.523913][T25453] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 612.585058][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 612.690399][T25481] netlink: 'syz.1.5580': attribute type 29 has an invalid length. [ 612.721795][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'. [ 612.734751][T25481] netlink: 'syz.1.5580': attribute type 29 has an invalid length. [ 612.798818][T25486] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5580'. [ 612.846044][T25488] netlink: 'syz.1.5580': attribute type 29 has an invalid length. [ 613.054254][T25496] netlink: 'syz.5.5587': attribute type 1 has an invalid length. [ 613.075224][T25496] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5587'. [ 613.077930][T25500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5586'. [ 613.084295][T25496] nbd: illegal input index 1048576 [ 613.089052][T25496] syzkaller1: entered promiscuous mode [ 613.104334][T25496] syzkaller1: entered allmulticast mode [ 613.132514][T25505] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 613.232082][T25500] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5586'. [ 613.272451][T25500] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5586'. [ 613.310145][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 613.338037][T25507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5584'. [ 613.520370][T25521] netlink: 'syz.2.5594': attribute type 1 has an invalid length. [ 613.803957][T25548] netlink: 'syz.0.5602': attribute type 1 has an invalid length. [ 613.827321][ T8196] net_ratelimit: 9 callbacks suppressed [ 613.827342][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 613.987345][T25554] tipc: Enabling of bearer rejected, failed to enable media [ 614.016269][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.137011][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.256071][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.406420][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.466654][T25586] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 614.526891][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.665863][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.776223][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 614.885865][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 615.007698][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 615.083046][T25592] netlink: 'syz.5.5614': attribute type 11 has an invalid length. [ 615.104721][T25592] __nla_validate_parse: 10 callbacks suppressed [ 615.104741][T25592] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5614'. [ 615.148669][T25597] macvtap2: entered promiscuous mode [ 615.166411][T25597] macvtap2: entered allmulticast mode [ 615.173868][T25597] team0: Device macvtap2 is already an upper device of the team interface [ 615.491187][T25610] netlink: 'syz.2.5620': attribute type 10 has an invalid length. [ 615.532285][T25605] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5619'. [ 615.599167][T25617] sctp: [Deprecated]: syz.5.5623 (pid 25617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.599167][T25617] Use struct sctp_sack_info instead [ 615.793257][T25635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5624'. [ 615.923418][T25643] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 615.933798][T25643] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 615.951501][T25643] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 615.961807][T25643] netlink: 'syz.1.5625': attribute type 2 has an invalid length. [ 615.973188][T25649] syzkaller1: entered promiscuous mode [ 615.973272][T25643] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 615.980439][T25649] syzkaller1: entered allmulticast mode [ 615.993683][T25643] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 616.002931][T25651] delete_channel: no stack [ 616.475156][T22048] Bluetooth: hci0: command tx timeout [ 617.247511][T25698] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.308818][T25707] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5641'. [ 617.319490][T25708] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5641'. [ 617.417153][T25711] netlink: 'syz.1.5648': attribute type 62 has an invalid length. [ 617.702528][T25725] tipc: Enabling of bearer rejected, failed to enable media [ 617.804582][T25733] pim6reg1: entered allmulticast mode [ 617.886592][T25747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5655'. [ 617.920153][T25750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5653'. [ 618.138859][T25758] netlink: 15 bytes leftover after parsing attributes in process `syz.0.5662'. [ 618.141332][T25757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5661'. [ 618.305609][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5661'. [ 618.858121][T25810] netlink: 'syz.0.5673': attribute type 21 has an invalid length. [ 618.872577][T25808] hsr0 speed is unknown, defaulting to 1000 [ 618.885972][ T8195] net_ratelimit: 27 callbacks suppressed [ 618.885994][ T8195] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 618.969301][T25810] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 618.989924][T25810] bond9 (unregistering): Released all slaves [ 619.097300][ T7515] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.106526][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.114624][ T7515] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.242701][T25826] bond0: (slave team0): Releasing backup interface [ 619.289584][T25826] team0 (unregistering): Port device team_slave_0 removed [ 619.317122][T25826] team0 (unregistering): Port device team_slave_1 removed [ 619.351639][ T7515] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.380532][ T7515] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.401656][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.588613][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.726808][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.754558][T25861] netlink: 'syz.1.5690': attribute type 1 has an invalid length. [ 619.855983][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 619.970622][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.176204][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.330173][T25897] __nla_validate_parse: 13 callbacks suppressed [ 620.330192][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 620.342148][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.463393][T25897] bond7: option miimon: invalid value (18446744073709551585) [ 620.471393][T25897] bond7: option miimon: allowed values 0 - 2147483647 [ 620.488585][T25897] bond7 (unregistering): Released all slaves [ 620.558551][ T993] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 620.680103][T25910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5706'. [ 620.973820][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5709'. [ 621.139153][T25933] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5713'. [ 621.318968][T25948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5717'. [ 621.343874][T25948] tipc: Enabled bearer , priority 0 [ 621.352880][T25948] syzkaller0: entered promiscuous mode [ 621.390584][T25948] syzkaller0: entered allmulticast mode [ 621.411559][T25946] tipc: Resetting bearer [ 621.486520][T25946] tipc: Disabling bearer [ 621.708173][T25965] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 621.922049][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5724'. [ 621.964992][T25972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5724'. [ 622.160171][T25984] validate_nla: 2 callbacks suppressed [ 622.160191][T25984] netlink: 'syz.2.5727': attribute type 1 has an invalid length. [ 622.204112][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5720'. [ 622.232408][T25984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.289766][T25984] netlink: 'syz.2.5727': attribute type 11 has an invalid length. [ 622.321734][T25994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.333005][T25994] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.347936][T25994] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 622.372910][T26003] netlink: 'syz.1.5730': attribute type 2 has an invalid length. [ 622.381114][T26003] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5730'. [ 622.384675][T25996] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 622.478936][ T7515] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 622.487522][ T7515] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 622.496235][ T7515] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 622.504634][ T7515] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 622.615967][T26014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5734'. [ 623.718659][T26082] netlink: 'syz.1.5759': attribute type 10 has an invalid length. [ 623.942797][T26094] bond0 (unregistering): Released all slaves [ 623.998328][ T8196] net_ratelimit: 29 callbacks suppressed [ 623.998350][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.136500][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.265587][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.376533][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.400124][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.485162][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.638863][ T7524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.755714][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.862703][T26138] netlink: 'syz.5.5774': attribute type 21 has an invalid length. [ 624.870965][T26138] netlink: 'syz.5.5774': attribute type 1 has an invalid length. [ 624.905889][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 624.913981][T26144] sctp: [Deprecated]: syz.2.5777 (pid 26144) Use of int in max_burst socket option. [ 624.913981][T26144] Use struct sctp_assoc_value instead [ 624.936232][T26145] wlan0: mtu greater than device maximum [ 624.936926][T26144] openvswitch: netlink: Multiple metadata blocks provided [ 625.420884][T26171] sctp: [Deprecated]: syz.5.5785 (pid 26171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.420884][T26171] Use struct sctp_sack_info instead [ 625.450173][T26173] __nla_validate_parse: 8 callbacks suppressed [ 625.450193][T26173] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5786'. [ 625.759528][T26195] netlink: 'syz.2.5791': attribute type 26 has an invalid length. [ 625.770321][T26195] 8021q: VLANs not supported on ip_vti0 [ 625.954200][T26204] netlink: 'syz.5.5797': attribute