last executing test programs: 4.722481093s ago: executing program 2 (id=7791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x6, @multicast, @private2={0xfc, 0x2, '\x00', 0x1}, @multicast, @dev={0xfe, 0x80, '\x00', 0xd}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x628d0}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x21}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) 4.611343909s ago: executing program 2 (id=7795): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="053c8100", 0x4, 0xb00, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x0, 0x0, 0xf, 0x0, "df6e1ca3102112016f1e9ba020f5ea3d74c012ad64494e41eff5108cd341662409ec80cd68fd3ba2e96ee3f8d8a3e4e561e68eaddb300484fa8eb74c3f59fb9fd1ee3a622d36454a2d231c9584a4dd07"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 3.662987947s ago: executing program 2 (id=7812): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xca, 0xd1, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x64, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xc, "465683ab95982fde026f"}, @generic={0x82, 0x4, "199e"}, @end, @lsrr={0x83, 0x23, 0x58, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x1a}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x89, 0xf, "71b3de98fccd38e756de077637"}, @end, @lsrr={0x83, 0x7, 0xa4, [@multicast2]}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8009, 0x8, 0x3, 0x100, {{0x2d, 0x4, 0x3, 0x7, 0xb4, 0x64, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x35, [@broadcast]}, @noop, @timestamp_prespec={0x44, 0xc, 0xe2, 0x3, 0x1, [{@rand_addr=0x64010101, 0x8001}]}, @timestamp_addr={0x44, 0xc, 0x9a, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @rr={0x7, 0xf, 0x40, [@loopback, @private=0xa010102, @loopback]}, @noop, @timestamp_addr={0x44, 0x54, 0x2d, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@remote, 0x8}, {@empty, 0x6}, {@local, 0x7903}, {@broadcast, 0x3ff}, {@multicast1, 0x8}, {@private=0xa010102, 0x6}, {@local, 0x7}]}, @rr={0x7, 0x17, 0xf3, [@multicast1, @loopback, @private=0xa010101, @rand_addr=0x64010101, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@mpls_getroute={0x14c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x80, 0x20, 0xd, 0xfe, 0x4, 0xc8, 0x8, 0x2000}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0x7}, {0x7}, {0x4be2, 0x0, 0x1}, {0x6}, {0x0, 0x0, 0x1}, {0x2}, {0x4}, {0x200, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x800}, {0x6, 0x0, 0x1}, {0x5c5, 0x0, 0x1}, {}, {0x5c}, {0x9}, {0xf41b4}, {0x0, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x94b1}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5}, {0xffffe, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x8a}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x27cc}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}, {0x6}, {0x792, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7fff}, {0x10, 0x0, 0x1}, {0xc0000, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}, {0x1}, {0x5}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5}, {0x400}, {0x9}, {0x7, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}, {0x100}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, r5}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44051}, 0xc040) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, r5}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44051}, 0xc040) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6tnl0\x00', r5, 0x4, 0x5, 0x82, 0x6, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x2, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6tnl0\x00', r5, 0x4, 0x5, 0x82, 0x6, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x2, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000f00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000900)={0x590, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0xd7, 0x1, 0x3}, {0x4, 0x10, 0xd7, 0x400}, {0x6, 0x3, 0xce, 0x7}, {0x3, 0xc1, 0x10, 0x5}, {0x9, 0xdf, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x9}, {0x1, 0x6, 0x1, 0x6}, {0x9, 0xf, 0xa4, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r9}, {0xdc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe815}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x590}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r6) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xc8, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbfd8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe84}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0xc8}}, 0x80000) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x108, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd20}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6dcbbdb1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc9ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2293}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20048040}, 0x40084) (async) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x108, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd20}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6dcbbdb1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc9ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2293}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20048040}, 0x40084) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001340)={{{@in=@empty, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000001440)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001340)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000001440)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001480)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e21, 0x0, 0x4e24, 0xefe2, 0xa, 0x80, 0x80, 0x3c, r2, r13}, {0x8001, 0xd, 0x7, 0x6, 0x8001, 0x6, 0x7, 0x100000000}, {0xe6a4, 0x10000, 0xff, 0x9}, 0x63, 0x6e6bb7, 0x1, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x0, 0x0, 0xa6dd6934a4ae69d3, 0x8, 0x800, 0x8, 0xfff}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001480)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e21, 0x0, 0x4e24, 0xefe2, 0xa, 0x80, 0x80, 0x3c, r2, r13}, {0x8001, 0xd, 0x7, 0x6, 0x8001, 0x6, 0x7, 0x100000000}, {0xe6a4, 0x10000, 0xff, 0x9}, 0x63, 0x6e6bb7, 0x1, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x0, 0x0, 0xa6dd6934a4ae69d3, 0x8, 0x800, 0x8, 0xfff}}, 0xe8) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000015c0), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r14, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc080) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001700)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @loopback}, 0xc, 0x0, 0x0, 0x0, 0x6, &(0x7f00000016c0)='veth1_to_bond\x00', 0x9, 0x2}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001700)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @loopback}, 0xc, 0x0, 0x0, 0x0, 0x6, &(0x7f00000016c0)='veth1_to_bond\x00', 0x9, 0x2}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001780)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e22, 0xfffd, 0x4e24, 0x8, 0xa, 0xe0, 0x80, 0x1, r10, r13}, {0x6, 0x8, 0x1, 0xe83b, 0x0, 0x80000001, 0x149c, 0x6}, {0x1200000, 0x7, 0x6, 0x2}, 0x53, 0x6e6bbd, 0x0, 0x1, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d4, 0x6c}, 0xa, @in=@private=0xa010101, 0x3505, 0x3, 0x1, 0x9, 0xfffffffb, 0x200, 0x1}}, 0xe8) r15 = accept4$netrom(r6, 0x0, &(0x7f0000001880), 0x0) accept4$netrom(r15, &(0x7f00000018c0)={{}, [@null, @remote, @netrom, @default, @default, @netrom, @rose, @null]}, &(0x7f0000001940)=0x48, 0x80800) (async) accept4$netrom(r15, &(0x7f00000018c0)={{}, [@null, @remote, @netrom, @default, @default, @netrom, @rose, @null]}, &(0x7f0000001940)=0x48, 0x80800) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r16 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r16}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x840) 3.567948459s ago: executing program 3 (id=7813): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x70bd2b, 0x4, {0x0, 0x0, 0x4, r1, 0x300, 0x18826}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x2}]}]}, 0x8f}}, 0x0) 3.420756638s ago: executing program 3 (id=7816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto(r1, 0x0, 0x0, 0x40040, &(0x7f0000000480)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x26, 0x81, "986df5ac9b126f11d43e9ab0906efa027b19a58626d7225a6b85438a9a31167bd8787d898c861cfb3ddf710100805ee8c4aa1ff5523d6cb89440e156b45c41", 0x1d}, 0xffffffcd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRES32=0x0, @ANYBLOB="fc86d8eb963c1f8b2e00000000000000e00000010000000000000000ffe4000033f67c1fa5525326000000000000000000000000000000000a00000000000000", @ANYRESOCT=r2], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x1405c891) 3.420289278s ago: executing program 2 (id=7817): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x3346, 0x6}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x10, 0x2c, 0x1}, 0x10}], 0x1}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r13, @ANYBLOB="2584d877dbb5c538e5534fa0c2005651daf122ea47447a23e9772a9599d61ce84874f6f64771918c5bd6e1f93f20d8cb0988a2950862548176"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000018c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000016c0)=0xe8) r15 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001a00)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000001b40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) sendmsg$unix(r0, &(0x7f0000001d00)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000540)="837de9637fa63017eec6556f6c70dd0c1705ec1cb2", 0x15}, {&(0x7f0000000580)="355efe5b4e45844dfaded6efff9693fb2f0304d22462ce62d5da60cde7d187ed4e0605d670fa8aa1ef908601c5723700b411507e47e8e20925bef865a0ab077f505efddade1fcd7498957e8af35aefd7101af90ce379e70262294df2845a7aead1e95ddc485af0b9f1a591fed2b5c70becc06d610a3c08065e3720ddfc2e004607e1a70e5cffd69068fb352936fb8bd26ffbe574c1b983ffa251dadfc38eb8a6726158d55e6369820fb4c87748b07450e88f18aefd3800d28094ccf6834bec570cbf23a7cbee2a6ad1fcd333ed983ca926996390", 0xd4}, {&(0x7f0000000680)="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", 0x1000}], 0x3, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="13ab4fe517fec3012d8ce21eb86f0f32fe729423a94dcd153db77e035ee7d55859fae0fb2c12243034ec6383e57df617e3e9b8170186c08964e9907193a0ecc07541c9dfbb3fccae1718e0f9ed", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000471ea2c71b4f668a7f77cfad51f88fee2b7f28fcd50df874fe98f24fb90bb00a9eb25852719148a391ea15924a2895c4b507caa16e62c0275eea9ea33652feacb08e82b2a5d9b0179fe17bd5c9db3488dce4dda682", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="002100001800eabef3f2e5ec06a3000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x400}, 0x20000000) r19 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r20 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a280000000e0a01020000000000000000070000020900010073797a3100000000080004400000000314010000020a010200000000000000000a00000a0800024000000000f2000600b2124bbcb3ad01495b3f793e0bb6a07486ba9d09d6ec266b20218c24490c279b78de036c4072876817fd0c46b4f7f76cfaa4cf3fa282bc96182edda272559c757dcda8c1307eae0f02eea73806db26e75a18c2feeb4c1b60f83f4ac8e6cd92308b01df0a0a6297bd40707d1ac60fee7cf42ca594f4673daf5108ed1c5688bd632075f6fc51f7ab154460ea771136ff268a2e02c576a42cefc679aaa486b97910b25b4b56f7d9dfce280676b0191cb61280ea1aa9fe9eb1a0ae38e5409f66a0aa3489e5005386e9fc88243507e8ef2819d6daa4ec8d07b8c5203fe3f367faf17ad8e58097a7e648ce72b8b6f9ea5c71b18a030000140000001100010000000000000000000300000a"], 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r20, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="16090000761e238692a138ea1fbdae4c73b191ffffffffff7f50a254d9f7795e", @ANYRES16=r19, @ANYBLOB="00022abd7000fedbdf250500000006001d00080000000c000f00040000000000000008000a0003000000080011000100000006001a004e24000008001700", @ANYRES32=r20, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r21, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r21, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) 3.302403769s ago: executing program 2 (id=7821): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f5, 0x200, 0x70bd2c, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040050}, 0x40010) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)={0x90, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x800) poll(&(0x7f0000000100)=[{r7, 0x18d}], 0x1, 0x8001) close(r7) write$cgroup_subtree(r8, &(0x7f0000000040), 0xfffffc3f) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x81, 0x5, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40, 0x707, 0x2, 0x9}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4}, 0x38) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0xffffffba, 0x6, 0x4, 0xa102, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @value=r6}, 0x50) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FIDEDUPERANGE(r13, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000000000000000000000000002008ddc10000000000000000"]) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb9a1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}]}, &(0x7f0000000140)='GPL\x00', 0x48, 0xed, &(0x7f0000000200)=""/237, 0x40f00, 0x32, '\x00', r9, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x10001, 0x5}, 0x10, 0x0, r6, 0x7, &(0x7f0000000480)=[r10, r11], &(0x7f0000000700)=[{0x3, 0x2, 0x6, 0x5}, {0x2, 0x2, 0x2, 0xb}, {0x3, 0x3, 0x2, 0x6}, {0x0, 0x4, 0x7, 0x1}, {0x3, 0x4, 0x6, 0x6}, {0x2, 0x1, 0x3, 0xf9bcfa85707e57a2}, {0x10001, 0x2, 0x6, 0x2}], 0x10, 0xa5b}, 0x94) 2.687786283s ago: executing program 2 (id=7824): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0x0, 0x10000000, "c8119df9ba26"}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x3, 0x9, 0x40, @mcast1, @loopback, 0x75d097535a7f7474, 0x7, 0x2}}) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000007c0)=0x1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e20, 0x8, @mcast2, 0x3}, {0xa, 0x4e20, 0x7, @mcast2, 0x5}, 0x1, {[0x80, 0x4, 0x80000001, 0xffffff21, 0xcb, 0x10001, 0x7, 0x5c]}}, 0x5c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600400001600200000080000fbdbdf25fc0100000000000000000000000000da200100000000000000000000000000024e22fffe4e2000070a00408032000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ff010000000000000000000000000001000004d6320000007f00000100000000000000000000000002000000000000001000000000000000a60000000000000002000000000000000800000000000000f10b000000000000c80d000000000000090000000000000009000000000000000200000000000000750100000000000006000000000000000c0000005f930000800000002bbd700000000000020000030800000000000000a20008009e000800010196007034aca26a015c5b3bc70019706655720cb30e6cb49c74635dcc39cf8538f305ff764480ae564d2527e1712efb5ec790c97edfe2f3964649eb73ccbb142a6e0b284effa0663ed6943e339605827e4fae981ba5d1530c0c3ffca35ec9a1cbd63ce98f5965af7d181011b918035b33801f0aca8a495b27dc00bbd28e81c8cc784d28d02cccadd27a88e62cb0f77f0c029dd2413f7e46f1000008001f0004000000e400060000000000000000000000ffff640101007f0000010000000000000000000000004e2400034e2283fa0a00102006000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa000004d23c0000007f00000100000000000000000000000004000000000000000700000000000000ff030000000000000500000000000000600500000000000000000000000000000400000000000000010000000000000009000000000000000700000000000000f7ffffffffffffffffffffffffffffff280200005f000000080000002cbd7000013500000a0001082200000000000000"], 0x460}, 0x1, 0x0, 0x0, 0x80}, 0x200000b5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.68710523s ago: executing program 0 (id=7825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x3c}}, 0x0) 2.535038974s ago: executing program 0 (id=7829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83c00fe8000000000000000000040000000aaff02000000000000000000000000000106"], 0xffe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.534652675s ago: executing program 3 (id=7830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) (async) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) (async) epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@loopback, 0x1800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000a0601010000000d0000000001000000050001000700000008000940000000020000000000000000000000000000000000000000702b1fbcb49b75ba6ff8333467bd287ad7f4d2e67fff1e7909c56b510689d241dd2f92375ab44502037f138d63b5a8eb45e561f67b448e5eb5828c05"], 0x38}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r2, 0xaa4f9000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) 2.23975065s ago: executing program 0 (id=7835): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 2.222985861s ago: executing program 3 (id=7836): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) 2.070750976s ago: executing program 0 (id=7837): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa2aaaaac772528a7e77845d86dd60ff00f500140600fee06f79cb853d8219000000000000aa35fd8bf0ff7f00000000000000000001000000000000000000000000000000f84562166b4c641c92ec8b561985cb332930e9d475b5a95cdbdec174bb626707f324e3f40cc3b27fe8d9"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81acca, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300008000000000000000a01040000000039d2a3e666b541cd08000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010000000000657400007c0102800400030008000240000000006b010100"], 0x210}}, 0x0) 2.018523844s ago: executing program 3 (id=7839): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1.806954549s ago: executing program 3 (id=7842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3e30000614db84000", @ANYRES32=r2, @ANYBLOB="00000000a10000001c0012800b00010067656e65766500000c000280060005004e210000"], 0x3c}, 0x1, 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000003c0)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000400)='ns/time\x00') r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)) 1.80623482s ago: executing program 1 (id=7843): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000400)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xffffffffffffff71) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000a7cf56529ce18f00000000000000000000c456e2b83dab56bf232c8f419309202b"], 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r1, 0x5}, 0x10) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000003500)=""/4076, 0xfec}, {&(0x7f0000000000)=""/181, 0xb5}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000c80)=""/271, 0x10f}, {&(0x7f0000000540)=""/82, 0x52}], 0x9}, 0x11}], 0x1, 0x2102, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) getpeername$packet(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000308010100000000000000000000000005000300df000000540004800800024000000003080b004000000006080003ff000001ff080004aa947bab4000001000080006400001000008008adab33240422f6306400000564d08000140ffffff0108000240000000030800054000000010abb21828a026d79d0aa7c61316db5adaab4d5d0f"], 0x70}}, 0x810) r6 = socket$inet6(0xa, 0xa, 0x98d) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}, 0x1c) 1.532474416s ago: executing program 4 (id=7847): syz_emit_ethernet(0x13ea, &(0x7f00000018c0)={@remote, @empty, @void, {@ipv4={0x800, @gre={{0x11, 0x4, 0x2, 0x5, 