last executing test programs: 3.170188487s ago: executing program 2 (id=3646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x44, 0x0, &(0x7f0000000000)) r3 = epoll_create1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001080), 0x8) sendmmsg$inet(r5, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000", @ANYRES16=r1, @ANYRESDEC=r3, @ANYRES16=r5, @ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000008}) socket$nl_generic(0x10, 0x3, 0x10) 2.944155325s ago: executing program 1 (id=3652): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0014"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x1000, 0x45, {{0x2c, 0x4, 0x3, 0x35, 0xb0, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @broadcast, {[@rr={0x7, 0x23, 0x65, [@broadcast, @loopback, @remote, @private=0xa010102, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010100, @private=0xa010100]}, @timestamp={0x44, 0xc, 0x41, 0x0, 0xc, [0x9, 0x401]}, @ssrr={0x89, 0x2b, 0xa1, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @local, @empty, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0xae, [@loopback]}, @rr={0x7, 0x1f, 0x3c, [@loopback, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0xfb, [@loopback, @empty, @rand_addr=0x64010100, @broadcast, @empty, @local]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', r6, 0x20, 0x40, 0x800, 0x2, {{0xe, 0x4, 0x2, 0x33, 0x38, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@ssrr={0x89, 0x23, 0x43, [@private=0xa010100, @local, @broadcast, @rand_addr=0x64010100, @multicast2, @broadcast, @empty, @multicast2]}]}}}}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 2.799870429s ago: executing program 1 (id=3656): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xfff2, 0x1}, {0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xac, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4c8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5c050f0c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x140000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xe}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xda}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}]}, 0x100}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8854) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x6, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) 2.740140586s ago: executing program 3 (id=3657): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r2, 0x36, 0x4, 0x0, @void, @value=r2}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2.717474396s ago: executing program 0 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'pim6reg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0xfffe, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x18, {0x2, 0x4e20, @remote}, 'veth1_to_bond\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b349e00000000000006c9b6810038000480340001800b0001c8078152c960039dddfb481a0074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073795a3200000000140000006006140000001100010000000000000000000000000a000000000000001058eea8bd8959681b8272164700000000000000"], 0xa0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r10, 0x1, 0xa2}, 0x14) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c006ba8ed0302b600"/22], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.635602511s ago: executing program 1 (id=3660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x100, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x81, 0xf8d5, 0x7ff, 0x2, 0x1, 0x5, 0x9}}, {0x16, 0x2, [0x0, 0x6, 0x8e73, 0x35e, 0x4, 0x5, 0x0, 0x5, 0xfe0]}}, {{0x1c, 0x1, {0x6, 0x4, 0x8, 0x2, 0x1, 0xff, 0xfffffffd, 0x4}}, {0xc, 0x2, [0x9, 0x1, 0x0, 0x1]}}, {{0x1c, 0x1, {0x40, 0x6, 0x9, 0x6, 0x1, 0x80, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x8bc]}}, {{0x1c, 0x1, {0x4, 0xbd, 0x8001, 0x7, 0x1, 0x3, 0x7eb, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x5, 0x2, 0x14, 0x7, 0x0, 0x81, 0x1a, 0x9}}, {0x16, 0x2, [0x1, 0xfff7, 0x1, 0x40, 0x4, 0x3, 0x6, 0xf0, 0x8]}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x0, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = socket$inet6(0xa, 0x3, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtclass={0x58, 0x28, 0x2, 0x70bd29, 0x8, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0xb, 0xf}, {0xfff2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x66, 0x5, {0x2, 0x9}}]}, 0x58}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) poll(0xfffffffffffffffc, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r15) 2.590080778s ago: executing program 3 (id=3661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x40, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8071}, 0x4080) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket(0xa, 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0xfcad, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000000002d2baa2fb1a2bfce4c24b08c29cd5c001408ae9439967c9dc423225856015c1877efa5e0beada9cd319f842000b0b2b84d5233fd1db677efad9d5ada0500000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 2.316192131s ago: executing program 3 (id=3663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) r3 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) r5 = openat$cgroup_type(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r3], 0x10) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private1, 0x9}}, 0x24) 2.269059182s ago: executing program 0 (id=3664): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="0000000000aa303e97380e9023e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d001e00"/90, 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f0000000200)="128b9306006d4810e5ac5040ad9201847839fc37cd69d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004881) (async) epoll_create1(0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x10000000, @empty, 