type 30 has an invalid length. [ 626.003156][T26211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5796'. [ 626.017734][T26211] netlink: 'syz.1.5796': attribute type 7 has an invalid length. [ 626.037335][T26211] netlink: 'syz.1.5796': attribute type 8 has an invalid length. [ 626.068174][T26215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5796'. [ 626.072953][T26211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5796'. [ 626.153300][T26221] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 626.267915][T26232] netlink: 'syz.2.5800': attribute type 39 has an invalid length. [ 626.318065][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.420473][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5801'. [ 626.644565][T26253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5808'. [ 626.655975][T26253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5808'. [ 626.740440][T26257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5810'. [ 626.782196][T26259] tipc: Resetting bearer [ 626.888500][T26266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5812'. [ 626.904246][T26267] siw: device registration error -23 [ 627.199006][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5819'. [ 627.973853][T26332] validate_nla: 2 callbacks suppressed [ 627.973872][T26332] netlink: 'syz.1.5832': attribute type 1 has an invalid length. [ 627.998492][T26335] netlink: 'syz.5.5835': attribute type 10 has an invalid length. [ 628.037755][T26335] team0: Device veth1_macvtap failed to register rx_handler [ 628.060985][T26339] tipc: Enabling of bearer rejected, already enabled [ 628.154122][T26344] netlink: 'syz.1.5836': attribute type 4 has an invalid length. [ 628.382559][T26362] netlink: 'syz.4.5842': attribute type 10 has an invalid length. [ 628.394156][T26362] dummy0: entered allmulticast mode [ 628.401513][T26362] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 629.008100][ T8196] net_ratelimit: 30 callbacks suppressed [ 629.008123][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.136122][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.245871][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.436445][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.556114][ T57] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.667206][ T7515] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.776068][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.845143][T26444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.886294][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.997206][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 630.101757][T26458] netlink: 'syz.1.5871': attribute type 16 has an invalid length. [ 630.371708][T26456] can: request_module (can-proto-3) failed. [ 630.482932][T26478] __nla_validate_parse: 17 callbacks suppressed [ 630.482949][T26478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5875'. [ 630.501327][T26478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5875'. [ 630.643787][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 630.661357][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 630.679832][T26486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 630.702117][T26486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 630.933720][T26495] bond9 (unregistering): Released all slaves [ 631.036728][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5879'. [ 631.804705][T26562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5889'. [ 632.330887][T26600] netlink: 'syz.5.5900': attribute type 8 has an invalid length. [ 632.340312][T26601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 632.530336][T26610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5903'. [ 632.530466][T26602] netlink: 'syz.4.5899': attribute type 9 has an invalid length. [ 632.562720][T26607] syzkaller0: entered promiscuous mode [ 632.569498][T26607] syzkaller0: entered allmulticast mode [ 632.582057][T26610] veth1_to_bond: entered allmulticast mode [ 632.601253][T26608] veth1_to_bond: left allmulticast mode [ 633.040075][T26630] tipc: Enabled bearer , priority 0 [ 633.252719][T26625] tipc: Disabling bearer [ 633.868428][T26677] tls_set_device_offload: netdev not found [ 634.105975][T26498] net_ratelimit: 33 callbacks suppressed [ 634.105996][T26498] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.245865][T26498] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.366164][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.576845][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.695746][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.795208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.805976][T26499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.820384][T26727] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 634.946750][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.142137][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.180018][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.190120][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 635.199629][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 635.216377][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.318846][T26736] pim6reg: entered allmulticast mode [ 635.365870][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.499166][T26732] hsr0 speed is unknown, defaulting to 1000 [ 635.549823][T26732] caif0 speed is unknown, defaulting to 1000 [ 635.603919][T26750] ipvlan0: entered allmulticast mode [ 635.616064][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.663061][T26752] syzkaller0: entered promiscuous mode [ 635.671579][T26752] syzkaller0: entered allmulticast mode [ 635.710788][T26754] netlink: 'syz.0.5948': attribute type 1 has an invalid length. [ 635.965973][T26764] __nla_validate_parse: 9 callbacks suppressed [ 635.965992][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5950'. [ 636.067926][T26769] netlink: 'syz.5.5951': attribute type 1 has an invalid length. [ 636.083738][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 636.164645][T26769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.177054][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5951'. [ 636.298859][T26775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5953'. [ 636.319901][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5953'. [ 636.330690][T26775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5953'. [ 636.759669][T26732] chnl_net:caif_netlink_parms(): no params data found [ 637.201766][ T8196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.278187][T22048] Bluetooth: hci1: command tx timeout [ 637.408269][ T8196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.450882][T26732] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.459829][T26732] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.473937][T26732] bridge_slave_0: entered allmulticast mode [ 637.494224][T26732] bridge_slave_0: entered promiscuous mode [ 637.551269][T26833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5967'. [ 637.620940][ T8196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.674345][T26732] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.684419][T26732] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.696420][T26732] bridge_slave_1: entered allmulticast mode [ 637.704696][T26732] bridge_slave_1: entered promiscuous mode [ 637.801439][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5972'. [ 637.928831][T26844] netlink: 'syz.1.5972': attribute type 1 has an invalid length. [ 637.937938][T26844] netlink: 'syz.1.5972': attribute type 2 has an invalid length. [ 637.960698][T26846] : entered promiscuous mode [ 638.022170][T26732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.090547][T26732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.187755][T26732] team0: Port device team_slave_0 added [ 638.210211][T26732] team0: Port device team_slave_1 added [ 638.257741][T26867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5980'. [ 638.354505][T26732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.372399][T26732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.419701][T26732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.472834][T26732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.490291][ T56] block nbd1: Possible stuck request ffff888025620000: control (read@0,1024B). Runtime 450 seconds [ 638.501329][ T56] block nbd1: Possible stuck request ffff8880256201c0: control (read@1024,1024B). Runtime 450 seconds [ 638.512811][ T56] block nbd1: Possible stuck request ffff888025620380: control (read@2048,1024B). Runtime 450 seconds [ 638.524924][ T56] block nbd1: Possible stuck request ffff888025620540: control (read@3072,1024B). Runtime 450 seconds [ 638.542907][T26732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.575374][T26732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.593889][T26877] syzkaller1: entered promiscuous mode [ 638.600821][T26877] syzkaller1: entered allmulticast mode [ 638.799035][T26732] hsr_slave_0: entered promiscuous mode [ 638.809074][T26732] hsr_slave_1: entered promiscuous mode [ 638.816662][T26732] debugfs: 'hsr0' already exists in 'hsr' [ 638.823095][T26732] Cannot create hsr debugfs directory [ 639.080906][T26886] netlink: 'syz.0.5984': attribute type 2 has an invalid length. [ 639.091519][T26887] netlink: 'syz.1.5986': attribute type 30 has an invalid length. [ 639.101279][T26888] netlink: 'syz.1.5986': attribute type 30 has an invalid length. [ 639.146031][T26886] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5984'. [ 639.201310][T26893] net_ratelimit: 6 callbacks suppressed [ 639.201334][T26893] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 639.355700][T22048] Bluetooth: hci1: command tx timeout [ 639.421260][ T8196] bond2 (unregistering): (slave gretap1): Releasing active interface [ 639.522804][ T8196] dvmrp0 (unregistering): left allmulticast mode [ 639.670369][ T8196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.684345][ T8196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.697024][ T8196] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 639.719559][ T8196] bond0 (unregistering): Released all slaves [ 639.734606][ T8196] bond1 (unregistering): Released all slaves [ 639.891555][ T8196] bond2 (unregistering): Released all slaves [ 639.904420][ T8196] bond3 (unregistering): Released all slaves [ 640.041104][ T8196] bond4 (unregistering): Released