0x13dc, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@noop, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x7, [{@loopback, 0x7fff}, {@local, 0x8}, {@loopback, 0x2}]}, @generic={0x89, 0x11, "12d84d87b384dfe4ad5d5bc437cf97"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x44, 0x2, [0x400, 0xc7f], "7f0ae3f36f0232be93d7404780472b9b15ed64ad9d24dd7e1c5422fed34155c9f02bbee721a81366db80fb5fd281cb343645066f4d5d73560b93a0ff4d9375d2c2dd48c1"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4], "6e131cb0e098b5edc8d1bbb230efb1877aa03f79f408f683e9daba543214d43314e83b6a267f90bb8c940780f3a4251c100d6b97569a39c1c8a10959d3bb322b41201ff9d6dab26528a6be2cffeb365532f77a87e49457d72de11aaeb289c387d331a24910d4a803c91ebb75e64b8ba915ee17522ea9aabc53d58dbfc7dc72c54af033378f4c019791b3656fe5e4b9c84191f9c7c71f1779899ff93ba63977f25f63bd99d0e68d8585bb06325b30256feb000c9d77475b01048f3c7008bc930d0da81bad3a13ee76501a7ef28c05118fae226cd9a7d00098d00860ec64ac692fa66b9212dc2ebb0056b9d8d9afea3147b51ae2b3"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "80cae52f2a69c8a1f81bc8ae35dbbf2ff2732b44e5914b7319ba354f79016807fa34b4dfea2a59cbb21dee73ecacfe89296c472004e7d1f9b7d8adf49929bca306bbecad8317b22a686db394f9ce605ae40d0d51c237af74247cc32177bf6278824968c4d138968f78137304681a385e8d10b2"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x2, 0x1, 0x0, 0x0, 0x6, 0xa}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x2, 0x3, 0x1, 0x3, 0x0, 0x2}, 0x2, {0x0, 0x77, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "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"}}}}}}, 0x0) 1.427946374s ago: executing program 4 (id=7848): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"706d907c0de17d743e75a1530c14386a", 0x0, 0x0, {0x5, 0x2}, {0x7ff, 0xd}, 0xfffffffffffff000, [0xfff, 0x0, 0x1000, 0xa17, 0xfffffffffffffffa, 0x0, 0x0, 0x1b, 0x7, 0x8, 0x4, 0x5, 0x9, 0x2, 0x2, 0x8]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001440)={0x0, 0xd, 0x1000, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{r1}, r2, 0x18, @inherit={0x78, &(0x7f0000000200)={0x1, 0x6, 0xff, 0x8192, {0x5, 0x3, 0x9, 0x3, 0x1}, [0xfe7, 0x9, 0x7, 0x4fc, 0x10000, 0x3]}}, @devid=r3}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) 1.400822366s ago: executing program 4 (id=7849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000001400048008000240000000000800dc00000000000900010073797a310000000008000a4000000003148400001100010000000000000000000000000a", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="5a7171e224574b317044ad8f37d6b425aada9f20112fbbfd48f339ddbcd4eced3f8d15f639854129bc923cabce9a82bb262c649e6a1e9cb83141651190884a2b057859941569b43c36eeada340d70317c0ae328152b9dd22cdf992afbc2a81d926b43ff077f5a621199793f1f43e08ffa8c1f297ee512dd7757d504810d5b62779fa6353a95e267f19bc416b8d33b4620533eb69003d9d215b13d6186000df8c288063deaa4961570fad383478911d2ae6bc68e8b02ec8d49f196ea7d769555bd990b3967ce275d08bd676"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x8051) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x80000) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000007c0), &(0x7f00000002c0)=@tcp6}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) r6 = getuid() r7 = getgid() r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r12}]}, 0x1c}}, 0x0) r13 = getgid() r14 = socket$kcm(0x10, 0x2, 0x0) r15 = getpid() sendmsg$unix(r14, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r21 = syz_open_procfs$namespace(r18, &(0x7f0000001780)='ns/ipc\x00') r22 = getpid() sendmmsg$unix(r17, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r18, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r22, @ANYRES32=r19, @ANYRES32=0x0, @ANYBLOB="0018000000000000000100000001000000", @ANYRES32=r21, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)={0x18, 0x16, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0x18}], 0x1, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r0, r0, r0, r3, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r20}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}], 0xf0}, 0x881) r23 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r23, 0x84, 0x16, &(0x7f0000000000)={0x2, [0xb, 0x2]}, 0x8) 1.231504704s ago: executing program 4 (id=7850): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r3], 0x50}}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000003200)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d010000000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000010010000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8cc658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ad539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c97888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5a444a41bac326ddea7d7b9c90d44f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2a4d39b43878b6ef26ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee92ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93b71db0a2366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000000000009a8329eb97567787ff28dd96c8e0f9e3c84394afc8f83dc6c6c813fafed61cdd6117092562837a3fa3fc388ab57429a9ecc4fddb0f0a7e4a1415d82d8bac999696d9130e36fc86df796a72559c523fae90d0b742d09cd2edf652c67aa62742e9ce0ff5283f627b622a83576f57d0899e0da8483f9dc296"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getpeername$ax25(r7, &(0x7f0000000040)={{}, [@null, @default, @rose, @bcast, @remote, @remote, @rose, @default]}, &(0x7f00000000c0)=0x48) 1.107608991s ago: executing program 4 (id=7851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00c06fb6b4738d80761eed5ae1160500210001000000000000000000fc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33000000020000000200020000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000800"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 1.107213163s ago: executing program 1 (id=7852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000100)=0x80, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x21, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002dbd7000ffdbdf25013a00010000000500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004801) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000002c0)={0x100000000, 0x8, [0x73, 0x0, 0x113b02, 0x81], &(0x7f0000000280)=[0x0]}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.096266757s ago: executing program 4 (id=7853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x20}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000540)="d1926d8eaef41d", &(0x7f0000000240)=@tcp}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x90b, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async, rerun: 32) write$tun(r1, &(0x7f0000001340)={@val={0x0, 0xf6}, @val={0x2, 0x4, 0x4, 0x9, 0x8, 0x9}, @eth={@remote, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0xc, 0x6, "06641f", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x2, 0x0, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3, 0x3, 0x1, 0x2}, 0x2, {0x61, 0x1, 0x3, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}}}, 0x90) (async, rerun: 32) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000006c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) recvmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x60, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x10, 0x5d2, 0xd4, {{0xa, 0x4, 0x3, 0x26, 0x28, 0x65, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xa, "66eba76f752e7895"}]}}}}}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xe, 0x5, &(0x7f0000000200)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24}, 0x94) 1.042494374s ago: executing program 0 (id=7854): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000004c0)={r0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000340)='^'}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="01000000000000000000050000000c0d6125fd817df07a505ea74c83a03c0275d617cea6d9"], 0x38}, 0x1, 0x0, 0x0, 0x24000020}, 0x4000000) r3 = accept$inet(r0, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000480)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x17, 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000003000), 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000500)={'wg1\x00', 0x800}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000067af2d3683a2a9377ffbc313fa01000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = socket(0x2f, 0x4, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r10, 0x0, 0x3, &(0x7f0000000140)=0xc0, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38001ff0434c3af2b23d38782a7b2fa4e500000408010200008b00000000000a000000240004800800014000000001080001408000000008"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r7}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00928129c831037ba20000000700000000d1d5", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 947.864288ms ago: executing program 1 (id=7855): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x43}, @loopback, 0x1, 0x5, [@multicast1, @private=0xa010100, @rand_addr=0x64010102, @multicast1, @private=0xa010101]}, 0x24) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000b00000000000000000a5c000000060a0b04000000000000000002000002300004802c0001800c007365001c00028008000140000000000800024000000004080003407fffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a677023b3d4e569268e154ff01cf39e0dc0ec4c9c4c583f33520e28b3b7ab74956ca7949a6ee8b863981eb1ece0a0c4210865e5e8f751983fbd25a4fe01df1e6657efdb9a7f2ca49c437a92e26f675f2a9cf970c25b0baa12c06108654d148f433e972a3fe4d08252e8bccf72d4969377f1a1d018f589abd79d4209d3c91494c19f1bc02290ba5cf1beab28737f8fb5e6760297e40265dc6b65820a1407b9eb50c41cbea50009a7de1c876747a583ab2e9653d2d04005a18b2f12f75a8df53aa3d0c0b87679f7e410a96f9baaf960559c4f735b9529925d9eed1862c46e8771563cb97628de5a331e4070a3d365dc3b81b44b18da390ce802a64b68125cebba553148a838d1ec05a83c2dacbe64b79f1664bc8728865bbf01efabb637e3e17bae162b8553edd6a58ceb1d3a5df8576b20f0d9a59019b11afc1416f9e894b90ad00de20df0afcb5f75089cd90b82c75b3a09dad0b5758c83f35bbf71f499dac2480b795f575eb76a71fc83cce96c0e71375a33ed7f5dd0f2c4b581626bdb83229eb86b1d454dd91ef2d5931328180650f976822af5a9d346ca675cbe5b51336e8256287813460e0e7b8ecfbb570269c57ec32cb42b9aad8c89d8161d95f9f6cfaeba62e70ef8014f6c76ec2e2ce0ad2a73160b12ee539b86335da932b69cbbbe9125499f9fac387c75508b87e3d53fdb09290806dd88f353bbbe"], 0x84}}, 0x0) 269.062908ms ago: executing program 0 (id=7856): r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000900), 0x4) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x2}}], 0x48}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1508004500002c000000000011907800000000e000000100004e200018907804000000040001008100000000000000"], 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x29, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaa1b000005001100f70000006baa86051576049e01edeb7e5e22d2fbfcc807ded534c066878621fdc92ba99131c6223001e1d45567a2a5e22cf5323db274e079258580f2272999bc5f971facd11913620d8b7c1dec9e88aec7e2d773c2dc5ff12b5bc6d765717654a31e0d69ec4f5b6de2ba74f382d4fc5a0420c9430805"], 0x50}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x0, @private}}) 152.327235ms ago: executing program 1 (id=7857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) 27.585516ms ago: executing program 1 (id=7858): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f0000000040)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) (async) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a400060040000000240012800c0001006d6163766c616e001400028008000900038000000800030003000000140035006d6163c86c616e30000000e6c066a0397fd2b9ccedfd816f7a0acddaccaae00c953f"], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d4"], 0x44}}, 0x0) 0s ago: executing program 1 (id=7859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) kernel console output (not intermixed with test programs): uous mode [ 508.182588][T27381] syzkaller0: entered allmulticast mode [ 508.230671][T27376] tipc: Started in network mode [ 508.236882][T27376] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 508.251756][T27376] tipc: Enabled bearer , priority 10 [ 508.339520][T27388] netlink: 'syz.3.6209': attribute type 8 has an invalid length. [ 508.355741][T27227] hsr_slave_0: entered promiscuous mode [ 508.364110][T27227] hsr_slave_1: entered promiscuous mode [ 508.371319][T27227] debugfs: 'hsr0' already exists in 'hsr' [ 508.378929][T27227] Cannot create hsr debugfs directory [ 508.745465][T27408] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 508.787771][ T30] audit: type=1800 audit(1764519236.692:12): pid=27404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6211" name="memory.events" dev="tmpfs" ino=191 res=0 errno=0 [ 508.836944][ T9308] net_ratelimit: 12 callbacks suppressed [ 508.836965][ T9308] bond5: (slave C): failed to get link speed/duplex [ 508.951275][T27415] netlink: 81 bytes leftover after parsing attributes in process `syz.2.6219'. [ 509.008353][ T9317] bond5: (slave C): failed to get link speed/duplex [ 509.084430][T27421] veth1_to_bond: entered allmulticast mode [ 509.129495][T27421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6222'. [ 509.174758][T27421] bond0: (slave bond_slave_1): Releasing backup interface [ 509.212060][T27421] veth1_to_bond (unregistering): left allmulticast mode [ 509.297191][ T9317] bond5: (slave C): failed to get link speed/duplex [ 509.384435][ T8017] tipc: Node number set to 1 [ 509.399317][T27227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.455517][T27227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.486099][T27227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.526332][T27227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.569718][T27429] wlan0 speed is unknown, defaulting to 1000 [ 509.612850][T27429] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.667884][ T9300] bond5: (slave C): link status up again after 0 ms [ 509.674535][ T9300] bond5: (slave C): failed to get link speed/duplex [ 509.708328][ T5838] Bluetooth: hci3: command tx timeout [ 509.804470][T27227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.892574][T27227] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.925000][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.932224][ T9317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.957122][ T9317] bond5: (slave C): failed to get link speed/duplex [ 509.972680][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.979928][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.083473][ T3518] bond5: (slave C): failed to get link speed/duplex [ 510.237284][ T44] bond5: (slave C): failed to get link speed/duplex [ 510.387495][ T9317] bond5: (slave C): failed to get link speed/duplex [ 510.488895][T27489] netlink: 'syz.2.6238': attribute type 27 has an invalid length. [ 510.664499][T27227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.687640][ T9326] bond5: (slave C): failed to get link speed/duplex [ 511.245701][T27227] veth0_vlan: entered promiscuous mode [ 511.274082][T27227] veth1_vlan: entered promiscuous mode [ 511.337086][T27227] veth0_macvtap: entered promiscuous mode [ 511.360882][T27227] veth1_macvtap: entered promiscuous mode [ 511.461922][T27227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.490809][T27227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.534556][ T9300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.553954][ T9300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.571048][ T9300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.590824][ T9300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.790529][ T5838] Bluetooth: hci3: command tx timeout [ 511.911293][ T9326] bond5: left promiscuous mode [ 511.928089][ T9326] bridge0: port 3(bond5) entered disabled state [ 511.962188][ T9326] bridge_slave_1: left allmulticast mode [ 511.976959][ T9326] bridge_slave_1: left promiscuous mode [ 511.992607][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.050648][ T9326] bridge_slave_0: left allmulticast mode [ 512.056330][ T9326] bridge_slave_0: left promiscuous mode [ 512.080774][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.459081][T27588] __nla_validate_parse: 8 callbacks suppressed [ 512.459101][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6261'. [ 513.658113][ T9326] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 513.867377][ T5838] Bluetooth: hci3: command tx timeout [ 513.939139][ T9326] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 513.948420][ T9326] bridge3 (unregistering): left promiscuous mode [ 513.954777][ T9326] bridge3 (unregistering): left allmulticast mode [ 514.047583][ T9326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.061463][ T9326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.073500][ T9326] bond0 (unregistering): Released all slaves [ 514.090669][ T9326] bond1 (unregistering): Released all slaves [ 514.201764][ T9326] bond2 (unregistering): Released all slaves [ 514.214275][ T9326] bond3 (unregistering): Released all slaves [ 514.228883][ T9326] bond4 (unregistering): Released all slaves [ 514.353560][ T9326] bond5 (unregistering): Released all slaves [ 514.463172][ T9326] bond6 (unregistering): Released all slaves [ 514.571502][ T9326] bond7 (unregistering): (slave veth5): Releasing active interface [ 514.581828][ T9326] bond7 (unregistering): Released all slaves [ 514.690388][ T9326] bond8 (unregistering): Released all slaves [ 514.799431][ T9326] bond9 (unregistering): Released all slaves [ 514.905223][ T9326] bond10 (unregistering): Released all slaves [ 514.919762][ T9326] bond11 (unregistering): (slave bond12): Releasing backup interface [ 514.928856][ T9326] bond11 (unregistering): Released all slaves [ 515.044765][ T9326] bond12 (unregistering): Released all slaves [ 515.076880][ T9300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.084735][ T9300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.238661][T27605] netlink: 'syz.2.6267': attribute type 15 has an invalid length. [ 515.248763][T27605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6267'. [ 515.500399][ T9326] tipc: Disabling bearer [ 515.505799][ T9326] tipc: Disabling bearer [ 515.513557][ T9326] tipc: Left network mode [ 515.520543][ T9317] net_ratelimit: 6 callbacks suppressed [ 515.520559][ T9317] bond5: (slave C): failed to get link speed/duplex [ 515.562276][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6269'. [ 515.573812][ T9317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.584372][ T9317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.584650][T27615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6269'. [ 515.634479][ T9300] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.667633][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6269'. [ 515.677938][ T9300] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.697441][T27615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6269'. [ 515.712594][ T9300] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.737549][ T9300] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.748880][ T9326] IPVS: stopping backup sync thread 10586 ... [ 515.774211][ T9300] bond5: (slave C): failed to get link speed/duplex [ 515.821238][T27625] tipc: Enabling of bearer rejected, failed to enable media [ 515.880745][T27633] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6274'. [ 515.919296][T27633] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6274'. [ 515.957573][T27639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.957573][T27634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.027868][ T9300] bond5: (slave C): failed to get link speed/duplex [ 516.127356][T27642] syzkaller0: entered promiscuous mode [ 516.147205][T27642] syzkaller0: entered allmulticast mode [ 516.156663][ T9300] bond5: (slave C): failed to get link speed/duplex [ 516.287114][ T3518] bond5: (slave C): failed to get link speed/duplex [ 516.779154][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.792793][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.810422][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.818577][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.830471][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.010098][T27677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6284'. [ 517.046857][ T12] bond5: (slave C): failed to get link speed/duplex [ 517.250622][ T9300] bond5: (slave C): failed to get link speed/duplex [ 517.267151][T27670] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.302621][T27690] openvswitch: netlink: Flow key attr not present in new flow. [ 517.781292][T27712] tipc: Enabled bearer , priority 13 [ 517.788645][T27711] tipc: Enabling of bearer rejected, already enabled [ 517.941133][T27719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6299'. [ 517.994208][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 518.140948][T27730] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6301'. [ 518.214931][T27730] bond6: (slave gretap0): Device is not bonding slave [ 518.226776][T27730] bond6: option active_slave: invalid value (gretap0) [ 518.274888][T27730] bond6 (unregistering): Released all slaves [ 518.341256][ T9326] hsr_slave_0: left promiscuous mode [ 518.370016][ T9326] hsr_slave_1: left promiscuous mode [ 518.376170][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.385074][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.395271][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.405018][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.413390][T27744] netlink: 'syz.4.6305': attribute type 2 has an invalid length. [ 518.443997][ T9326] veth1_macvtap: left promiscuous mode [ 518.450034][ T9326] veth1_vlan: left promiscuous mode [ 518.597504][T27753] sctp: [Deprecated]: syz.2.6306 (pid 27753) Use of int in maxseg socket option. [ 518.597504][T27753] Use struct sctp_assoc_value instead [ 518.633650][ T9326] pimreg (unregistering): left allmulticast mode [ 518.907662][ T5149] Bluetooth: hci5: command tx timeout [ 519.009809][ T9326] team0 (unregistering): Port device team_slave_1 removed [ 519.068010][ T9326] team0 (unregistering): Port device team_slave_0 removed [ 519.598218][ T5940] IPVS: starting estimator thread 0... [ 519.699439][T27776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6309'. [ 519.708470][T27765] IPVS: using max 32 ests per chain, 76800 per kthread [ 519.849860][T27670] chnl_net:caif_netlink_parms(): no params data found [ 519.879289][ T9326] IPVS: stop unused estimator thread 0... [ 520.074142][T27670] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.081566][T27670] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.089102][T27670] bridge_slave_0: entered allmulticast mode [ 520.097012][T27670] bridge_slave_0: entered promiscuous mode [ 520.108932][T27670] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.116337][T27670] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.125769][T27670] bridge_slave_1: entered allmulticast mode [ 520.134666][T27670] bridge_slave_1: entered promiscuous mode [ 520.189484][T27670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.205806][T27670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.258598][T27670] team0: Port device team_slave_0 added [ 520.269109][T27670] team0: Port device team_slave_1 added [ 520.323543][T27670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.355368][T27670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.387845][T27670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.403763][T27670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.422684][T27670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.450200][T27670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.528321][T27816] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6322'. [ 520.539657][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6322'. [ 520.553567][T27670] hsr_slave_0: entered promiscuous mode [ 520.561411][T27670] hsr_slave_1: entered promiscuous mode [ 520.569817][T27670] debugfs: 'hsr0' already exists in 'hsr' [ 520.577452][T27670] Cannot create hsr debugfs directory [ 520.864419][T27826] tap0: tun_chr_ioctl cmd 1342215183 [ 520.920485][T27826] tap0: tun_chr_ioctl cmd 1074025678 [ 520.925920][T27826] tap0: group set to 0 [ 520.961107][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6330'. [ 520.989383][ T5149] Bluetooth: hci5: command tx timeout [ 521.047991][ T3518] net_ratelimit: 13 callbacks suppressed [ 521.048010][ T3518] bond5: (slave C): failed to get link speed/duplex [ 521.178872][T27845] bond2: option resend_igmp: invalid value (32767) [ 521.186337][T27845] bond2: option resend_igmp: allowed values 0 - 255 [ 521.198836][T27845] bond2 (unregistering): Released all slaves [ 521.242399][T27852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6335'. [ 521.252996][T27852] netlink: 'syz.2.6335': attribute type 7 has an invalid length. [ 521.283078][T27852] netlink: 'syz.2.6335': attribute type 8 has an invalid length. [ 521.292319][T27852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6335'. [ 521.299420][ T9325] bond5: (slave C): failed to get link speed/duplex [ 521.326972][T27852] team0: entered promiscuous mode [ 521.332174][T27852] team_slave_0: entered promiscuous mode [ 521.342820][T27852] team_slave_1: entered promiscuous mode [ 521.355260][T27852] bond0: entered promiscuous mode [ 521.360902][T27852] bond_slave_0: entered promiscuous mode [ 521.367997][T27852] bond_slave_1: entered promiscuous mode [ 521.375628][T27852] gretap0: entered promiscuous mode [ 521.380712][T27857] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6336'. [ 521.384768][T27852] debugfs: 'hsr1' already exists in 'hsr' [ 521.405100][T27852] Cannot create hsr debugfs directory [ 521.412775][T27852] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 521.509165][ T3518] bond5: (slave C): failed to get link speed/duplex [ 521.523594][T27862] netlink: 'syz.2.6338': attribute type 10 has an invalid length. [ 521.576277][T27862] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 521.600316][T27862] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 521.676821][ T9317] bond5: (slave C): failed to get link speed/duplex [ 521.724052][T27670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.754919][T27670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.769430][T27670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.790282][T27670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.849165][ T12] bond5: (slave C): failed to get link speed/duplex [ 521.904074][T27884] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 521.921613][T27884] bond2 (unregistering): Released all slaves [ 521.959512][ T9325] bond5: (slave C): failed to get link speed/duplex [ 522.034975][T27897] netlink: 'syz.4.6346': attribute type 1 has an invalid length. [ 522.066726][ T12] bond5: (slave C): failed to get link speed/duplex [ 522.137944][T27903] bond_slave_0: entered allmulticast mode [ 522.188815][ T9325] bond5: (slave C): failed to get link speed/duplex [ 522.302791][T27914] C: renamed from lo (while UP) [ 522.337227][ T12] bond5: (slave C): failed to get link speed/duplex [ 522.446564][ T9317] bond5: (slave C): failed to get link speed/duplex [ 522.808593][T27670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.871843][T27670] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.913090][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.920371][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.961970][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.969199][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.002673][T27935] syzkaller1: entered promiscuous mode [ 523.018657][T27935] syzkaller1: entered allmulticast mode [ 523.069871][ T5838] Bluetooth: hci5: command tx timeout [ 523.194895][T27954] __nla_validate_parse: 3 callbacks suppressed [ 523.194912][T27954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6360'. [ 523.212561][T27956] RDS: rds_bind could not find a transport for 3030:3030:3030:3030:3030::, load rds_tcp or rds_rdma? [ 523.735357][T27670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.808162][T27978] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6366'. [ 523.823932][T27978] netlink: 'syz.3.6366': attribute type 2 has an invalid length. [ 523.895095][T27670] veth0_vlan: entered promiscuous mode [ 523.924547][T27670] veth1_vlan: entered promiscuous mode [ 524.021517][T27670] veth0_macvtap: entered promiscuous mode [ 524.055114][T27670] veth1_macvtap: entered promiscuous mode [ 524.095971][T27670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.271999][T27670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.470865][ T3518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.530622][ T3518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.540133][ T3518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.559091][ T3518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.580105][T28017] syzkaller0: entered promiscuous mode [ 524.585700][T28017] syzkaller0: entered allmulticast mode [ 524.600301][T28019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6378'. [ 524.739231][T28017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.739609][T28029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6381'. [ 524.746533][T28017] IPv6: NLM_F_CREATE should be set when creating new route [ 524.746658][T28017] IPv6: NLM_F_CREATE should be set when creating new route [ 524.746682][T28017] IPv6: NLM_F_CREATE should be set when creating new route [ 524.749319][T28017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.789567][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.801106][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.931290][ T9317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.948957][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6384'. [ 524.959285][ T9317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.976805][T28035] netlink: 'syz.2.6384': attribute type 5 has an invalid length. [ 524.984572][T28035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6384'. [ 525.147297][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 525.538301][T28073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6391'. [ 525.663412][T28079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6394'. [ 525.709544][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6394'. [ 525.737294][T28079] bridge_slave_1: left allmulticast mode [ 525.743037][T28079] bridge_slave_1: left promiscuous mode [ 525.756411][T28079] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.782772][T28079] bridge_slave_0: left allmulticast mode [ 525.826674][T28079] bridge_slave_0: left promiscuous mode [ 525.852804][T28079] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.995779][T28081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 526.009214][T28081] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.022522][T28081] gretap1: entered promiscuous mode [ 526.039176][T28081] gretap1: entered allmulticast mode [ 526.106809][ T3518] net_ratelimit: 20 callbacks suppressed [ 526.106835][ T3518] bond5: (slave C): failed to get link speed/duplex [ 526.187495][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.197879][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.206300][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.215421][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.222359][T28094] syzkaller0: entered promiscuous mode [ 526.229290][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.238368][T28094] syzkaller0: entered allmulticast mode [ 526.256661][T28098] ip6t_srh: unknown srh invflags 4000 [ 526.260879][T28094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 526.279754][ T3518] bond5: (slave C): failed to get link speed/duplex [ 526.333969][T28096] ip6erspan0: entered promiscuous mode [ 526.340313][T28096] ip6erspan0: entered allmulticast mode [ 526.382530][T28091] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.390237][T28101] netlink: 'syz.4.6402': attribute type 30 has an invalid length. [ 526.407324][ T3518] bond5: (slave C): failed to get link speed/duplex [ 526.519408][ T3518] bond5: (slave C): failed to get link speed/duplex [ 526.639063][ T9325] bond5: (slave C): failed to get link speed/duplex [ 526.723025][T28115] netlink: 'syz.2.6408': attribute type 2 has an invalid length. [ 526.747780][ T12] bond5: (slave C): failed to get link speed/duplex [ 526.924251][T28123] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.932095][T28123] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.971735][T28123] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 526.999098][ T9325] bond5: (slave C): failed to get link speed/duplex [ 527.239495][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 527.339629][ T12] bond5: (slave C): failed to get link speed/duplex [ 527.361131][T28149] syzkaller1: entered promiscuous mode [ 527.372417][T28153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.376119][T28149] syzkaller1: entered allmulticast mode [ 527.438539][T28091] chnl_net:caif_netlink_parms(): no params data found [ 527.768952][T28181] netlink: 'syz.0.6422': attribute type 1 has an invalid length. [ 527.890251][T28184] bond1: entered allmulticast mode [ 527.896132][T28184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.907816][T28190] xt_hashlimit: size too large, truncated to 1048576 [ 527.964799][T28091] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.985155][T28091] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.995223][T28091] bridge_slave_0: entered allmulticast mode [ 528.004772][T28091] bridge_slave_0: entered promiscuous mode [ 528.118201][T28091] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.136091][T28091] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.151264][T28091] bridge_slave_1: entered allmulticast mode [ 528.165687][T28091] bridge_slave_1: entered promiscuous mode [ 528.219517][T28200] netlink: 'syz.4.6426': attribute type 2 has an invalid length. [ 528.305869][T28208] __nla_validate_parse: 5 callbacks suppressed [ 528.305885][T28208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6428'. [ 528.326909][T28091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.340665][T28091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.349879][ T5838] Bluetooth: hci0: command tx timeout [ 528.447881][T28091] team0: Port device team_slave_0 added [ 528.469709][T28091] team0: Port device team_slave_1 added [ 528.514697][T28219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6434'. [ 528.562571][T28091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.573826][T28091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.608012][T28091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.654226][T28091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.663529][T28091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.692043][T28091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.715148][T28229] netlink: 'syz.4.6437': attribute type 10 has an invalid length. [ 528.721794][T28223] syzkaller0: entered promiscuous mode [ 528.729025][T28223] syzkaller0: entered allmulticast mode [ 528.742341][T28229] syz_tun: entered promiscuous mode [ 528.754462][T28229] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 528.902670][T28091] hsr_slave_0: entered promiscuous mode [ 528.912356][T28091] hsr_slave_1: entered promiscuous mode [ 528.919599][T28091] debugfs: 'hsr0' already exists in 'hsr' [ 528.934712][T28091] Cannot create hsr debugfs directory [ 529.126993][T28240] netlink: 'syz.0.6442': attribute type 10 has an invalid length. [ 530.437658][ T5838] Bluetooth: hci0: command tx timeout [ 530.796351][T28241] kthread_run failed with err -4 [ 530.933621][T28257] netlink: 'syz.4.6447': attribute type 1 has an invalid length. [ 530.956989][T28257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6447'. [ 530.976299][T28257] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6447'. [ 530.998840][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 531.060311][T28091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.079332][T28091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 531.116959][ T9317] net_ratelimit: 3 callbacks suppressed [ 531.116979][ T9317] bond5: (slave C): failed to get link speed/duplex [ 531.178256][T28091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.199982][T28091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 531.238231][ T9325] bond5: (slave C): failed to get link speed/duplex [ 531.289679][T28091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.300410][T28091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 531.347640][ T12] bond5: (slave C): failed to get link speed/duplex [ 531.383627][T28091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.397516][T28091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 531.457066][ T9300] bond5: (slave C): failed to get link speed/duplex [ 531.542855][T28283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6454'. [ 531.553511][T28283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6454'. [ 531.563662][T28283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6454'. [ 531.573464][ T9300] bond5: (slave C): failed to get link speed/duplex [ 531.630793][T28091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.642536][T28091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.656340][T28091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.669439][T28091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.748705][ T9300] bond5: (slave C): failed to get link speed/duplex [ 531.835027][T28091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.859886][T28091] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.934422][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.941663][ T9300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.963764][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.971003][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.995727][T28298] bridge0: entered promiscuous mode [ 532.001912][T28298] bridge0: entered allmulticast mode [ 532.014629][T28298] team0: Port device bridge0 added [ 532.157995][ T9325] bond5: (slave C): failed to get link speed/duplex [ 532.179475][T28316] gre0: entered promiscuous mode [ 532.191623][T28316] gre0: entered allmulticast mode [ 532.201367][T28319] netlink: 'syz.2.6462': attribute type 21 has an invalid length. [ 532.213388][T28318] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6464'. [ 532.274715][T28318] veth3: entered allmulticast mode [ 532.307578][ T9300] bond5: (slave C): failed to get link speed/duplex [ 532.438679][ T9317] bond5: (slave C): failed to get link speed/duplex [ 532.507900][ T5838] Bluetooth: hci0: command tx timeout [ 532.567800][ T9317] bond5: (slave C): failed to get link speed/duplex [ 532.628483][T28348] netlink: 'syz.0.6469': attribute type 29 has an invalid length. [ 532.650308][T28348] netlink: 'syz.0.6469': attribute type 29 has an invalid length. [ 532.663654][T28091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.672832][T28348] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6469'. [ 532.788531][T28091] veth0_vlan: entered promiscuous mode [ 532.805649][T28091] veth1_vlan: entered promiscuous mode [ 532.872256][T28091] veth0_macvtap: entered promiscuous mode [ 532.895685][T28091] veth1_macvtap: entered promiscuous mode [ 532.940538][T28091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.980119][T28091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.021731][ T9310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.048794][ T9310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.078334][ T9310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.105483][ T9310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.258735][ T9325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.287860][ T9325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.321522][T28375] __nla_validate_parse: 3 callbacks suppressed [ 533.321541][T28375] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6477'. [ 533.345115][ T9310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.355035][ T9310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.381570][T28377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6478'. [ 533.484714][T28388] netem: unknown loss type 0 [ 533.502935][T28388] netem: change failed [ 533.658606][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 533.699111][T28388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.801230][T28388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.813823][T28403] netlink: 'syz.0.6482': attribute type 28 has an invalid length. [ 533.825650][T28403] netlink: 'syz.0.6482': attribute type 3 has an invalid length. [ 533.834087][T28403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6482'. [ 533.844696][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6482'. [ 533.871334][T28401] bridge2: entered promiscuous mode [ 533.877601][T28401] bridge2: entered allmulticast mode [ 533.885449][T28401] team0: Port device bridge2 added [ 533.895132][T28398] pim6reg1: entered promiscuous mode [ 533.907099][T28398] pim6reg1: entered allmulticast mode [ 534.520571][T28425] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6488'. [ 534.567103][T28425] bond1 (unregistering): Released all slaves [ 534.586964][ T5838] Bluetooth: hci0: command tx timeout [ 534.701390][T28438] netlink: 'syz.4.6490': attribute type 12 has an invalid length. [ 534.737065][T28438] netlink: 'syz.4.6490': attribute type 29 has an invalid length. [ 534.792891][T28438] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6490'. [ 534.821718][T28438] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6490'. [ 535.001868][T28457] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6495'. [ 535.514310][T28489] v: renamed from vlan0 (while UP) [ 535.537663][T28493] Cannot find map_set index 0 as target [ 535.547290][T28493] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 535.654885][T28501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6510'. [ 535.870015][T28512] C: renamed from team_slave_0 (while UP) [ 535.889242][T28512] netlink: 'syz.1.6514': attribute type 1 has an invalid length. [ 535.970623][T28513] netlink: 'syz.2.6513': attribute type 13 has an invalid length. [ 536.167609][T28529] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 536.178369][T28526] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 536.191353][T28526] net_ratelimit: 23 callbacks suppressed [ 536.191373][T28526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 536.217190][ T12] bond5: (slave C): failed to get link speed/duplex [ 536.245424][T28531] netlink: 'syz.0.6520': attribute type 1 has an invalid length. [ 536.263061][T28533] sctp: [Deprecated]: syz.2.6521 (pid 28533) Use of int in max_burst socket option. [ 536.263061][T28533] Use struct sctp_assoc_value instead [ 536.283391][T28531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.303509][T28533] Cannot find add_set index 0 as target [ 536.326701][ T12] bond5: (slave C): failed to get link speed/duplex [ 536.375883][T28531] veth3: entered promiscuous mode [ 536.409993][T28531] bond1: (slave veth3): Enslaving as an active interface with an up link [ 536.487668][ T9300] bond5: (slave C): failed to get link speed/duplex [ 536.597366][ T9300] bond5: (slave C): failed to get link speed/duplex [ 536.706764][ T9300] bond5: (slave C): failed to get link speed/duplex [ 536.819806][ T12] bond5: (slave C): failed to get link speed/duplex [ 536.976718][ T9300] bond5: (slave C): failed to get link speed/duplex [ 537.088639][ T9300] bond5: (slave C): failed to get link speed/duplex [ 537.201080][T28589] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 537.471121][T28606] netlink: 'syz.3.6546': attribute type 13 has an invalid length. [ 538.020464][T28643] netlink: 'syz.2.6553': attribute type 1 has an invalid length. [ 538.056243][T28639] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.141381][T28643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.159580][T28650] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 538.200094][T28650] bond2: entered allmulticast mode [ 538.292131][T28643] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 538.335498][T28659] __nla_validate_parse: 7 callbacks suppressed [ 538.335514][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6556'. [ 538.685923][T28672] bond1: entered promiscuous mode [ 538.692914][T28672] bond1: entered allmulticast mode [ 538.702150][T28672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.881152][T28687] netlink: 'syz.0.6564': attribute type 13 has an invalid length. [ 538.901110][T28685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6563'. [ 538.913799][T28687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6564'. [ 538.938979][T28687] netlink: 'syz.0.6564': attribute type 13 has an invalid length. [ 538.948695][ T9310] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.957956][T28685] xt_policy: output policy not valid in PREROUTING and INPUT [ 538.959915][T28687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6564'. [ 538.978650][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.992700][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.044473][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.209507][ T5838] block nbd4: Receive control failed (result -32) [ 539.218713][T28700] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6569'. [ 539.353786][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6571'. [ 539.519915][T28722] ip6gre0: Master is either lo or non-ether device [ 539.540299][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6575'. [ 539.581515][T28723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 539.611546][T28728] netlink: 'syz.3.6578': attribute type 1 has an invalid length. [ 539.614330][T28723] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6575'. [ 539.649349][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6578'. [ 539.690834][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6578'. [ 540.081799][T28763] netlink: 'syz.4.6587': attribute type 26 has an invalid length. [ 540.140395][T28764] netlink: 'syz.4.6587': attribute type 26 has an invalid length. [ 540.160936][T28763] netlink: 'syz.4.6587': attribute type 26 has an invalid length. [ 540.802033][T28811] netlink: 'syz.1.6602': attribute type 2 has an invalid length. [ 541.081865][T28830] bridge1: entered promiscuous mode [ 541.088566][T28830] bridge1: entered allmulticast mode [ 541.111761][T28830] bridge0: entered promiscuous mode [ 541.120536][T28830] macsec0: entered promiscuous mode [ 541.130712][T28830] macsec0: entered allmulticast mode [ 541.138661][T28830] bridge0: entered allmulticast mode [ 541.165962][T28830] bridge0: port 3(macsec0) entered blocking state [ 541.178074][T28830] bridge0: port 3(macsec0) entered disabled state [ 541.191344][T28830] bridge0: left allmulticast mode [ 541.197509][T28830] bridge0: left promiscuous mode [ 541.237016][T28843] veth0_to_bond: entered allmulticast mode [ 541.265264][T28837] netlink: 'syz.3.6610': attribute type 2 has an invalid length. [ 541.277139][ T3518] net_ratelimit: 33 callbacks suppressed [ 541.277157][ T3518] bond5: (slave C): failed to get link speed/duplex [ 541.406875][ T9317] bond5: (slave C): failed to get link speed/duplex [ 541.480665][T28859] lo: Caught tx_queue_len zero misconfig [ 541.547147][ T9317] bond5: (slave C): failed to get link speed/duplex [ 541.766607][ T3518] bond5: (slave C): failed to get link speed/duplex [ 541.878225][ T9325] bond5: (slave C): failed to get link speed/duplex [ 541.932510][T28902] netlink: 'syz.0.6629': attribute type 1 has an invalid length. [ 541.964781][T28904] netlink: 'syz.1.6630': attribute type 7 has an invalid length. [ 542.003969][T28904] netlink: 'syz.1.6630': attribute type 7 has an invalid length. [ 542.030934][T28909] netlink: 'syz.4.6632': attribute type 2 has an invalid length. [ 542.054721][ T9317] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.064149][ T9317] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.074144][T28907] netlink: 'syz.2.6631': attribute type 12 has an invalid length. [ 542.105537][T28914] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 542.116954][T28914] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 542.129486][T28914] bond2: (slave xfrm1): making interface the new active one [ 542.142976][T28914] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 542.163498][ T9317] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.187960][ T9317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.229273][T28914] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 542.262425][T28914] bond2 (unregistering): Released all slaves [ 542.380929][ T9325] bond5: (slave C): failed to get link speed/duplex [ 542.512339][ T12] bond5: (slave C): failed to get link speed/duplex [ 542.563238][T28943] nbd: couldn't find device at index 0 [ 542.637185][ T12] bond5: (slave C): failed to get link speed/duplex [ 542.766822][ T12] bond5: (slave C): failed to get link speed/duplex [ 542.886582][ T9300] bond5: (slave C): failed to get link speed/duplex [ 543.557936][T28995] __nla_validate_parse: 13 callbacks suppressed [ 543.557955][T28995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6653'. [ 543.574807][T28997] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 543.594707][T28999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6657'. [ 543.613544][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6656'. [ 543.656168][T28999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6657'. [ 543.802270][T29017] syz_tun: entered allmulticast mode [ 543.873913][T29017] dvmrp6: entered allmulticast mode [ 543.923335][T29024] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6663'. [ 543.932373][T29010] pimreg3: entered allmulticast mode [ 543.933275][T29008] syz_tun: left allmulticast mode [ 543.950599][T29022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6662'. [ 543.961278][T29026] syzkaller0: entered promiscuous mode [ 543.967993][T29026] syzkaller0: entered allmulticast mode [ 544.134836][T29036] vlan2: entered promiscuous mode [ 544.140807][T29036] bridge0: entered promiscuous mode [ 544.279614][T29049] bond0: Caught tx_queue_len zero misconfig [ 544.474754][T29059] bond2: (slave ip6gretap1): making interface the new active one [ 544.494308][T29059] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.503528][T29059] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 544.514259][T29059] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 544.603826][T29062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6675'. [ 544.622997][T29072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6676'. [ 544.694544][T29062] bond2: option coupled_control: invalid value (52) [ 544.708646][T29062] bond2 (unregistering): Released all slaves [ 544.879185][T29087] IPv6: sit1: Disabled Multicast RS [ 544.993945][T29091] Bluetooth: MGMT ver 1.23 [ 544.998749][T29098] sctp: [Deprecated]: syz.2.6684 (pid 29098) Use of int in maxseg socket option. [ 544.998749][T29098] Use struct sctp_assoc_value instead [ 545.032082][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6683'. [ 545.062549][T29092] sctp: [Deprecated]: syz.0.6681 (pid 29092) Use of int in maxseg socket option. [ 545.062549][T29092] Use struct sctp_assoc_value instead [ 545.103307][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6683'. [ 545.242952][T29103] syzkaller0: entered promiscuous mode [ 545.248677][T29103] syzkaller0: entered allmulticast mode [ 545.283656][T29103] validate_nla: 7 callbacks suppressed [ 545.283674][T29103] netlink: 'syz.3.6685': attribute type 18 has an invalid length. [ 547.078708][ T9300] net_ratelimit: 17 callbacks suppressed [ 547.078729][ T9300] bond5: (slave C): failed to get link speed/duplex [ 547.219428][ T9317] bond5: (slave C): failed to get link speed/duplex [ 547.301253][T29153] netlink: 'syz.0.6696': attribute type 1 has an invalid length. [ 547.309382][T29153] netlink: 'syz.0.6696': attribute type 4 has an invalid length. [ 547.365693][T29159] netlink: 'syz.4.6693': attribute type 21 has an invalid length. [ 547.393203][T29159] netlink: 'syz.4.6693': attribute type 6 has an invalid length. [ 547.423788][T29159] ip6gre1: entered allmulticast mode [ 547.482699][ T9300] bond5: (slave C): failed to get link speed/duplex [ 547.630564][ T9300] bond5: (slave C): failed to get link speed/duplex [ 547.876967][ T3518] bond5: (slave C): failed to get link speed/duplex [ 547.999092][ T9317] bond5: (slave C): failed to get link speed/duplex [ 548.036795][T29187] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 548.107891][ T9310] bond5: (slave C): failed to get link speed/duplex [ 548.230642][ T9317] bond5: (slave C): failed to get link speed/duplex [ 548.347330][ T9310] bond5: (slave C): failed to get link speed/duplex [ 548.413038][T29213] netlink: 'syz.0.6715': attribute type 1 has an invalid length. [ 548.433796][T29216] netlink: 'syz.0.6715': attribute type 1 has an invalid length. [ 548.468178][T29218] netlink: 'syz.1.6718': attribute type 4 has an invalid length. [ 548.489154][T29224] netlink: 'syz.2.6720': attribute type 2 has an invalid length. [ 548.489460][T29220] macvtap0: entered promiscuous mode [ 548.505089][T29220] macvtap0: left promiscuous mode [ 548.647505][T29227] __nla_validate_parse: 17 callbacks suppressed [ 548.647527][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6721'. [ 548.651422][T29229] syzkaller0: entered promiscuous mode [ 548.671694][T29229] syzkaller0: entered allmulticast mode [ 548.753116][T29227] netlink: 'syz.1.6721': attribute type 1 has an invalid length. [ 548.850190][T29245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6720'. [ 548.869326][T29245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6720'. [ 550.350195][ T5149] Bluetooth: hci0: command 0x0405 tx timeout [ 550.594122][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6724'. [ 550.629810][T29256] veth3: entered promiscuous mode [ 552.406821][T29267] net_ratelimit: 2 callbacks suppressed [ 552.406839][T29267] bond_slave_0: mtu less than device minimum [ 552.419730][T29272] netlink: 'syz.3.6729': attribute type 5 has an invalid length. [ 552.442312][T29276] xfrm0: entered allmulticast mode [ 552.467139][ T9310] bond5: (slave C): failed to get link speed/duplex [ 552.606906][ T9310] bond5: (slave C): failed to get link speed/duplex [ 552.729725][ T9325] bond5: (slave C): failed to get link speed/duplex [ 552.786399][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6733'. [ 552.896592][ T3518] bond5: (slave C): failed to get link speed/duplex [ 552.986276][T29315] SET target dimension over the limit! [ 553.007421][ T9300] bond5: (slave C): failed to get link speed/duplex [ 553.248094][T29329] netlink: 'syz.2.6746': attribute type 2 has an invalid length. [ 553.256196][T29328] netlink: 'syz.2.6746': attribute type 2 has an invalid length. [ 553.329534][ T9317] bond5: (slave C): failed to get link speed/duplex [ 553.400572][T29336] netem: incorrect ge model size [ 553.449309][ T9300] bond5: (slave C): failed to get link speed/duplex [ 553.557378][ T9325] bond5: (slave C): failed to get link speed/duplex [ 553.558189][T29350] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.6753'. [ 553.693292][T29358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6756'. [ 553.707987][T29359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6757'. [ 553.717215][ T9325] bond5: (slave C): failed to get link speed/duplex [ 553.726309][T29359] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6757'. [ 553.833176][T29359] bond3: (slave gre0): Device is not bonding slave [ 553.845632][T29359] bond3: option active_slave: invalid value (gre0) [ 553.882039][T29359] bond3 (unregistering): Released all slaves [ 553.933261][T29375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 554.021140][T29376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.285729][T29399] netlink: 'syz.0.6769': attribute type 4 has an invalid length. [ 554.294201][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6769'. [ 554.485268][ T8018] IPVS: starting estimator thread 0... [ 554.576587][T29418] IPVS: using max 25 ests per chain, 60000 per kthread [ 554.659079][T29428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'. [ 554.819459][T29437] netlink: 'syz.2.6782': attribute type 1 has an invalid length. [ 555.030262][T29448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6785'. [ 555.043885][T29448] IPVS: Unknown mcast interface: nicvf0 [ 555.080063][T29455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6789'. [ 555.118544][T29456] netlink: 'syz.0.6787': attribute type 10 has an invalid length. [ 555.489543][T29475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6793'. [ 555.551302][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6794'. [ 555.674616][T29486] : renamed from bond_slave_0 (while UP) [ 555.728974][T29490] netlink: 'syz.2.6799': attribute type 12 has an invalid length. [ 555.790719][T29492] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 