0x6}, 0x1c) (async) listen(r5, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0xe2) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 2.267449267s ago: executing program 1 (id=3665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x23, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 2.145460981s ago: executing program 3 (id=3666): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) syz_emit_ethernet(0x11dc0, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) 2.048178475s ago: executing program 2 (id=3667): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008041}, 0x20008011) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) r2 = accept4(r0, &(0x7f00000001c0)=@llc, &(0x7f0000000240)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$tipc(r2, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffd2a, 0x1, 0xfffffffffffffffa, 0x2, 0x404, 0x9], 0x3, &(0x7f0000000340)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000480)={0x2c, 0xb, r4, 0x1b, r2}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000004c0), 0x4) ioctl$FIOCLEX(r2, 0x5451) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x101}, 0x2000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000780)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x15}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x20040000) socketpair(0x9, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000940)=0xf, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000980)='vegas', 0x5) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000c01) r9 = socket$l2tp(0x2, 0x2, 0x73) close(r9) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000ac0)) epoll_create1(0x0) 2.026631754s ago: executing program 4 (id=3668): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x24, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x24008010) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c000280080002000300000008000a00", @ANYRES32=r3, @ANYBLOB="4f25065e510274abd5407d90c75a31672f9e5afb79eb84568bacc8d418feb548714c08f2e0a53220ba1bbcc382cadf6a8c9ed4c684b7a2fa447ef71740555283106dbb4fffb6a4d82423d5d3cfb6d37d6d356371a0f0e0512e29165f24c53213c5c0c93d7b3c5013575515"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfff2}, {0xc, 0x6}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48840}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd0800db4000442f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000000000000800000086dd080088be00000004100000000100000000000000080022eb00000000200080100200000000000008000100000800655800000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4400024}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x50a, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) close(0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) (async) recvmsg(r10, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) recvmsg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) 1.960303401s ago: executing program 2 (id=3669): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) sendto(r1, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 1.896184798s ago: executing program 3 (id=3670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000feffffffff3c46b0bcd9563d00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0x72, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a88690374c70180c22a73436b6835127a00e6ce1e19ce418e80400e69075074ea672375c2388120a3623551757917108bdcd643a128ecf90a50d0b59d0b223df1513db9cf5519b171cdb6c0aefdaac477fba8c94b87d4a8e96036d708eb87242348dedb72b", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000400)="50214ac7fc31e417c5e2dddac20547f9212d488fe0be2da1ad1bae90d65d13aa9b02c11d8c675d44c3c7cf566ad6d7e983614f9204cfddca7297c7aba9188ac91be56be0de342671e45a3690105f06d4", &(0x7f0000000480)=""/137}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='rxrpc_rx_icmp\x00', r3, 0x0, 0x20000007}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r1, 0x4000, r1}, 0x18) 1.872426261s ago: executing program 0 (id=3671): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.821375671s ago: executing program 4 (id=3672): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x8a, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce94395"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r5, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) (async) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) (async, rerun: 32) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.642769402s ago: executing program 4 (id=3673): r0 = socket(0x15, 0x2, 0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2fc, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xfffeffff, 0x65}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2c4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x3}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xbe}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x28c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xc8, 0x6, "0fae12e63fdcaa33d4fe56f854d8323dfadc96f26867bb5e536c74e786e15a111c1bd2f5d13cd0f63ba843b42e4178902245717a372ef34ca97d3c23739c15acc18d381b877048c5cea6b6cfb289e8981a32b3b1e1def1db18718ea0be4131d4d5935db160d1f0d90bc36e3f6dc6b960067d592115e49e35955afadc9e9838ca3387b82c4f8a3c638792fc442450074709a72c2bab684a231bf8dd21c5092194ba642c7cc92192280a32082fd22e9ad2ccffc1de0b08bb76363f66e82348be8c6c1d5f40"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xfff}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x96, 0xb, "b057f3975f45e213336e6f30921abb70117ca6ad30aebdbd10a641efae579094fb961f5c78712ae889f70185309e2bcb6b19dd54f8a64a1dd28f80b5838b99abfecc61eafab27e94df5a2c927048408db832565518732a320d7235aa571b3195beb7434879b1d0419118027942a1d6308ca8b12db105ab08152a33c6f72cee4db0253dbcbc4443f4bdf0ff3b497be5e5166c"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0xb86, 