all slaves [ 640.056856][ T8196] bond5 (unregistering): Released all slaves [ 640.070060][ T8196] bond6 (unregistering): Released all slaves [ 640.212667][ T8196] bond7 (unregistering): Released all slaves [ 640.226419][ T8196] bond8 (unregistering): Released all slaves [ 640.312227][T26887] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 640.313638][T26888] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 640.533666][ T8196] tipc: Disabling bearer [ 640.825380][ T8196] tipc: Left network mode [ 640.946281][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.129329][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6000'. [ 641.139054][T26937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 641.149770][T26937] netlink: 'syz.1.6000': attribute type 14 has an invalid length. [ 641.168028][T26937] netlink: 'syz.1.6000': attribute type 13 has an invalid length. [ 641.266312][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.346297][T26945] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5999'. [ 641.407942][T26499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.538193][T26940] syzkaller1: entered promiscuous mode [ 641.543708][T26940] syzkaller1: entered allmulticast mode [ 641.947265][T26955] netlink: 'syz.1.6005': attribute type 12 has an invalid length. [ 642.266992][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.278348][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.288182][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.298638][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.312648][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.340355][T26955] bond0: option primary_reselect: invalid value (255) [ 642.350539][T26955] bond0 (unregistering): Released all slaves [ 642.370432][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.382878][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.391974][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.399607][T26959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.401649][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.428077][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.495629][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 642.616209][ T7517] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 642.658197][T26960] hsr0 speed is unknown, defaulting to 1000 [ 642.726445][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 642.741774][T26964] hsr0 speed is unknown, defaulting to 1000 [ 642.751610][T26960] caif0 speed is unknown, defaulting to 1000 [ 642.760421][ T8196] macvlan0: left promiscuous mode [ 642.772802][ T8196] batadv_slave_0: left promiscuous mode [ 642.839255][ T8196] hsr_slave_0: left promiscuous mode [ 642.859784][ T8196] hsr_slave_1: left promiscuous mode [ 642.929363][ T8196] vlan0: left allmulticast mode [ 642.939941][ T8196] veth0_vlan: left allmulticast mode [ 642.995078][ T8196] vlan0: left promiscuous mode [ 643.000602][ T8196] veth1_macvtap: left promiscuous mode [ 643.017222][ T8196] veth0_macvtap: left promiscuous mode [ 643.023183][ T8196] veth1_vlan: left promiscuous mode [ 643.790267][ T8196] pim6reg (unregistering): left allmulticast mode [ 644.400040][ T5869] Bluetooth: hci1: command tx timeout [ 644.477621][ T5869] Bluetooth: hci2: command tx timeout [ 644.582304][T26964] caif0 speed is unknown, defaulting to 1000 [ 644.588774][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 644.669081][T26989] batadv0: entered promiscuous mode [ 644.714159][T27001] netlink: 'syz.1.6015': attribute type 11 has an invalid length. [ 644.731006][T26989] bond0: entered promiscuous mode [ 644.746443][T27001] netlink: 'syz.1.6015': attribute type 11 has an invalid length. [ 644.755860][T27001] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6015'. [ 644.769378][T26989] bond_slave_0: entered promiscuous mode [ 644.781812][T26989] bond_slave_1: entered promiscuous mode [ 644.788103][T26989] dummy0: entered promiscuous mode [ 644.802004][T26989] hsr1: entered allmulticast mode [ 644.807205][T26989] batadv0: entered allmulticast mode [ 644.813073][T26989] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 644.856269][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 645.126538][T26499] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 645.364058][T26960] chnl_net:caif_netlink_parms(): no params data found [ 645.504349][ T8196] IPVS: stop unused estimator thread 0... [ 645.596125][T27027] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 645.609052][T27027] bond0 (unregistering): Released all slaves [ 645.644406][T27032] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6024'. [ 645.762186][T27040] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6025'. [ 645.777409][T26960] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.781545][T27041] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6025'. [ 645.787340][T26960] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.815699][T26960] bridge_slave_0: entered allmulticast mode [ 645.823626][T26960] bridge_slave_0: entered promiscuous mode [ 645.858779][ T8196] bridge_slave_1: left allmulticast mode [ 645.871685][ T8196] bridge_slave_1: left promiscuous mode [ 645.882990][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.910705][ T8196] bridge_slave_0: left allmulticast mode [ 645.931570][ T8196] bridge_slave_0: left promiscuous mode [ 645.937967][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.088398][ T8196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.110636][ T8196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.121774][ T8196] bond0 (unregistering): Released all slaves [ 646.136231][T26960] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.143577][T26960] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.151678][T26960] bridge_slave_1: entered allmulticast mode [ 646.160345][T26960] bridge_slave_1: entered promiscuous mode [ 646.192159][T27050] netlink: 'syz.4.6028': attribute type 4 has an invalid length. [ 646.306598][T26964] chnl_net:caif_netlink_parms(): no params data found [ 646.326366][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.359732][T26960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.475904][ T5869] Bluetooth: hci1: command tx timeout [ 646.498559][T26960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.555849][ T5869] Bluetooth: hci2: command tx timeout [ 646.663496][T27070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.688507][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.750335][ T8196] hsr_slave_0: left promiscuous mode [ 646.762490][ T8196] hsr_slave_1: left promiscuous mode [ 646.783234][ T8196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.803684][ T8196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.989058][ T8196] team0 (unregistering): Port device team_slave_1 removed [ 647.022919][ T8196] team0 (unregistering): Port device team_slave_0 removed [ 647.221387][T26960] team0: Port device team_slave_0 added [ 647.324271][T27093] netlink: 'syz.4.6039': attribute type 1 has an invalid length. [ 647.371356][T26960] team0: Port device team_slave_1 added [ 647.402756][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6039'. [ 647.462846][T26964] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.473402][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.482733][T26964] bridge_slave_0: entered allmulticast mode [ 647.492401][T26964] bridge_slave_0: entered promiscuous mode [ 647.531730][T26964] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.556424][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.563726][T26964] bridge_slave_1: entered allmulticast mode [ 647.567215][T27097] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6041'. [ 647.583578][T26964] bridge_slave_1: entered promiscuous mode [ 647.598695][T26960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.623332][T26960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.711576][T26960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.891371][T26960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.908503][T26960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.969321][T26960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.021408][T26964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.161339][T26964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.324413][T26960] hsr_slave_0: entered promiscuous mode [ 648.348928][T26960] hsr_slave_1: entered promiscuous mode [ 648.366249][T26960] debugfs: 'hsr0' already exists in 'hsr' [ 648.372023][T26960] Cannot create hsr debugfs directory [ 648.394134][T27137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6050'. [ 648.411055][T26964] team0: Port device team_slave_0 added [ 648.460293][T27134] tipc: Enabled bearer , priority 0 [ 648.468504][T27134] syzkaller0: entered promiscuous mode [ 648.474096][T27134] syzkaller0: entered allmulticast mode [ 648.485001][T26964] team0: Port device team_slave_1 added [ 648.555428][ T5869] Bluetooth: hci1: command tx timeout [ 648.626520][T26964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.633567][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.659650][ T5869] Bluetooth: hci2: command tx timeout [ 648.671250][T26964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.702590][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6053'. [ 648.722349][T27149] tipc: Resetting bearer [ 648.732932][T26964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.742091][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.769201][T26964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.789053][T27133] tipc: Resetting bearer [ 648.811890][T27133] tipc: Disabling bearer [ 648.821289][T27154] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6054'. [ 648.906959][T26964] hsr_slave_0: entered promiscuous mode [ 648.923079][T26964] hsr_slave_1: entered promiscuous mode [ 648.929666][T26964] debugfs: 'hsr0' already exists in 'hsr' [ 648.935579][T26964] Cannot create hsr debugfs directory [ 649.323390][T27176] netlink: 'syz.1.6061': attribute type 21 has an invalid length. [ 649.404044][T26960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 649.422741][T26960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 649.504655][T26960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 649.536092][T26960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 