556.399285][T29528] netlink: 'syz.0.6811': attribute type 1 has an invalid length. [ 556.738706][T29557] netlink: 'syz.1.6817': attribute type 1 has an invalid length. [ 556.755333][T29557] ip6tnl1: entered promiscuous mode [ 556.764077][T29557] ip6tnl1: entered allmulticast mode [ 556.786024][T29502] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 556.941249][T29569] veth0_to_team: entered promiscuous mode [ 556.982147][T29569] bridge2: entered promiscuous mode [ 556.999786][T29569] bridge2: entered allmulticast mode [ 557.621455][T29610] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.632214][T29610] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.696835][ T9317] net_ratelimit: 28 callbacks suppressed [ 557.696856][ T9317] bond5: (slave C): failed to get link speed/duplex [ 557.777899][T29618] netlink: 'syz.0.6838': attribute type 1 has an invalid length. [ 557.826838][ T9317] bond5: (slave C): failed to get link speed/duplex [ 557.893782][T29618] veth5: entered promiscuous mode [ 557.903617][T29618] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 557.936685][ T9310] bond5: (slave C): failed to get link speed/duplex [ 557.999917][T29627] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 558.006083][T29627] syzkaller1: linktype set to 823 [ 558.026692][ T5149] Bluetooth: hci0: command 0x0405 tx timeout [ 558.058003][ T3518] bond5: (slave C): failed to get link speed/duplex [ 558.124633][T29641] No such timeout policy "syz0" [ 558.179760][ T9310] bond5: (slave C): failed to get link speed/duplex [ 558.317415][ T12] bond5: (slave C): failed to get link speed/duplex [ 558.524422][ T9317] bond5: (slave C): failed to get link speed/duplex [ 558.657877][ T44] bond5: (slave C): failed to get link speed/duplex [ 558.825449][T29683] __nla_validate_parse: 12 callbacks suppressed [ 558.825468][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6854'. [ 558.837024][ T12] bond5: (slave C): failed to get link speed/duplex [ 558.858675][T29681] gre0: entered promiscuous mode [ 558.871712][T29681] gre0: entered allmulticast mode [ 558.937771][T29681] Cannot find add_set index 0 as target [ 558.954550][T29686] veth5: entered allmulticast mode [ 558.989924][ T12] bond5: (slave C): failed to get link speed/duplex [ 559.117428][T29699] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6859'. [ 559.131362][T29696] tipc: Started in network mode [ 559.136254][T29696] tipc: Node identity ac14140f, cluster identity 4711 [ 559.160677][T29696] tipc: New replicast peer: 255.255.255.255 [ 559.169680][T29696] tipc: Enabled bearer , priority 10 [ 559.199469][T29704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6860'. [ 559.212448][T29704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6860'. [ 559.525269][T29726] bond0: (slave syz_tun): Releasing backup interface [ 559.544031][T29729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6869'. [ 559.564470][T29726] bridge_slave_0: left allmulticast mode [ 559.570869][T29726] bridge_slave_0: left promiscuous mode [ 559.590920][T29726] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.602960][T29726] bridge_slave_1: left allmulticast mode [ 559.610254][T29726] bridge_slave_1: left promiscuous mode [ 559.616140][T29726] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.681213][T29726] bond0: (slave bond_slave_0): Releasing backup interface [ 559.772108][T29726] bond0: (slave bond_slave_1): Releasing backup interface [ 559.810373][T29726] team0: Port device team_slave_0 removed [ 559.833709][T29726] team0: Port device team_slave_1 removed [ 559.842124][T29726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.850274][T29726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.861175][T29726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.870016][T29726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.005279][T29764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6880'. [ 560.259908][T29774] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 560.277456][ T5941] tipc: Node number set to 2886997007 [ 560.351636][T29787] veth0: entered promiscuous mode [ 560.370190][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6887'. [ 560.372934][T29781] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.558898][T29801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6891'. [ 560.579403][T29799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6890'. [ 560.795054][T29814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6895'. [ 560.825029][T29814] block nbd5: Unsupported socket: should be TCP or UNIX. [ 560.938870][T29819] netlink: 'syz.3.6897': attribute type 21 has an invalid length. [ 561.105040][T29827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.266709][T29841] netlink: 'syz.4.6905': attribute type 1 has an invalid length. [ 562.224429][T29889] netlink: 'syz.0.6918': attribute type 1 has an invalid length. [ 562.743878][T29926] syzkaller0: entered promiscuous mode [ 562.749777][T29926] syzkaller0: entered allmulticast mode [ 562.899914][T29934] unsupported nlmsg_type 40 [ 562.924827][T29935] netlink: 'syz.1.6926': attribute type 1 has an invalid length. [ 562.993421][ T1300] net_ratelimit: 20 callbacks suppressed [ 562.993440][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.082970][T29939] netlink: 'syz.3.6931': attribute type 16 has an invalid length. [ 563.093880][T29939] netlink: 'syz.3.6931': attribute type 3 has an invalid length. [ 564.707070][T29937] bond2: (slave geneve2): making interface the new active one [ 564.715384][T29937] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 564.736858][ T12] bond5: (slave C): failed to get link speed/duplex [ 564.815151][ T9325] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.832686][ T9317] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.874453][ T9317] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.920794][T29959] netlink: 'syz.1.6935': attribute type 1 has an invalid length. [ 564.932843][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.039078][ T9317] bond5: (slave C): failed to get link speed/duplex [ 565.066378][T29958] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.067810][T29972] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.084980][T29976] syzkaller1: entered promiscuous mode [ 565.115729][T29976] syzkaller1: entered allmulticast mode [ 565.194958][T29990] openvswitch: netlink: Multiple metadata blocks provided [ 565.242450][T29990] openvswitch: netlink: Multiple metadata blocks provided [ 565.311956][T29991] __nla_validate_parse: 10 callbacks suppressed [ 565.311977][T29991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6942'. [ 565.330173][T30001] IPVS: length: 4096 != 24 [ 565.357644][ T9317] bond5: (slave C): failed to get link speed/duplex [ 565.467873][ T12] bond5: (slave C): failed to get link speed/duplex [ 565.543725][T30012] erspan0: entered promiscuous mode [ 565.554820][T30012] vlan2: entered promiscuous mode [ 565.638044][ T12] bond5: (slave C): failed to get link speed/duplex [ 565.638863][T30017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6950'. [ 565.692106][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6952'. [ 565.742160][T30023] dvmrp6: entered allmulticast mode [ 565.751970][T30026] lo: entered allmulticast mode [ 565.759935][T30028] netlink: 'syz.0.6953': attribute type 2 has an invalid length. [ 565.772998][T30029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6952'. [ 565.806950][T30022] lo: left allmulticast mode [ 565.827351][ T9317] bond5: (slave C): failed to get link speed/duplex [ 565.876201][T30032] netlink: 'syz.0.6955': attribute type 2 has an invalid length. [ 565.987420][T30034] veth7: entered allmulticast mode [ 566.009533][ T9317] bond5: (slave C): failed to get link speed/duplex [ 566.034241][T30038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6958'. [ 566.045593][T30044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6958'. [ 566.277790][T30060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6962'. [ 566.312413][T30060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6962'. [ 566.433766][T30063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6965'. [ 566.639291][T30085] netlink: 'syz.2.6970': attribute type 1 has an invalid length. [ 566.668358][T30084] tipc: Started in network mode [ 566.680615][T30084] tipc: Node identity e2245d91ba14, cluster identity 4711 [ 566.697625][T30084] tipc: Enabled bearer , priority 0 [ 566.712993][T30086] syzkaller0: entered promiscuous mode [ 566.734221][T30086] syzkaller0: entered allmulticast mode [ 566.776244][T30100] netlink: 'syz.3.6972': attribute type 1 has an invalid length. [ 566.797600][T30100] netlink: 'syz.3.6972': attribute type 4 has an invalid length. [ 566.807704][T30100] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.6972'. [ 566.823716][T30095] veth9: entered promiscuous mode [ 566.890549][T30108] IPVS: set_ctl: invalid protocol: 115 172.30.1.4:20002 [ 566.942398][T30085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.972881][T30086] tipc: Resetting bearer [ 567.010997][T30086] tipc: Disabling bearer [ 567.222029][T30122] sctp: [Deprecated]: syz.1.6977 (pid 30122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.222029][T30122] Use struct sctp_sack_info instead [ 567.280275][T30122] netlink: 'syz.1.6977': attribute type 11 has an invalid length. [ 567.507572][T30137] veth9: entered promiscuous mode [ 568.087828][ T9310] net_ratelimit: 10 callbacks suppressed [ 568.087846][ T9310] bond5: (slave C): failed to get link speed/duplex [ 568.256956][ T3518] bond5: (slave C): failed to get link speed/duplex [ 568.289469][T30191] xt_TCPMSS: Only works on TCP SYN packets [ 568.537512][ T9317] bond5: (slave C): failed to get link speed/duplex [ 568.605910][T30207] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.658051][ T9325] bond5: (slave C): failed to get link speed/duplex [ 568.728534][T30217] netlink: 'syz.4.7000': attribute type 20 has an invalid length. [ 568.781503][T30219] ip6gre1: entered allmulticast mode [ 568.819641][T30217] netlink: 'syz.4.7000': attribute type 20 has an invalid length. [ 568.840981][ T9325] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.850086][ T9325] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.870924][ T9325] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.888747][ T9325] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.929203][ T9325] bond5: (slave C): failed to get link speed/duplex [ 569.023504][T30228] netlink: 'syz.4.7003': attribute type 1 has an invalid length. [ 569.186661][ T9325] bond5: (slave C): failed to get link speed/duplex [ 569.243933][T30240] Bluetooth: MGMT ver 1.23 [ 569.506617][ T9310] bond5: (slave C): failed to get link speed/duplex [ 569.627415][ T9325] bond5: (slave C): failed to get link speed/duplex [ 569.682474][T30261] netlink: 'syz.1.7015': attribute type 8 has an invalid length. [ 569.755380][T30266] netlink: 'syz.4.7017': attribute type 7 has an invalid length. [ 569.776680][ T9310] bond5: (slave C): failed to get link speed/duplex [ 569.823015][T30266] netlink: 'syz.4.7017': attribute type 8 has an invalid length. [ 569.904196][T30273] bond0: entered allmulticast mode [ 569.988014][ T9326] bond5: (slave C): failed to get link speed/duplex [ 570.104751][ T5940] IPVS: starting estimator thread 0... [ 570.236866][T30293] IPVS: using max 25 ests per chain, 60000 per kthread [ 570.272208][T30305] sctp: [Deprecated]: syz.4.7028 (pid 30305) Use of int in max_burst socket option. [ 570.272208][T30305] Use struct sctp_assoc_value instead [ 570.412784][T30322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 570.422135][T30322] __nla_validate_parse: 55 callbacks suppressed [ 570.422154][T30322] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7031'. [ 570.425394][T30318] netlink: 'syz.3.7032': attribute type 10 has an invalid length. [ 570.429271][T30322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7031'. [ 570.587052][T30335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7036'. [ 570.602786][T30335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7036'. [ 570.631014][T30335] gretap2: entered promiscuous mode [ 570.638953][T30335] gretap2: entered allmulticast mode [ 570.727163][T30341] syzkaller0: entered promiscuous mode [ 570.737237][T30341] syzkaller0: entered allmulticast mode [ 570.844196][T30348] netlink: 'syz.3.7042': attribute type 1 has an invalid length. [ 570.934888][T30350] bond3: (slave bridge3): making interface the new active one [ 570.944081][T30350] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 570.985089][T30361] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 570.994300][T30361] netlink: 'syz.1.7045': attribute type 2 has an invalid length. [ 571.048060][T30361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7045'. [ 571.148103][T30366] tipc: Enabled bearer , priority 0 [ 571.166010][T30366] syzkaller0: entered promiscuous mode [ 571.173644][T30366] syzkaller0: entered allmulticast mode [ 571.200150][T30365] tipc: Resetting bearer [ 571.233115][T30365] tipc: Disabling bearer [ 571.365520][T30367] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.407517][T30381] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7051'. [ 571.460065][T30383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7051'. [ 571.500390][T30385] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7053'. [ 571.723772][T30391] can: request_module (can-proto-0) failed. [ 572.358968][T30425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.861066][T30466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 572.945660][T30471] syzkaller0: entered promiscuous mode [ 572.953196][T30471] syzkaller0: entered allmulticast mode [ 573.135017][T30490] ip6tnl0: Caught tx_queue_len zero misconfig [ 573.210267][ T3518] net_ratelimit: 23 callbacks suppressed [ 573.210290][ T3518] bond5: (slave C): failed to get link speed/duplex [ 573.343921][T30500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7084'. [ 573.369093][T30500] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7084'. [ 573.467484][ T3518] bond5: (slave C): failed to get link speed/duplex [ 573.577579][T30500] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 573.600726][ T3518] bond5: (slave C): failed to get link speed/duplex [ 573.704736][T30508] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.727641][ T9310] bond5: (slave C): failed to get link speed/duplex [ 573.837119][ T9325] bond5: (slave C): failed to get link speed/duplex [ 573.950139][ T9300] bond5: (slave C): failed to get link speed/duplex [ 574.088169][ T9310] bond5: (slave C): failed to get link speed/duplex [ 574.216702][ T9300] bond5: (slave C): failed to get link speed/duplex [ 574.327868][ T3518] bond5: (slave C): failed to get link speed/duplex [ 574.458696][T30537] sock: sock_set_timeout: `syz.2.7094' (pid 30537) tries to set negative timeout [ 574.607398][ T10] IPVS: starting estimator thread 0... [ 574.708301][T30548] IPVS: using max 26 ests per chain, 62400 per kthread [ 575.499219][T30590] pim6reg1: entered promiscuous mode [ 575.504561][T30590] pim6reg1: entered allmulticast mode [ 575.700162][T30601] __nla_validate_parse: 3 callbacks suppressed [ 575.700181][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7113'. [ 575.723763][T30601] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7113'. [ 575.952317][T30625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7118'. [ 575.989789][T30624] bridge0: Caught tx_queue_len zero misconfig [ 576.017484][T30634] tc_dump_action: action bad kind [ 576.165483][T30644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7125'. [ 576.212748][T30642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7123'. [ 576.302238][T30650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7128'. [ 576.312687][T30650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7128'. [ 576.379107][T30650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7128'. [ 576.470026][T30661] team0: Mode changed to "activebackup" [ 576.528187][T30666] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7132'. [ 576.747446][T30680] validate_nla: 1 callbacks suppressed [ 576.747466][T30680] netlink: 'syz.2.7135': attribute type 33 has an invalid length. [ 577.024646][T30701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7142'. [ 577.105119][T30702] vlan0: entered promiscuous mode [ 577.288000][T30690] infiniband sy: set active [ 577.292717][T30690] infiniband sy: added bond_slave_0 [ 577.347886][T30690] RDS/IB: sy: added [ 577.351874][T30690] smc: adding ib device sy with port count 1 [ 577.358251][T30690] smc: ib device sy port 1 has no pnetid [ 577.802946][T30723] tipc: Started in network mode [ 577.816526][T30723] tipc: Node identity a24fb0e27571, cluster identity 4711 [ 577.846691][T30723] tipc: Enabled bearer , priority 0 [ 577.890070][T30727] syzkaller0: entered promiscuous mode [ 577.895587][T30727] syzkaller0: entered allmulticast mode [ 577.995183][T30723] tipc: Resetting bearer [ 578.050881][T30722] tipc: Resetting bearer [ 578.117462][T30722] tipc: Disabling bearer [ 578.287319][ T9317] net_ratelimit: 26 callbacks suppressed [ 578.287342][ T9317] bond5: (slave C): failed to get link speed/duplex [ 578.365850][ T9317] bridge_slave_0: left allmulticast mode [ 578.379601][ T9317] bridge_slave_0: left promiscuous mode [ 578.384119][T30747] sctp: [Deprecated]: syz.2.7157 (pid 30747) Use of int in max_burst socket option deprecated. [ 578.384119][T30747] Use struct sctp_assoc_value instead [ 578.393301][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.584792][ T9317] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 579.347309][ T9317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.356302][ T9317] bond_slave_0: left allmulticast mode [ 579.363833][ T9317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.373179][ T9317] bond_slave_1: left allmulticast mode [ 579.379996][ T9317] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 579.390555][ T9317] bridge_slave_1: left allmulticast mode [ 579.399587][ T9317] bond0 (unregistering): Released all slaves [ 579.412839][ T9317] bond1 (unregistering): Released all slaves [ 579.425554][ T9317] bond2 (unregistering): Released all slaves [ 579.438811][ T9317] bond3 (unregistering): Released all slaves [ 579.549687][ T9317] bond4 (unregistering): Released all slaves [ 579.564182][ T9317] bond5 (unregistering): Released all slaves [ 579.578429][ T9317] bond6 (unregistering): Released all slaves [ 579.595013][T30747] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 579.633738][ T9310] bond5: (slave C): failed to get link speed/duplex [ 579.710429][T30764] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 579.778953][ T9326] bond5: (slave C): failed to get link speed/duplex [ 579.796315][ T9317] 9: left promiscuous mode [ 579.907159][ T9326] bond5: (slave C): failed to get link speed/duplex [ 579.986946][ T9317] : left promiscuous mode [ 580.046955][ T9310] bond5: (slave C): failed to get link speed/duplex [ 580.112710][ T9317] tipc: Left network mode [ 580.197375][T30792] veth0_to_team: entered promiscuous mode [ 580.256576][ T3518] bond5: (slave C): failed to get link speed/duplex [ 580.396776][ T9326] bond5: (slave C): failed to get link speed/duplex [ 580.517173][ T3518] bond5: (slave C): failed to get link speed/duplex [ 580.585339][T30815] netlink: 'syz.4.7176': attribute type 1 has an invalid length. [ 580.690731][T30816] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 580.738841][T30816] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 580.772213][T30815] __nla_validate_parse: 5 callbacks suppressed [ 580.772231][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7176'. [ 580.798856][T30816] bond3: (slave xfrm1): making interface the new active one [ 580.807960][T30816] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 580.843182][T30815] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 580.871503][T30815] bond3 (unregistering): Released all slaves [ 580.882043][T30828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7179'. [ 580.909547][ T44] bond5: (slave C): failed to get link speed/duplex [ 580.909747][T30828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7179'. [ 581.477561][T30859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7186'. [ 581.498953][T30861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 581.521398][T30863] ipt_ECN: cannot use operation on non-tcp rule [ 581.702108][T30870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7188'. [ 582.040890][T30884] tunl0: Caught tx_queue_len zero misconfig [ 582.202535][T30894] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.209954][T30894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.227542][T30894] bridge0: entered allmulticast mode [ 582.343988][T30906] sctp: [Deprecated]: syz.4.7200 (pid 30906) Use of int in maxseg socket option. [ 582.343988][T30906] Use struct sctp_assoc_value instead [ 582.370671][T30906] netlink: 300 bytes leftover after parsing attributes in process `syz.4.7200'. [ 582.487593][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7201'. [ 582.586805][T30916] nbd: nbd4 already in use [ 582.711102][T30925] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7206'. [ 582.771301][T30926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.910018][T30931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7208'. [ 583.118930][T30943] netlink: 'syz.4.7212': attribute type 11 has an invalid length. [ 583.164347][T30947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7213'. [ 583.255022][T30955] x_tables: duplicate underflow at hook 1 [ 583.327925][ T9308] net_ratelimit: 19 callbacks suppressed [ 583.327946][ T9308] bond5: (slave C): failed to get link speed/duplex [ 583.399940][T30962] veth0: entered promiscuous mode [ 583.427879][T30962] veth0 (unregistering): left promiscuous mode [ 583.473160][ T9310] bond5: (slave C): failed to get link speed/duplex [ 583.597419][ T3518] bond5: (slave C): failed to get link speed/duplex [ 583.746554][ T44] bond5: (slave C): failed to get link speed/duplex [ 583.857118][ T9310] bond5: (slave C): failed to get link speed/duplex [ 583.966670][ T44] bond5: (slave C): failed to get link speed/duplex [ 584.080625][ T44] bond5: (slave C): failed to get link speed/duplex [ 584.237107][ T9310] bond5: (slave C): failed to get link speed/duplex [ 584.350988][ T44] bond5: (slave C): failed to get link speed/duplex [ 584.385925][T31009] sch_tbf: peakrate 4 is lower than or equals to rate 8 ! [ 584.468412][ T9310] bond5: (slave C): failed to get link speed/duplex [ 584.561057][T31013] syzkaller1: entered promiscuous mode [ 584.582308][T31013] syzkaller1: entered allmulticast mode [ 584.784916][T31027] netlink: 'syz.1.7239': attribute type 1 has an invalid length. [ 584.899497][T31037] netlink: 'syz.0.7242': attribute type 1 has an invalid length. [ 584.938203][T31027] netlink: 'syz.1.7239': attribute type 1 has an invalid length. [ 584.951907][ T9317] hsr_slave_0: left promiscuous mode [ 584.966221][ T9317] hsr_slave_1: left promiscuous mode [ 585.094678][ T9317] pim6reg (unregistering): left allmulticast mode [ 585.517661][T31073] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 585.892099][ T9317] team0 (unregistering): Port device team_slave_1 removed [ 585.952657][ T9317] team0 (unregistering): Port device team_slave_0 removed [ 586.420474][T31037] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 586.441477][T31031] bond4: (slave gretap1): making interface the new active one [ 586.461363][T31031] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 586.470929][T31048] __nla_validate_parse: 5 callbacks suppressed [ 586.470947][T31048] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7241'. [ 586.603599][T31095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7249'. [ 586.774886][T31110] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7252'. [ 586.900690][T31123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7254'. [ 586.962980][T31123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7254'. [ 586.963039][T31125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7251'. [ 587.260450][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7260'. [ 587.290799][T31145] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.7257'. [ 587.405873][ T9317] IPVS: stop unused estimator thread 0... [ 587.461563][T31160] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 587.474521][T31160] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 587.500367][T31163] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 587.560412][ T9317] bridge_slave_1: left allmulticast mode [ 587.560607][T31167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7265'. [ 587.572403][ T9317] bridge_slave_1: left promiscuous mode [ 587.582649][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.598171][ T9317] bridge_slave_0: left promiscuous mode [ 587.604204][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.940564][ T9317] bond6 (unregistering): (slave geneve2): Releasing active interface [ 587.981846][ T9317] team0: Port device geneve0 removed [ 588.329618][ T9317] bond2 (unregistering): (slave bridge7): Releasing backup interface [ 588.338248][ T9317] bridge7 (unregistering): left promiscuous mode [ 588.809529][ T9317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.820597][ T9317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.832884][ T9317] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 588.843062][ T9317] bond0 (unregistering): Released all slaves [ 588.856157][ T9317] bond1 (unregistering): Released all slaves [ 588.872983][ T9317] bond2 (unregistering): Released all slaves [ 589.010698][ T9317] bond3 (unregistering): Released all slaves [ 589.133866][ T9317] bond4 (unregistering): Released all slaves [ 589.146219][ T9317] bond5 (unregistering): Released all slaves [ 589.260890][ T9317] bond6 (unregistering): Released all slaves [ 589.370503][ T9317] bond7 (unregistering): Released all slaves [ 589.383671][ T9317] bond8 (unregistering): Released all slaves [ 589.492107][ T9317] bond9 (unregistering): Released all slaves [ 589.504609][ T9317] bond10 (unregistering): Released all slaves [ 589.518021][ T9317] bond11 (unregistering): Released all slaves [ 589.630916][ T9317] bond12 (unregistering): (slave veth1): Releasing active interface [ 589.640781][ T9317] bond12 (unregistering): Released all slaves [ 589.653340][ T9317] bond13 (unregistering): Released all slaves [ 589.670832][T31169] bond0: entered promiscuous mode [ 589.675870][T31169] : entered promiscuous mode [ 589.681464][T31169] bond_slave_1: entered promiscuous mode [ 589.689243][T31169] batadv0: entered promiscuous mode [ 589.694932][T31169] debugfs: 'hsr1' already exists in 'hsr' [ 589.700831][T31169] Cannot create hsr debugfs directory [ 589.709994][T31169] hsr1: entered allmulticast mode [ 589.715329][T31169] bond0: entered allmulticast mode [ 589.720925][T31169] : entered allmulticast mode [ 589.726198][T31169] bond_slave_1: entered allmulticast mode [ 589.732531][T31169] batadv0: entered allmulticast mode [ 589.748949][T31169] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 589.766027][T31169] bond0: left promiscuous mode [ 589.771615][T31169] : left promiscuous mode [ 589.776663][T31169] bond_slave_1: left promiscuous mode [ 589.787173][T31169] batadv0: left promiscuous mode [ 589.833682][T31167] net_ratelimit: 11 callbacks suppressed [ 589.833702][T31167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.876615][ T9326] bond5: (slave C): failed to get link speed/duplex [ 590.006778][ T9308] bond5: (slave C): failed to get link speed/duplex [ 590.119018][ T9326] bond5: (slave C): failed to get link speed/duplex [ 590.215516][T31211] syz.1.7280: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 590.238298][T31211] CPU: 1 UID: 0 PID: 31211 Comm: syz.1.7280 Not tainted syzkaller #0 PREEMPT(full) [ 590.238322][T31211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.238332][T31211] Call Trace: [ 590.238340][T31211] [ 590.238348][T31211] dump_stack_lvl+0x189/0x250 [ 590.238380][T31211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.238402][T31211] ? __pfx__printk+0x10/0x10 [ 590.238421][T31211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 590.238444][T31211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 590.238468][T31211] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 590.238493][T31211] warn_alloc+0x214/0x310 [ 590.238524][T31211] ? __pfx_warn_alloc+0x10/0x10 [ 590.238558][T31211] ? __get_vm_area_node+0x28f/0x300 [ 590.238581][T31211] ? hash_ipportip_create+0x358/0xfe0 [ 590.238607][T31211] __vmalloc_node_range_noprof+0x690/0x12d0 [ 590.238632][T31211] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 590.238676][T31211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.238699][T31211] ? hash_ipportip_create+0x358/0xfe0 [ 590.238723][T31211] ? rcu_is_watching+0x15/0xb0 [ 590.238743][T31211] ? hash_ipportip_create+0x358/0xfe0 [ 590.238764][T31211] __kvmalloc_node_noprof+0x674/0x910 [ 590.238788][T31211] ? hash_ipportip_create+0x358/0xfe0 [ 590.238808][T31211] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 590.238837][T31211] ? hash_ipportip_create+0x2fe/0xfe0 [ 590.238863][T31211] hash_ipportip_create+0x358/0xfe0 [ 590.238893][T31211] ? __nla_parse+0x40/0x60 [ 590.238913][T31211] ? __pfx_hash_ipportip_create+0x10/0x10 [ 590.238936][T31211] ip_set_create+0xa97/0x1940 [ 590.238960][T31211] ? ip_set_create+0x4a2/0x1940 [ 590.238995][T31211] ? __pfx_ip_set_create+0x10/0x10 [ 590.239056][T31211] nfnetlink_rcv_msg+0xb4d/0x1130 [ 590.239081][T31211] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 590.239124][T31211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 590.239144][T31211] ? kasan_save_track+0x4f/0x80 [ 590.239221][T31211] netlink_rcv_skb+0x208/0x470 [ 590.239236][T31211] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.239261][T31211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 590.239286][T31211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.239316][T31211] ? bpf_lsm_capable+0x9/0x20 [ 590.239336][T31211] ? security_capable+0x7e/0x2e0 [ 590.239367][T31211] nfnetlink_rcv+0x282/0x2590 [ 590.239394][T31211] ? __dev_queue_xmit+0x27b/0x3b50 [ 590.239415][T31211] ? __dev_queue_xmit+0x1d79/0x3b50 [ 590.239433][T31211] ? kasan_save_track+0x3e/0x80 [ 590.239453][T31211] ? __kasan_slab_alloc+0x6c/0x80 [ 590.239485][T31211] ? __dev_queue_xmit+0x27b/0x3b50 [ 590.239519][T31211] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 590.239543][T31211] ? __pfx___dev_queue_xmit+0x10/0x10 [ 590.239579][T31211] ? ref_tracker_free+0x63a/0x7d0 [ 590.239598][T31211] ? __asan_memcpy+0x40/0x70 [ 590.239619][T31211] ? __pfx_ref_tracker_free+0x10/0x10 [ 590.239655][T31211] ? skb_clone+0x246/0x3a0 [ 590.239679][T31211] ? __netlink_deliver_tap+0x807/0x850 [ 590.239696][T31211] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.239722][T31211] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.239749][T31211] netlink_unicast+0x82f/0x9e0 [ 590.239784][T31211] ? __pfx_netlink_unicast+0x10/0x10 [ 590.239816][T31211] ? netlink_sendmsg+0x642/0xb30 [ 590.239832][T31211] ? skb_put+0x11b/0x210 [ 590.239855][T31211] netlink_sendmsg+0x805/0xb30 [ 590.239884][T31211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.239906][T31211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 590.239933][T31211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.239950][T31211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.239970][T31211] __sock_sendmsg+0x21c/0x270 [ 590.239997][T31211] ____sys_sendmsg+0x505/0x830 [ 590.240024][T31211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.240054][T31211] ? import_iovec+0x74/0xa0 [ 590.240080][T31211] ___sys_sendmsg+0x21f/0x2a0 [ 590.240103][T31211] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.240162][T31211] ? __fget_files+0x2a/0x420 [ 590.240179][T31211] ? __fget_files+0x3a0/0x420 [ 590.240206][T31211] __x64_sys_sendmsg+0x19b/0x260 [ 590.240227][T31211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.240263][T31211] ? do_syscall_64+0xbe/0xfa0 [ 590.240291][T31211] do_syscall_64+0xfa/0xfa0 [ 590.240312][T31211] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.240334][T31211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.240351][T31211] ? clear_bhb_loop+0x60/0xb0 [ 590.240373][T31211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.240389][T31211] RIP: 0033:0x7f34eb58f749 [ 590.240411][T31211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.240428][T31211] RSP: 002b:00007f34ec36c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.240448][T31211] RAX: ffffffffffffffda RBX: 00007f34eb7e6090 RCX: 00007f34eb58f749 [ 590.240462][T31211] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 590.240473][T31211] RBP: 00007f34eb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 590.240485][T31211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.240495][T31211] R13: 00007f34eb7e6128 R14: 00007f34eb7e6090 R15: 00007ffc96d9f5c8 [ 590.240527][T31211] [ 590.241319][T31211] Mem-Info: [ 590.244642][ T9326] bond5: (slave C): failed to get link speed/duplex [ 590.259979][T31211] active_anon:3917 inactive_anon:0 isolated_anon:0 [ 590.259979][T31211] active_file:3080 inactive_file:40091 isolated_file:0 [ 590.259979][T31211] unevictable:768 dirty:75 writeback:0 [ 590.259979][T31211] slab_reclaimable:13361 slab_unreclaimable:195780 [ 590.259979][T31211] mapped:28968 shmem:1360 pagetables:1227 [ 590.259979][T31211] sec_pagetables:0 bounce:0 [ 590.259979][T31211] kernel_misc_reclaimable:0 [ 590.259979][T31211] free:1222394 free_pcp:15196 free_cma:0 [ 590.434649][T31223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7277'. [ 590.442307][T31211] Node 0 active_anon:15668kB inactive_anon:0kB active_file:12320kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119972kB dirty:300kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16828kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 590.841484][T31211] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 590.875551][T31211] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.914261][T31211] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 590.924880][T31211] Node 0 DMA32 free:978588kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15768kB inactive_anon:0kB active_file:12320kB inactive_file:160164kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:42584kB local_pcp:21144kB free_cma:0kB [ 590.958993][T31211] lowmem_reserve[]: 0 0 0 0 0 [ 590.963741][T31211] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.994425][T31211] lowmem_reserve[]: 0 0 0 0 0 [ 590.999333][T31211] Node 1 Normal free:3895152kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17940kB local_pcp:10548kB free_cma:0kB [ 591.034341][T31211] lowmem_reserve[]: 0 0 0 0 0 [ 591.037236][ T9308] bond5: (slave C): failed to get link speed/duplex [ 591.045863][T31211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.059978][T31211] Node 0 DMA32: 1664*4kB (UM) 527*8kB (UME) 59*16kB (UME) 356*32kB (UME) 82*64kB (UME) 25*128kB (UME) 335*256kB (UM) 364*512kB (UM) 211*1024kB (UM) 4*2048kB (UME) 110*4096kB (UM) = 978600kB [ 591.109527][T31211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.149523][T31211] Node 1 Normal: 180*4kB (UE) 58*8kB (UME) 53*16kB (UME) 116*32kB (UME) 40*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895152kB [ 591.170070][ T9310] bond5: (slave C): failed to get link speed/duplex [ 591.180248][T31211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.200097][T31211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.212299][T31211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.223583][T31211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.239059][T31211] 44530 total pagecache pages [ 591.251131][T31211] 0 pages in swap cache [ 591.262283][T31211] Free swap = 124996kB [ 591.274627][T31211] Total swap = 124996kB [ 591.284748][T31211] 2097051 pages RAM [ 591.293242][T31211] 0 pages HighMem/MovableOnly [ 591.300059][ T9308] bond5: (slave C): failed to get link speed/duplex [ 591.308844][T31211] 424124 pages reserved [ 591.313147][T31211] 0 pages cma reserved [ 591.357328][ T9317] : left promiscuous mode [ 591.437170][ T9326] bond5: (slave C): failed to get link speed/duplex [ 591.472285][ T9317] 9: left promiscuous mode [ 591.557315][ T9308] bond5: (slave C): failed to get link speed/duplex [ 591.574371][T31253] x_tables: unsorted entry at hook 1 [ 591.602299][T31255] __nla_validate_parse: 4 callbacks suppressed [ 591.602318][T31255] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7293'. [ 591.619160][ T9317] tipc: Disabling bearer [ 591.630479][ T9317] tipc: Disabling bearer [ 591.648518][T31253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7292'. [ 591.660996][ T9317] tipc: Left network mode [ 591.782375][T31253] sctp: [Deprecated]: syz.1.7292 (pid 31253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.782375][T31253] Use struct sctp_sack_info instead [ 591.799571][T31267] xt_TPROXY: Can be used only with -p tcp or -p udp [ 591.839148][T31269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7300'. [ 591.880377][T31265] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 591.912967][T31273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7299'. [ 591.935942][T31269] netlink: 'syz.3.7300': attribute type 7 has an invalid length. [ 591.949888][T31273] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7299'. [ 591.961638][T31269] netlink: 'syz.3.7300': attribute type 8 has an invalid length. [ 592.010396][T31269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7300'. [ 592.125538][T31269] team0: entered promiscuous mode [ 592.134461][T31269] team_slave_0: entered promiscuous mode [ 592.144755][T31269] team_slave_1: entered promiscuous mode [ 592.154257][T31269] bond0: entered promiscuous mode [ 592.160478][T31269] bond_slave_0: entered promiscuous mode [ 592.167061][T31269] bond_slave_1: entered promiscuous mode [ 592.175507][T31269] gretap0: entered promiscuous mode [ 592.198278][T31269] debugfs: 'hsr1' already exists in 'hsr' [ 592.204167][T31269] Cannot create hsr debugfs directory [ 592.219008][T31269] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 592.225482][T31299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7306'. [ 593.033041][T31344] netlink: 'syz.4.7319': attribute type 1 has an invalid length. [ 593.332923][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7324'. [ 593.353846][T31366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7326'. [ 593.358459][T31367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7324'. [ 593.460644][T31354] syzkaller1: entered promiscuous mode [ 593.466159][T31354] syzkaller1: entered allmulticast mode [ 593.511939][ T9317] hsr_slave_0: left promiscuous mode [ 593.528943][ T9317] hsr_slave_1: left promiscuous mode [ 593.550676][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.567144][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.571431][T31387] siw: device registration error -23 [ 593.587797][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.595414][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.608626][ T9317] veth1_macvtap: left promiscuous mode [ 593.614263][ T9317] veth1_vlan: left promiscuous mode [ 593.627864][ T9317] veth0_vlan: left promiscuous mode [ 593.737853][T31398] delete_channel: no stack [ 594.219014][ T9317] team0 (unregistering): Port device team_slave_1 removed [ 594.261698][ T9317] team0 (unregistering): Port device team_slave_0 removed [ 594.629216][T31381] batadv_slave_0: Caught tx_queue_len zero misconfig [ 594.838793][T31411] nbd: couldn't find a device at index 0 [ 594.851895][T31412] x_tables: duplicate underflow at hook 1 [ 594.909377][ T12] net_ratelimit: 12 callbacks suppressed [ 594.909398][ T12] bond5: (slave C): failed to get link speed/duplex [ 594.983512][T31417] netlink: 'syz.4.7340': attribute type 1 has an invalid length. [ 595.041503][T31417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.060180][T31425] mac80211_hwsim hwsim57 : renamed from wlan1 [ 595.102649][T31414] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 595.137876][T31424] veth5: entered promiscuous mode [ 595.157998][T31424] bond3: (slave veth5): Enslaving as an active interface with an up link [ 595.237192][T31428] tipc: Started in network mode [ 595.242181][T31428] tipc: Node identity 080211, cluster identity 4711 [ 595.262625][T31428] tipc: Enabled bearer , priority 0 [ 595.287141][ T12] bond5: (slave C): failed to get link speed/duplex [ 595.300150][T31428] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 595.310031][T31428] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 595.427974][ T9300] bond5: (slave C): failed to get link speed/duplex [ 595.478999][T31445] syzkaller1: entered promiscuous mode [ 595.503185][T31445] syzkaller1: entered allmulticast mode [ 595.557558][ T9308] bond5: (slave C): failed to get link speed/duplex [ 595.611819][ T9317] IPVS: stop unused estimator thread 0... [ 595.746871][ T9300] bond5: (slave C): failed to get link speed/duplex [ 595.857257][ T9300] bond5: (slave C): failed to get link speed/duplex [ 595.964850][ T9317] : left allmulticast mode [ 595.983276][ T9317] : left promiscuous mode [ 595.989113][ T9317] bridge0: port 1() entered disabled state [ 596.270678][ T9317] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 596.459861][T31499] netlink: 'syz.4.7365': attribute type 9 has an invalid length. [ 596.497108][ T3518] smc: removing ib device syz2 [ 596.714239][ T9317] bond1 (unregistering): (slave gretap1): Releasing active interface [ 596.972639][ T9317] bond4 (unregistering): (slave geneve2): Releasing active interface [ 597.055205][ T9317] team0: Port device geneve0 removed [ 598.001845][ T9317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.021978][ T9317] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 598.032859][ T9317] bond0 (unregistering): Released all slaves [ 598.046692][ T9317] bond1 (unregistering): Released all slaves [ 598.159910][ T9317] bond2 (unregistering): (slave veth3): Releasing active interface [ 598.169184][ T9317] bond2 (unregistering): Released all slaves [ 598.182186][ T9317] bond3 (unregistering): Released all slaves [ 598.294858][ T9317] bond4 (unregistering): Released all slaves [ 598.406684][ T9317] bond5 (unregistering): (slave C): Removing an active aggregator [ 598.416095][ T9317] bond5 (unregistering): (slave C): Releasing backup interface [ 598.424310][ T9317] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 598.437228][ T9317] bond5 (unregistering): Released all slaves [ 598.451560][ T9317] bond6 (unregistering): (slave bond7): Releasing backup interface [ 598.460619][ T9317] bond6 (unregistering): Released all slaves [ 598.580823][ T9317] bond7 (unregistering): Released all slaves [ 598.607695][ T5906] tipc: Node number set to 134353152 [ 598.812737][T31518] x_tables: duplicate underflow at hook 3 [ 598.822511][T31523] __nla_validate_parse: 8 callbacks suppressed [ 598.822529][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7372'. [ 598.861023][T31524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7371'. [ 598.884688][T31524] Unsupported xt match [ 598.884707][T31524] unable to load match [ 598.979225][T31533] gre0: entered promiscuous mode [ 599.171699][T31553] tc_dump_action: action bad kind [ 599.386093][T31563] netlink: 'syz.0.7383': attribute type 1 has an invalid length. [ 599.437283][T31564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7383'. [ 599.763532][T31591] net veth1_virt_wifi .: renamed from virt_wifi0 [ 599.983882][T31603] netlink: 'syz.0.7397': attribute type 21 has an invalid length. [ 600.032502][T31603] netlink: 'syz.0.7397': attribute type 6 has an invalid length. [ 600.035104][T31605] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7398'. [ 600.046316][T31603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7397'. [ 600.231541][T31620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7404'. [ 600.256645][T31620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7404'. [ 600.295089][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7404'. [ 600.393073][T31636] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7407'. [ 600.421177][ T9317] tipc: Disabling bearer [ 600.431105][ T9317] tipc: Left network mode [ 600.434309][T31636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7407'. [ 600.661036][T31651] netlink: 'syz.4.7413': attribute type 10 has an invalid length. [ 600.733413][T31656] tc_dump_action: action bad kind [ 600.740196][T31651] netlink: 'syz.4.7413': attribute type 1 has an invalid length. [ 600.765425][T31657] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 600.896940][T31668] netlink: 'syz.2.7420': attribute type 21 has an invalid length. [ 600.961563][T31668] netlink: 'syz.2.7420': attribute type 6 has an invalid length. [ 601.052079][T31669] netlink: 'syz.1.7419': attribute type 33 has an invalid length. [ 601.125490][T31683] x_tables: unsorted entry at hook 3 [ 601.459784][T31703] ipt_REJECT: TCP_RESET invalid for non-tcp [ 601.545966][ T9317] hsr_slave_0: left promiscuous mode [ 601.567844][ T9317] hsr_slave_1: left promiscuous mode [ 601.577558][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.628670][T31714] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.641311][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.650070][T31716] netlink: 'syz.2.7432': attribute type 13 has an invalid length. [ 601.658323][T31714] netlink: 'syz.2.7432': attribute type 13 has an invalid length. [ 601.824971][ T9317] pimreg3 (unregistering): left allmulticast mode [ 602.194591][ T9317] team0 (unregistering): Port device team_slave_1 removed [ 602.238767][ T9317] team0 (unregistering): Port device team_slave_0 removed [ 602.474045][ T9317] team0 (unregistering): Port device dummy0 removed [ 602.738673][T31716] bridge0: left allmulticast mode [ 602.752065][T31716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.764154][T31716] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.777799][T31716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.802812][T31714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.130124][T31751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.306317][T31756] bond4: entered promiscuous mode [ 603.313681][T31756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.351212][T31756] bond4: (slave bridge6): making interface the new active one [ 603.359896][T31756] bridge6: entered promiscuous mode [ 603.373863][T31756] bridge6: left promiscuous mode [ 603.870953][T31809] xt_l2tp: v2 doesn't support IP mode [ 604.132891][T31821] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.192460][T31818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.218554][T31829] __nla_validate_parse: 9 callbacks suppressed [ 604.218572][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7456'. [ 604.232299][T31832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7458'. [ 604.379890][T31841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7461'. [ 604.419037][T31846] validate_nla: 5 callbacks suppressed [ 604.419054][T31846] netlink: 'syz.4.7463': attribute type 13 has an invalid length. [ 604.434826][T31848] netlink: 'syz.2.7462': attribute type 10 has an invalid length. [ 604.675902][T31841] bond0 (unregistering): (slave 32): Releasing backup interface [ 604.685306][T31841] : left allmulticast mode [ 604.724026][T31841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.736144][T31841] bond_slave_1: left allmulticast mode [ 604.750867][T31841] bond0 (unregistering): Released all slaves [ 604.870190][T31848] veth0_virt_wifi: entered allmulticast mode [ 604.883417][T31848] veth0_virt_wifi: entered promiscuous mode [ 604.897121][T31848] team0: Port device veth0_virt_wifi added [ 604.921009][T31871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7466'. [ 604.951016][T31860] syzkaller1: entered promiscuous mode [ 604.959596][T31860] syzkaller1: entered allmulticast mode [ 605.096915][T31877] tipc: Enabling of bearer rejected, already enabled [ 605.144584][ T9317] IPVS: stop unused estimator thread 0... [ 605.164774][T31884] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 605.222653][T31884] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 605.339720][T31877] tipc: Resetting bearer [ 605.382908][T31899] netlink: 'syz.0.7474': attribute type 21 has an invalid length. [ 605.405482][T31899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7474'. [ 605.564437][T31914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7480'. [ 605.601154][T31914] netlink: 11 bytes leftover after parsing attributes in process `syz.4.7480'. [ 605.625943][T31914] ip6tnl0: Caught tx_queue_len zero misconfig [ 605.685559][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7481'. [ 605.727835][T31916] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7481'. [ 605.758766][T31916] mac80211_hwsim hwsim50 wlan0: Caught tx_queue_len zero misconfig [ 605.803614][T31937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7485'. [ 606.078065][T31955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.120178][T31960] netlink: 'syz.2.7492': attribute type 7 has an invalid length. [ 606.140829][T31958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.157107][T31958] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 606.184486][T31958] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 606.657092][T31995] netlink: 'syz.0.7504': attribute type 23 has an invalid length. [ 606.996884][T32016] xfrm1: entered allmulticast mode [ 607.073943][T32024] netlink: 'syz.4.7516': attribute type 4 has an invalid length. [ 607.168876][T32031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.258378][T32038] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 607.402485][T32047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.428486][T32048] Cannot find set identified by id 65534 to match [ 607.443792][T32048] netlink: 'syz.1.7523': attribute type 1 has an invalid length. [ 607.453961][T32048] netlink: 'syz.1.7523': attribute type 4 has an invalid length. [ 607.550247][T32058] RDS: rds_bind could not find a transport for ::ffff:172.30.2.2, load rds_tcp or rds_rdma? [ 607.608791][T32055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.623833][T32055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.746806][T32055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.768158][T32055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.911427][T32055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.957176][T32055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.060432][T32055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.094690][T32055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.440037][ T9317] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.448563][ T9317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.480993][ T9317] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.500077][ T9317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.562858][ T9317] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.571663][ T9317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.619701][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.628545][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.030683][T32135] xfrm0: left allmulticast mode [ 609.280754][T32152] __nla_validate_parse: 15 callbacks suppressed [ 609.280781][T32152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7552'. [ 609.590832][T32175] gre0: left promiscuous mode [ 609.641111][T32180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7561'. [ 609.673375][T32183] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 609.698518][T32177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7562'. [ 609.699595][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.740528][T32177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.767637][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.774808][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 609.856179][T32181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7562'. [ 609.987800][T32199] netlink: 'syz.3.7566': attribute type 1 has an invalid length. [ 610.005410][T32204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7566'. [ 610.140085][T32200] veth1: entered promiscuous mode [ 610.342463][T32180] infiniband syz2: set down [ 610.348010][ T8018] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.376075][T32180] infiniband syz2: added ip6_vti0 [ 610.468946][T32180] RDS/IB: syz2: added [ 610.473116][T32180] smc: adding ib device syz2 with port count 1 [ 610.482819][T32180] smc: ib device syz2 port 1 has no pnetid [ 610.508153][ T5830] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.522084][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.607943][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7574'. [ 610.680072][T32240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 610.807869][T32244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7577'. [ 610.836667][T32244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.919914][T32259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7582'. [ 610.939337][T32259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7582'. [ 610.969206][T32261] netlink: 'syz.3.7579': attribute type 5 has an invalid length. [ 610.978839][T32261] syz_tun: entered allmulticast mode [ 610.998696][T32261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7579'. [ 611.015759][T32253] syz_tun: left allmulticast mode [ 611.073459][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 611.163589][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 611.232065][T32276] veth1: mtu less than device minimum [ 611.391851][T32280] IPv6: sit2: Disabled Multicast RS [ 611.398359][T32280] sit2: entered allmulticast mode [ 611.402604][T32285] netlink: 'syz.1.7589': attribute type 1 has an invalid length. [ 611.446245][T32285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.475218][T32288] netlink: 'syz.2.7590': attribute type 10 has an invalid length. [ 611.517360][T32288] team0: Device dummy0 failed to register rx_handler [ 611.685991][T32297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.750622][T32297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.764968][T32297] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 611.777487][T32297] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 611.810283][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.069994][T32312] bond7: entered promiscuous mode [ 612.075067][T32312] bond7: entered allmulticast mode [ 612.087539][T32312] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.124781][T32322] netlink: 'syz.0.7601': attribute type 13 has an invalid length. [ 612.322734][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.472788][T32333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.497144][T32333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.527653][T32333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 612.640572][T32333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.678415][T32333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.723086][T32333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 612.779326][T32359] vlan0: entered allmulticast mode [ 612.784636][T32359] veth1: entered allmulticast mode [ 612.852978][T32333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.863839][T32333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.874658][T32333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 612.894648][T32365] team0: Caught tx_queue_len zero misconfig [ 612.905062][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.030756][T32333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.055033][T32333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.077853][T32333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 613.258494][T32389] netlink: 'syz.2.7616': attribute type 4 has an invalid length. [ 613.342913][ T9300] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.357472][ T9300] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 613.367888][ T9300] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 613.390605][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.423681][T32398] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.446516][T32398] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 613.454817][T32398] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 613.550720][ T9300] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.560215][ T9300] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 613.601934][ T9300] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 613.611328][T32411] bond0: Caught tx_queue_len zero misconfig [ 613.688945][ T9308] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.701711][ T9308] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 613.719818][ T9308] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 