0x1}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xed, 0x8, {0x7c536701, 0x8, "ee5f0328bf79d3f619d45feb748c1c3c6d307e63cfb0e124768f6016b3f354ba8070fabd3a7646f008411531c949f19de7965f8968c344a204e96d2bb5ff8783e94ec82e9ebe123727caf626d02820bef41615750a29c633fa9636aa42070c797040cc67007ed0acc9a5837f625bfe72dd019ccaef388118b4f2213ad20256a16b078fb35025f8e3132563b6a443d4e897b8f9e317452c907f4631454f96da14eac9e7356b844115f99631af20affe2b4fd776c6a6d9cd6ecfdae2a916d07d93982170436af400c1dbcb31ba709ff8c8a30bf1ee43750a122d295a5812ba123c98"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x5, 0x14400e9b}}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="82f479c2a1ce93ced3f751da31ee3d8db8300aae4fc090e51d66b8e888a2c010fa63218187", 0x25, 0x8040, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e22, 0x3, @loopback, 0x7f}, {0xa, 0x4e20, 0xfffffff8, @remote, 0xfe}, 0x0, {[0xd3e4, 0x1, 0x200, 0x9, 0xd5, 0x6, 0x2, 0x7]}}, 0x5c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'vxcan1\x00', {0x9}, 0xdd}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={0x0, 0xd2c8, 0xff2f, 0xd, 0x10, 0xf000, 0x7, 0x80, {0x0, @in={{0x2, 0x7, @multicast1}}, 0x9, 0x9d7, 0xfffffffd, 0x6, 0x10}}, &(0x7f0000000600)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)={r2, 0xfff9, 0x4, [0x2, 0x0, 0x9, 0x81]}, &(0x7f0000000680)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000001) r9 = socket(0x1a, 0x6, 0x3ff) sendmsg$nl_route(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd27, 0x25dfdbfb, {0x7, r7}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004880}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000cc0)=0x2) getsockname$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000d80)=@assoc_value={r3, 0xd1}, 0x8) sendmsg$nl_route(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@ipv4_delroute={0x54, 0x19, 0x2, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x14, 0x9, 0xff, 0x1, 0xfd, 0x6, 0x200}, [@RTA_FLOW={0x8, 0xb, 0x5}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_MARK={0x8, 0x10, 0x3}, @RTA_TABLE={0x8, 0xf, 0x401}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x5}}, @RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x10, 0x10, 0x70bd2d, 0x25dfdbfe, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x8040) sendto$inet(r9, &(0x7f0000001000)="aef055af10f1ee9b40feb520541f71013d0e32457451816d00b2ea3b7e82f0711d40bd8c6795fbac998432ac6c20f9a5a1e6e58c1346cb74d28071026ddc4c6329ce599d3c24f507b5aeb8653287ee9108429437524b109c3a46e6e92f6b9074c9a5dbac2080f46bc748797f38130ffd58e8b379c79e189f6aff4f33137a6ecedca5f960", 0x84, 0x4004, &(0x7f00000010c0)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000001100)=0x1ff, 0x4) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc8, 0x7, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x44, 0x7, 0x1, 0x0, "05e095089f9efe845e6a7de7d5641a24a42ecc0fc58abca98beff447e2590ca99ceced3cd406940c4b692abd9fdaf5f935107114fd3dc45dffd486d97524c72b"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x44000) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000001300), &(0x7f0000001340)=0x8) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=@bridge_getlink={0x58, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8009, 0x10000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x65}, @IFLA_NET_NS_PID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x200408c0) 1.616964235s ago: executing program 4 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 430.019375ms ago: executing program 2 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 348.13669ms ago: executing program 0 (id=3676): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000), 0x10) socket$xdp(0x2c, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x44804, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24000041) 345.869178ms ago: executing program 1 (id=3677): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000"], 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) r2 = socket(0x28, 0x801, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x40, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x18}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8c}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2f0}}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480340001800b000100657874686472000024000280080001400000000c08000340000000b0080004400000003005000200070000001c0001800a00010072656469720000000c00028008000140000000110900010073797a30"], 0xf0}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xe8, 0x8, 0xfa04, 0x0, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x6, 0x2, 0x4}, 0x0, 0xa0, 0xe8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x3], [], 0x0, 0x8, 0x8, 0xb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x170, 0x10000, 'pptp\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x1, 0x0, 0x23}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0xd5, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001080)={0x0, 'vlan1\x00', {0x2}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 345.473363ms ago: executing program 4 (id=3678): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 300.275234ms ago: executing program 3 (id=3679): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) (async, rerun: 64) r2 = accept(r0, 0x0, &(0x7f0000000000)) (rerun: 64) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0x1, 0x5, 0xc9, 0x6}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x81, 0x2}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [0x0, 0x0, 0xffffffff], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x21, 0x0, 0x2) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async, rerun: 