649.663578][T26964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.702773][T26964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.720832][T26964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.751444][T26964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 649.846652][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.003809][T26960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.050332][T26960] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.070605][T26504] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.077800][T26504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.128888][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.136133][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.173192][T26964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.224164][T26964] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.256139][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.273331][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.280550][ T7513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.303668][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.310874][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.359295][T27218] netlink: 'syz.5.6070': attribute type 1 has an invalid length. [ 650.368492][T27218] netlink: 'syz.5.6070': attribute type 4 has an invalid length. [ 650.371783][T26960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.377516][T27218] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6070'. [ 650.446770][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.555965][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.627850][T27224] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6071'. [ 650.641512][ T5869] Bluetooth: hci1: command tx timeout [ 650.673334][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6071'. [ 650.692024][T27224] macvlan0: entered promiscuous mode [ 650.699594][T27224] batadv_slave_1: entered promiscuous mode [ 650.708701][T27224] debugfs: 'hsr1' already exists in 'hsr' [ 650.715966][T27224] Cannot create hsr debugfs directory [ 650.722404][T22048] Bluetooth: hci2: command tx timeout [ 650.760066][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.864739][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6072'. [ 650.877606][T27231] openvswitch: netlink: Unknown nsh attribute 0 [ 650.883959][T27231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.916693][T26964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.936210][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.961744][T27234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6072'. [ 650.970255][T26960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.075872][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 651.344191][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 651.388293][T27257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.572522][T27254] netlink: 'syz.4.6075': attribute type 1 has an invalid length. [ 651.742640][T27254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.836923][T26964] veth0_vlan: entered promiscuous mode [ 651.893298][T26964] veth1_vlan: entered promiscuous mode [ 652.027300][T27290] netlink: 'syz.1.6082': attribute type 1 has an invalid length. [ 652.046749][T26964] veth0_macvtap: entered promiscuous mode [ 652.047104][T27290] nbd: illegal input index 1048576 [ 652.101503][T26964] veth1_macvtap: entered promiscuous mode [ 652.137649][T26960] veth0_vlan: entered promiscuous mode [ 652.197338][T26960] veth1_vlan: entered promiscuous mode [ 652.249969][T26964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.323570][T26960] veth0_macvtap: entered promiscuous mode [ 652.356642][T26964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.420622][T26504] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.432705][T26504] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.517217][T26505] [ 652.519600][T26505] ============================================ [ 652.525749][T26505] WARNING: possible recursive locking detected [ 652.531916][T26505] syzkaller #0 Not tainted [ 652.536333][T26505] -------------------------------------------- [ 652.542481][T26505] kworker/u8:13/26505 is trying to acquire lock: [ 652.548815][T26505] ffffe8ffffd8d5e8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 652.558071][T26505] [ 652.558071][T26505] but task is already holding lock: [ 652.565425][T26505] ffffe8ffffc8d918 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 652.574645][T26505] [ 652.574645][T26505] other info that might help us debug this: [ 652.582690][T26505] Possible unsafe locking scenario: [ 652.582690][T26505] [ 652.590127][T26505] CPU0 [ 652.593392][T26505] ---- [ 652.596653][T26505] lock(&pd_list->lock); [ 652.600969][T26505] lock(&pd_list->lock); [ 652.605286][T26505] [ 652.605286][T26505] *** DEADLOCK *** [ 652.605286][T26505] [ 652.613411][T26505] May be due to missing lock nesting notation [ 652.613411][T26505] [ 652.621709][T26505] 3 locks held by kworker/u8:13/26505: [ 652.627147][T26505] #0: ffff88801eb3a948 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 652.639060][T26505] #1: ffffc90011877bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 652.650884][T26505] #2: ffffe8ffffc8d918 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 652.660541][T26505] [ 652.660541][T26505] stack