613.875774][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.107197][T32446] syzkaller0: entered promiscuous mode [ 614.112718][T32446] syzkaller0: entered allmulticast mode [ 614.372982][T32459] dvmrp0: entered allmulticast mode [ 614.537953][T32180] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.626314][T32473] netlink: 'syz.2.7638': attribute type 1 has an invalid length. [ 615.205284][T32508] __nla_validate_parse: 13 callbacks suppressed [ 615.205306][T32508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7649'. [ 615.724603][T32535] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7655'. [ 615.766766][T32535] netlink: 'syz.3.7655': attribute type 2 has an invalid length. [ 615.783740][T32535] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7655'. [ 615.815088][T32536] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7655'. [ 615.840837][T32528] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.998783][T32546] netlink: 'syz.2.7659': attribute type 2 has an invalid length. [ 616.006945][T32546] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7659'. [ 616.361290][T32567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7663'. [ 616.371714][T32567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7663'. [ 616.379041][T32572] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7665'. [ 616.392356][T32569] team0: Caught tx_queue_len zero misconfig [ 616.411077][T32575] geneve1: Caught tx_queue_len zero misconfig [ 616.569919][T32582] netlink: 'syz.0.7667': attribute type 1 has an invalid length. [ 616.657360][T32588] netlink: 'syz.2.7669': attribute type 4 has an invalid length. [ 616.752460][T32590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7668'. [ 616.811362][T32594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7670'. [ 616.883548][T32594] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 617.295784][T32619] netlink: 'syz.3.7676': attribute type 1 has an invalid length. [ 617.411532][T32619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.478205][T32630] bond6: (slave geneve2): making interface the new active one [ 617.500106][T32630] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 617.580795][ T9323] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 617.592818][T32643] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 617.602546][T32643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.893342][T32671] openvswitch: netlink: Flow key attr not present in new flow. [ 618.440828][T32683] xt_ecn: cannot match TCP bits for non-tcp packets [ 618.485761][T32679] ip6tnl0: Caught tx_queue_len zero misconfig [ 618.708482][T32691] syzkaller0: entered promiscuous mode [ 618.717979][T32691] syzkaller0: entered allmulticast mode [ 618.895345][T32707] netlink: 'syz.2.7700': attribute type 13 has an invalid length. [ 618.919414][T32707] netlink: 'syz.2.7700': attribute type 58 has an invalid length. [ 619.014592][T32719] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 620.796986][T32730] __nla_validate_parse: 7 callbacks suppressed [ 620.797006][T32730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7705'. [ 620.836822][T32730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7705'. [ 620.875336][T32735] syzkaller1: entered promiscuous mode [ 620.902199][T32735] syzkaller1: entered allmulticast mode [ 620.953121][T32741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7707'. [ 621.129475][T32750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7712'. [ 621.174352][T32753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7710'. [ 621.217396][T32753] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7710'. [ 621.231690][T32753] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 621.272734][T32758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.311130][T32759] bond8: Unable to set up delay as MII monitoring is disabled [ 621.321470][T32759] bond8 (unregistering): Released all slaves [ 621.332470][T32766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7715'. [ 621.345742][T32711] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.347829][T32757] netem: change failed [ 621.359132][T32753] syzkaller0: entered promiscuous mode [ 621.364833][T32753] syzkaller0: entered allmulticast mode [ 621.387310][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 621.562888][ T303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7717'. [ 621.575590][T32754] siw: device registration error -23 [ 621.898421][ T322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7722'. [ 622.122481][ T337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7727'. [ 622.337972][ T349] tls_set_device_offload: netdev not found [ 622.629432][ T366] +: renamed from syzkaller0 [ 623.681522][ T401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 623.699565][ T402] 8021q: VLANs not supported on ip6_vti0 [ 623.714668][ T398] syzkaller0: entered promiscuous mode [ 623.720389][ T398] syzkaller0: entered allmulticast mode [ 623.738341][ T406] team0: No ports can be present during mode change [ 624.103639][ T430] x_tables: duplicate underflow at hook 1 [ 624.178687][ T437] bond0: option ad_select: unable to set because the bond device is up [ 624.431629][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.713343][ T450] ip6_vti0 speed is unknown, defaulting to 1000 [ 624.911811][ T479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.093665][ T485] Cannot find del_set index 4 as target [ 625.408736][ T496] tipc: Enabled bearer , priority 0 [ 625.417424][ T496] syzkaller0: entered promiscuous mode [ 625.422921][ T496] syzkaller0: entered allmulticast mode [ 625.459160][ T490] netlink: ct family unspecified [ 625.464186][ T490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.509213][ T496] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 625.632802][ T496] tipc: Resetting bearer [ 625.691748][ T494] tipc: Resetting bearer [ 625.779874][ T494] tipc: Disabling bearer [ 625.801302][ T510] netlink: 'syz.1.7779': attribute type 14 has an invalid length. [ 625.810203][ T510] netlink: 'syz.1.7779': attribute type 13 has an invalid length. [ 626.001082][ T520] __nla_validate_parse: 58 callbacks suppressed [ 626.001103][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7781'. [ 626.225118][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.247199][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.261217][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.303621][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.334957][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.365651][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.378350][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.391601][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.411100][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.419054][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.430077][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.438800][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.449287][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.457190][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.467201][ T536] netlink: 'syz.4.7786': attribute type 1 has an invalid length. [ 626.475086][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.484714][ T536] netlink: 648 bytes leftover after parsing attributes in process `syz.4.7786'. [ 626.497893][ T520] bond0 (unregistering): left promiscuous mode [ 626.504225][ T520] bond_slave_0: left promiscuous mode [ 626.510507][ T520] bond_slave_1: left promiscuous mode [ 626.520749][ T520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.540096][ T520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.551025][ T520] bond0 (unregistering): Released all slaves [ 626.769893][ T552] tipc: New replicast peer: 255.255.255.255 [ 626.797386][ T552] tipc: Enabled bearer , priority 10 [ 626.814258][ T553] tipc: Enabling of bearer rejected, already enabled [ 626.981677][ T567] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 627.315437][ T593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 627.362779][ T598] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 627.438988][ T593] gretap2: entered promiscuous mode [ 627.451422][ T593] bond8: (slave gretap2): making interface the new active one [ 627.460343][ T593] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 627.608959][ T609] 8021q: adding VLAN 0 to HW filter on device bond9 [ 627.638658][ T617] bond9: (slave gretap2): making interface the new active one [ 627.647539][ T617] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 627.922489][ T633] syzkaller0: entered promiscuous mode [ 627.928959][ T633] syzkaller0: entered allmulticast mode [ 628.087994][ T644] bond0: Caught tx_queue_len zero misconfig [ 628.879326][ T681] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 628.899351][ T681] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 629.334232][ T713] lo: Caught tx_queue_len zero misconfig [ 629.580621][ T728] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 629.598137][ T728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 629.680818][ T676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.693786][ T676] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 629.721849][ T676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.738262][ T676] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 629.876245][ T747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.090373][ T738] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.754254][ T779] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.762072][ T779] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.951351][ T779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.198094][ T9308] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.215663][ T9308] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 631.235097][ T9308] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.256616][ T9308] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.265011][ T9308] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 631.290752][ T9308] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.309782][ T9308] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.332999][ T9308] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 631.342932][ T9308] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.353502][ T9308] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.363749][ T9308] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 631.374872][ T9308] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.638493][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 631.648387][ T676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 631.654327][ T676] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 631.673569][ T676] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 631.681167][ T676] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 631.694943][ T676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 631.705663][ T676] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 631.733657][T32350] ------------[ cut here ]------------ [ 631.739484][T32350] refcount_t: underflow; use-after-free. [ 631.745350][T32350] WARNING: CPU: 0 PID: 32350 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 631.754867][T32350] Modules linked in: [ 631.759107][T32350] CPU: 0 UID: 0 PID: 32350 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 631.768657][T32350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.779207][T32350] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 631.785376][T32350] Code: 00 5a be 8b e8 f7 7f f9 fc 90 0f 0b 90 90 eb d7 e8 eb 63 36 fd c6 05 f0 6b dd 0a 01 90 48 c7 c7 60 5a be 8b e8 d7 7f f9 fc 90 <0f> 0b 90 90 eb b7 e8 cb 63 36 fd c6 05 cd 6b dd 0a 01 90 48 c7 c7 [ 631.805341][T32350] RSP: 0018:ffffc9000beff6e0 EFLAGS: 00010246 [ 631.811436][T32350] RAX: cb6fcd103f43c300 RBX: 0000000000000003 RCX: ffff88807bbf0000 [ 631.819409][T32350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 631.827377][T32350] RBP: 0000000000000000 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 631.835333][T32350] R10: dffffc0000000000 R11: ffffed1017104853 R12: dffffc0000000000 [ 631.844148][T32350] R13: ffff888055ba2c60 R14: ffff888055ba2c78 R15: ffffffff85c68410 [ 631.852186][T32350] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 631.861121][T32350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.867721][T32350] CR2: 000000110c3c4219 CR3: 000000008eb2c000 CR4: 00000000003526f0 [ 631.875684][T32350] Call Trace: [ 631.878977][T32350] [ 631.881897][T32350] klist_dec_and_del+0x3c7/0x3d0 [ 631.887276][T32350] ? __pfx_klist_children_put+0x10/0x10 [ 631.892819][T32350] klist_del+0xa6/0x110 [ 631.897053][T32350] device_del+0x280/0x8e0 [ 631.901373][T32350] ? _raw_spin_unlock_irq+0x2e/0x50 [ 631.906586][T32350] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 631.912666][T32350] ? __pfx_device_del+0x10/0x10 [ 631.917566][T32350] ? netdev_unregister_kobject+0x344/0x450 [ 631.923364][T32350] unregister_netdevice_many_notify+0x1df2/0x2390 [ 631.929802][T32350] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 631.936952][T32350] ? rtnl_net_dev_lock+0x257/0x2f0 [ 631.942056][T32350] unregister_netdevice_queue+0x33c/0x380 [ 631.947787][T32350] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 631.954030][T32350] ? rtnl_net_dev_lock+0x36/0x2f0 [ 631.959061][T32350] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 631.964158][T32350] unregister_netdev+0x1f/0x60 [ 631.968957][T32350] bnep_session+0x294d/0x2b40 [ 631.973641][T32350] ? rcu_is_watching+0x15/0xb0 [ 631.978428][T32350] ? trace_sched_exit_tp+0x36/0x110 [ 631.983899][T32350] ? __lock_acquire+0xab9/0xd20 [ 631.989206][T32350] ? __pfx_bnep_session+0x10/0x10 [ 631.994239][T32350] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 632.000157][T32350] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 632.006493][T32350] ? __pfx_woken_wake_function+0x10/0x10 [ 632.012114][T32350] ? __kthread_parkme+0x7b/0x200 [ 632.017054][T32350] ? __kthread_parkme+0x1a1/0x200 [ 632.022066][T32350] kthread+0x711/0x8a0 [ 632.026136][T32350] ? __pfx_bnep_session+0x10/0x10 [ 632.031207][T32350] ? __pfx_kthread+0x10/0x10 [ 632.035790][T32350] ? _raw_spin_unlock_irq+0x23/0x50 [ 632.041367][T32350] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.046578][T32350] ? __pfx_kthread+0x10/0x10 [ 632.051163][T32350] ret_from_fork+0x4bc/0x870 [ 632.055738][T32350] ? __pfx_ret_from_fork+0x10/0x10 [ 632.060870][T32350] ? __switch_to_asm+0x39/0x70 [ 632.065617][T32350] ? __switch_to_asm+0x33/0x70 [ 632.070372][T32350] ? __pfx_kthread+0x10/0x10 [ 632.074946][T32350] ret_from_fork_asm+0x1a/0x30 [ 632.079713][T32350] [ 632.082717][T32350] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 632.089994][T32350] CPU: 0 UID: 0 PID: 32350 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 632.099511][T32350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.109545][T32350] Call Trace: [ 632.112807][T32350] [ 632.115718][T32350] dump_stack_lvl+0x99/0x250 [ 632.120294][T32350] ? __asan_memcpy+0x40/0x70 [ 632.124868][T32350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.130047][T32350] ? __pfx__printk+0x10/0x10 [ 632.134623][T32350] vpanic+0x237/0x6d0 [ 632.138599][T32350] ? __pfx_vpanic+0x10/0x10 [ 632.143087][T32350] panic+0xb9/0xc0 [ 632.146792][T32350] ? __pfx_panic+0x10/0x10 [ 632.151200][T32350] __warn+0x31b/0x4b0 [ 632.155164][T32350] ? refcount_warn_saturate+0x11a/0x1d0 [ 632.160699][T32350] ? refcount_warn_saturate+0x11a/0x1d0 [ 632.166226][T32350] report_bug+0x2be/0x4f0 [ 632.170537][T32350] ? refcount_warn_saturate+0x11a/0x1d0 [ 632.176064][T32350] ? refcount_warn_saturate+0x11a/0x1d0 [ 632.181606][T32350] ? refcount_warn_saturate+0x11c/0x1d0 [ 632.187131][T32350] handle_bug+0x84/0x160 [ 632.191358][T32350] exc_invalid_op+0x1a/0x50 [ 632.195840][T32350] asm_exc_invalid_op+0x1a/0x20 [ 632.200668][T32350] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 632.206802][T32350] Code: 00 5a be 8b e8 f7 7f f9 fc 90 0f 0b 90 90 eb d7 e8 eb 63 36 fd c6 05 f0 6b dd 0a 01 90 48 c7 c7 60 5a be 8b e8 d7 7f f9 fc 90 <0f> 0b 90 90 eb b7 e8 cb 63 36 fd c6 05 cd 6b dd 0a 01 90 48 c7 c7 [ 632.226388][T32350] RSP: 0018:ffffc9000beff6e0 EFLAGS: 00010246 [ 632.232450][T32350] RAX: cb6fcd103f43c300 RBX: 0000000000000003 RCX: ffff88807bbf0000 [ 632.240418][T32350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 632.248377][T32350] RBP: 0000000000000000 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 632.256355][T32350] R10: dffffc0000000000 R11: ffffed1017104853 R12: dffffc0000000000 [ 632.264578][T32350] R13: ffff888055ba2c60 R14: ffff888055ba2c78 R15: ffffffff85c68410 [ 632.272544][T32350] ? __pfx_klist_children_put+0x10/0x10 [ 632.278098][T32350] klist_dec_and_del+0x3c7/0x3d0 [ 632.283026][T32350] ? __pfx_klist_children_put+0x10/0x10 [ 632.288550][T32350] klist_del+0xa6/0x110 [ 632.292688][T32350] device_del+0x280/0x8e0 [ 632.297012][T32350] ? _raw_spin_unlock_irq+0x2e/0x50 [ 632.302274][T32350] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 632.308322][T32350] ? __pfx_device_del+0x10/0x10 [ 632.313154][T32350] ? netdev_unregister_kobject+0x344/0x450 [ 632.318947][T32350] unregister_netdevice_many_notify+0x1df2/0x2390 [ 632.325350][T32350] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 632.332113][T32350] ? rtnl_net_dev_lock+0x257/0x2f0 [ 632.337228][T32350] unregister_netdevice_queue+0x33c/0x380 [ 632.342938][T32350] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 632.349173][T32350] ? rtnl_net_dev_lock+0x36/0x2f0 [ 632.354180][T32350] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 632.359271][T32350] unregister_netdev+0x1f/0x60 [ 632.364019][T32350] bnep_session+0x294d/0x2b40 [ 632.368680][T32350] ? rcu_is_watching+0x15/0xb0 [ 632.373427][T32350] ? trace_sched_exit_tp+0x36/0x110 [ 632.378613][T32350] ? __lock_acquire+0xab9/0xd20 [ 632.383458][T32350] ? __pfx_bnep_session+0x10/0x10 [ 632.388464][T32350] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 632.394338][T32350] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 632.400652][T32350] ? __pfx_woken_wake_function+0x10/0x10 [ 632.406269][T32350] ? __kthread_parkme+0x7b/0x200 [ 632.411185][T32350] ? __kthread_parkme+0x1a1/0x200 [ 632.416193][T32350] kthread+0x711/0x8a0 [ 632.420254][T32350] ? __pfx_bnep_session+0x10/0x10 [ 632.425262][T32350] ? __pfx_kthread+0x10/0x10 [ 632.429835][T32350] ? _raw_spin_unlock_irq+0x23/0x50 [ 632.435107][T32350] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.440288][T32350] ? __pfx_kthread+0x10/0x10 [ 632.444862][T32350] ret_from_fork+0x4bc/0x870 [ 632.449438][T32350] ? __pfx_ret_from_fork+0x10/0x10 [ 632.454663][T32350] ? __switch_to_asm+0x39/0x70 [ 632.459405][T32350] ? __switch_to_asm+0x33/0x70 [ 632.464152][T32350] ? __pfx_kthread+0x10/0x10 [ 632.468733][T32350] ret_from_fork_asm+0x1a/0x30 [ 632.473487][T32350] [ 633.575332][T32350] Shutting down cpus with NMI [ 633.580465][T32350] Kernel Offset: disabled [ 633.584805][T32350] Rebooting in 86400 seconds..