64) socket$kcm(0x21, 0x2, 0x2) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) (async) sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) shutdown(r4, 0x2) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 272.68891ms ago: executing program 0 (id=3680): sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x1, 0x40000000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x810, r0, 0xd39c2000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x100, 0x81, 0x8, 0xd40}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4, 0x9, 0x2, 0x3ff, 0xfffffffa, 0x8, 0x7}, 0x1c) 116.236155ms ago: executing program 2 (id=3681): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) 115.707363ms ago: executing program 1 (id=3682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 99.274799ms ago: executing program 0 (id=3683): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) gettid() 61.198541ms ago: executing program 4 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x6}, @var={0x10, 0x0, 0x0, 0xe, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @fwd={0x7}]}}, 0x0, 0x6a}, 0x28) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x6, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}]}}, "00186371ae9b1c03"}}}}}, 0x0) 0s ago: executing program 2 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @default, @rose={'rose', 0x0}, 0x9d7, 'syz1\x00', @null, 0x10000, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) kernel console output (not intermixed with test programs): n0: encryption failed: -22 [ 266.605640][T12064] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.620028][T12064] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.722969][T12076] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 266.741773][T12077] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 266.808134][T12077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.831491][T12087] netlink: 'syz.3.1788': attribute type 21 has an invalid length. [ 266.876330][T12085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.883939][T12085] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 266.898624][T12085] bond4: (slave vcan1): Error -95 calling set_mac_address [ 266.920075][T12089] No such timeout policy "syz0" [ 266.930510][T12087] netlink: 'syz.3.1788': attribute type 5 has an invalid length. [ 267.011154][ T983] tipc: Node number set to 134353152 [ 267.537913][T12127] delete_channel: no stack [ 267.567565][T12132] delete_channel: no stack [ 267.910403][T12151] netlink: 'syz.2.1806': attribute type 14 has an invalid length. [ 267.966853][T12152] netlink: 'syz.2.1806': attribute type 14 has an invalid length. [ 268.118659][T12163] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 268.128536][T12164] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 268.171488][T12163] bond3: entered promiscuous mode [ 268.176665][T12163] bond3: entered allmulticast mode [ 268.183881][T12163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.212961][T12167] macvlan2: entered promiscuous mode [ 268.218404][T12167] macvlan2: entered allmulticast mode [ 268.226873][T12167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.259999][T12166] __nla_validate_parse: 46 callbacks suppressed [ 268.260021][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 268.296162][T12170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1812'. [ 268.310557][T12176] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1814'. [ 268.323838][T12174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1812'. [ 268.323870][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 268.338082][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 268.361229][T12170] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1812'. [ 268.483649][T12182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1816'. [ 268.715010][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1815'. [ 269.149250][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1829'. [ 269.245387][T12225] bond8: invalid ARP target 0.0.0.0 specified for addition [ 269.253095][T12225] bond8: option arp_ip_target: invalid value (0) [ 269.263334][T12225] bond8 (unregistering): Released all slaves [ 269.327557][T12227] bond5: entered promiscuous mode [ 269.333616][T12227] bond5: entered allmulticast mode [ 269.339410][T12227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.568081][T12258] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 269.612453][T12260] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.001266][T12273] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 270.046009][T12283] veth1_to_hsr: entered promiscuous mode [ 270.061041][T12283] veth1_to_hsr: entered allmulticast mode [ 270.094975][T12285] net_ratelimit: 40 callbacks suppressed [ 270.094998][T12285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.111871][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.282609][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.411712][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.509613][T12313] veth10: entered promiscuous mode [ 270.552648][T12313] veth12: entered promiscuous mode [ 270.600405][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.721116][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.834547][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 270.883561][T12333] validate_nla: 1 callbacks suppressed [ 270.883580][T12333] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 270.972896][T12333] 8021q: adding VLAN 0 to HW filter on device bond8 [ 271.020108][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 271.327945][T12339] veth7: entered promiscuous mode [ 271.422557][T12339] bond8: (slave veth7): Enslaving as an active interface with a down link [ 