backtrace: [ 652.666417][T26505] CPU: 0 UID: 0 PID: 26505 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 652.666449][T26505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 652.666468][T26505] Workqueue: pdecrypt_parallel padata_parallel_worker [ 652.666500][T26505] Call Trace: [ 652.666507][T26505] [ 652.666514][T26505] dump_stack_lvl+0x189/0x250 [ 652.666537][T26505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.666555][T26505] ? __pfx__printk+0x10/0x10 [ 652.666579][T26505] ? print_lock_name+0xde/0x100 [ 652.666601][T26505] print_deadlock_bug+0x28b/0x2a0 [ 652.666620][T26505] validate_chain+0x1a3f/0x2140 [ 652.666641][T26505] ? __queue_work+0x102/0xfb0 [ 652.666657][T26505] ? look_up_lock_class+0x74/0x170 [ 652.666675][T26505] ? register_lock_class+0x51/0x320 [ 652.666697][T26505] ? __queue_work+0xc56/0xfb0 [ 652.666715][T26505] __lock_acquire+0xab9/0xd20 [ 652.666740][T26505] ? padata_do_serial+0x73e/0xb80 [ 652.666760][T26505] lock_acquire+0x120/0x360 [ 652.666782][T26505] ? padata_do_serial+0x73e/0xb80 [ 652.666804][T26505] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 652.666827][T26505] _raw_spin_lock+0x2e/0x40 [ 652.666850][T26505] ? padata_do_serial+0x73e/0xb80 [ 652.666875][T26505] padata_do_serial+0x73e/0xb80 [ 652.666900][T26505] ? padata_parallel_worker+0x44/0x1d0 [ 652.666921][T26505] padata_parallel_worker+0x75/0x1d0 [ 652.666942][T26505] ? process_scheduled_works+0x9ef/0x17b0 [ 652.666958][T26505] process_scheduled_works+0xae1/0x17b0 [ 652.666985][T26505] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.667008][T26505] worker_thread+0x8a0/0xda0 [ 652.667034][T26505] kthread+0x70e/0x8a0 [ 652.667055][T26505] ? __pfx_worker_thread+0x10/0x10 [ 652.667071][T26505] ? __pfx_kthread+0x10/0x10 [ 652.667090][T26505] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.667105][T26505] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.667121][T26505] ? __pfx_kthread+0x10/0x10 [ 652.667140][T26505] ret_from_fork+0x439/0x7d0 [ 652.667158][T26505] ? __pfx_ret_from_fork+0x10/0x10 [ 652.667176][T26505] ? __switch_to_asm+0x39/0x70 [ 652.667196][T26505] ? __switch_to_asm+0x33/0x70 [ 652.667216][T26505] ? __pfx_kthread+0x10/0x10 [ 652.667235][T26505] ret_from_fork_asm+0x1a/0x30 [ 652.667262][T26505] [ 652.905541][T26960] veth1_macvtap: entered promiscuous mode [ 652.912426][T26504] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.927537][T26504] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.972880][T26964] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 652.991993][T26960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.012304][ T7513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.013764][T26964] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 653.029842][ T7513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.032834][T26960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.060391][ T8196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.069908][ T8196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.087123][ T8196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.099469][ T8196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.118330][T26498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.126659][T26498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.137776][T26960] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 653.179568][T26505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.183658][T26960] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 653.189701][T26505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.225430][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.233318][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.915977][T26505] net_ratelimit: 24 callbacks suppressed [ 654.916000][T26505] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.035706][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.145222][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.255463][ T8196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.365284][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.475720][T26505] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.585501][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.705366][T26504] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.815379][T26505] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.925290][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 658.955174][ T8196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 659.965312][ T7513] net_ratelimit: 35 callbacks suppressed [ 659.965335][ T7513] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.085783][T26498] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.195849][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.305489][T26505] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.415309][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.525393][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.635331][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.745370][T26505] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.855719][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.964950][ T7528] bond2: (slave ip6gretap1): failed to get link speed/duplex