271.453792][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 271.503957][T12333] veth9: entered promiscuous mode [ 271.539188][T12333] bond8: (slave veth9): Enslaving as an active interface with a down link [ 271.715786][T12359] netlink: 'syz.2.1873': attribute type 12 has an invalid length. [ 271.810978][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 271.993038][T12378] netlink: 'syz.2.1878': attribute type 8 has an invalid length. [ 272.096424][T12383] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 272.411772][T12396] netlink: 'syz.4.1884': attribute type 27 has an invalid length. [ 272.433090][T12401] netdevsim netdevsim0 v: renamed from netdevsim0 [ 272.675657][T12413] netlink: 'syz.3.1887': attribute type 13 has an invalid length. [ 273.052011][T12396] wlan0 speed is unknown, defaulting to 1000 [ 273.073141][T12396] lo speed is unknown, defaulting to 1000 [ 273.328093][T12451] __nla_validate_parse: 18 callbacks suppressed [ 273.328113][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1900'. [ 273.336554][T12449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1899'. [ 273.380441][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 273.626848][T12399] wlan0 speed is unknown, defaulting to 1000 [ 273.710071][T12399] lo speed is unknown, defaulting to 1000 [ 273.794334][T12475] netlink: 'syz.0.1907': attribute type 32 has an invalid length. [ 273.802978][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 273.987308][T12475] bond9: option coupled_control: invalid value (16) [ 274.005766][T12475] bond9 (unregistering): Released all slaves [ 274.143869][T12493] bond9 (unregistering): Released all slaves [ 274.284205][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 274.400890][T12506] syzkaller1: entered promiscuous mode [ 274.406419][T12506] syzkaller1: entered allmulticast mode [ 274.493090][T12517] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1918'. [ 274.530383][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 274.539386][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1918'. [ 274.559613][T12517] Bluetooth: MGMT ver 1.23 [ 274.762260][T12533] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 274.818022][T12537] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 274.824750][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 274.866053][T12538] bond9: (slave gretap2): making interface the new active one [ 274.894728][T12538] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 274.898391][T12540] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 275.093930][T12552] smc: net device gre0 applied user defined pnetid SYZ1 [ 275.104248][T12553] smc: net device gre0 erased user defined pnetid SYZ1 [ 275.130949][ T9638] net_ratelimit: 51 callbacks suppressed [ 275.130970][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.163131][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'. [ 275.261334][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.386895][T12569] vlan2: entered allmulticast mode [ 275.410953][T12569] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 275.428976][T12573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.440488][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.560853][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.670737][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.790459][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 275.811708][T12603] syzkaller1: entered promiscuous mode [ 275.819927][T12605] netlink: 'syz.2.1948': attribute type 64 has an invalid length. [ 275.830043][T12603] syzkaller1: entered allmulticast mode [ 275.992362][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 276.133291][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 276.290550][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 276.306150][T12640] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 276.307101][T12636] dvmrp6: entered allmulticast mode [ 276.319667][T12644] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 276.328974][T12644] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 276.338741][ T855] IPVS: starting estimator thread 0... [ 276.400408][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 276.432872][T12643] IPVS: using max 32 ests per chain, 76800 per kthread [ 276.517492][T12649] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.566026][T12649] bond10 (unregistering): Released all slaves [ 276.777546][T12669] erspan0: left allmulticast mode [ 276.820134][T12669] bond0: (slave syz_tun): Releasing backup interface [ 276.861449][T12669] syz_tun: left promiscuous mode [ 276.876856][T12669] syz_tun: left allmulticast mode [ 276.888711][T12669] bond0: left promiscuous mode [ 276.900441][T12669] bond_slave_0: left promiscuous mode [ 276.910724][T12669] bond_slave_1: left promiscuous mode [ 276.919895][T12669] bond0: left allmulticast mode [ 276.927052][T12669] bond_slave_0: left allmulticast mode [ 276.933787][T12669] bond_slave_1: left allmulticast mode [ 276.948965][T12669] bridge_slave_0: left allmulticast mode [ 276.959635][T12669] bridge_slave_0: left promiscuous mode [ 276.974506][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.984223][T12669] bridge_slave_1: left allmulticast mode [ 276.990046][T12669] bridge_slave_1: left promiscuous mode [ 276.996105][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.007826][T12669] bond0: (slave bond_slave_0): Releasing backup interface [ 277.017339][T12669] bond0: (slave bond_slave_1): Releasing backup interface [ 277.030194][T12669] team0: Port device team_slave_0 removed [ 277.038191][T12669] team0: Port device team_slave_1 removed [ 277.060003][T12680] validate_nla: 1 callbacks suppressed [ 277.060018][T12680] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 277.223033][T12696] syz_tun: entered allmulticast mode [ 277.251640][T12696] dvmrp6: entered allmulticast mode [ 277.295400][T12695] syz_tun: left allmulticast mode [ 277.546856][T12719] sctp: [Deprecated]: syz.3.1985 (pid 12719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.546856][T12719] Use struct sctp_sack_info instead [ 277.592959][T12710] netlink: 'syz.2.1983': attribute type 33 has an invalid length. [ 277.768594][T12728] netlink: 'syz.4.1989': attribute type 3 has an invalid length. [ 277.795093][T12728] vlan2: entered allmulticast mode [ 277.810445][T12728] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 278.102729][T12752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.116876][T12752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.134146][T12752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.142959][T12752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.734372][T12792] __nla_validate_parse: 20 callbacks suppressed [ 278.734393][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2008'. [ 278.866871][T12799] bond0: Error: Cannot enslave bond to itself. [ 279.023538][T12808] tipc: Disabling bearer [ 279.147918][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 279.238899][T12824] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2018'. [ 279.255885][T12824] netlink: 'syz.4.2018': attribute type 11 has an invalid length. [ 279.368703][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 279.379105][T12833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.388159][T12833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.453868][T12833] bond0: (slave batadv0): Releasing backup interface [ 279.528195][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 279.541413][T12840] syzkaller0: entered promiscuous mode [ 279.546983][T12840] syzkaller0: entered allmulticast mode [ 279.588435][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 279.658001][T12847] bridge0: entered allmulticast mode [ 279.708877][T12849] Cannot find add_set index 2 as target [ 279.738880][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'. [ 279.821606][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 280.032818][T12876] netlink: 'syz.0.2034': attribute type 10 has an invalid length. [ 280.043106][T12876] bond0: (slave wlan1): Opening slave failed [ 280.056535][T12876] netlink: 'syz.0.2034': attribute type 4 has an invalid length. [ 280.140544][ T9638] net_ratelimit: 28 callbacks suppressed [ 280.140564][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.259057][T12888] ipt_REJECT: ECHOREPLY no longer supported. [ 280.272109][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.318541][T12890] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 280.380549][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.468501][T12895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.474168][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.494192][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.502863][T12895] veth0_macvtap: entered allmulticast mode [ 280.541307][T12895] policy can only be matched on NF_INET_PRE_ROUTING [ 280.541332][T12895] unable to load match [ 280.620656][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.740388][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.855405][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 280.936192][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2051'. [ 280.971895][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 281.013097][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 281.100364][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 281.101361][T12930] netlink: 'syz.4.2055': attribute type 11 has an invalid length. [ 281.201940][T12937] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 281.242803][T12937] bond6 (unregistering): Released all slaves [ 281.300422][T12947] delete_channel: no stack [ 281.305531][T12949] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 281.308457][T12951] sctp: [Deprecated]: syz.4.2062 (pid 12951) Use of int in maxseg socket option. [ 281.308457][T12951] Use struct sctp_assoc_value instead [ 281.445372][T12958] 8021q: VLANs not supported on ip_vti0 [ 281.531585][T12966] netlink: 'syz.2.2066': attribute type 39 has an invalid length. [ 281.623569][T12973] xt_hashlimit: size too large, truncated to 1048576 [ 281.716447][T12976] netlink: 'syz.0.2070': attribute type 8 has an invalid length. [ 281.858697][T12989] netlink: 'syz.0.2074': attribute type 24 has an invalid length. [ 282.372350][T13026] xt_addrtype: ipv6 does not support BROADCAST matching [ 282.404871][T13018] syzkaller0: entered promiscuous mode [ 282.411257][T13018] syzkaller0: entered allmulticast mode [ 282.631841][T13045] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 283.837640][T13068] __nla_validate_parse: 8 callbacks suppressed [ 283.837661][T13068] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2096'. [ 284.004166][T13077] SET target dimension over the limit! [ 284.024894][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2098'. [ 284.238207][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 284.262182][T13093] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 284.335754][T13097] xt_connbytes: Forcing CT accounting to be enabled [ 284.349357][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2103'. [ 284.373600][T13094] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2103'. [ 284.385940][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 284.400810][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 284.429627][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 284.454170][T13099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2106'. [ 284.459415][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 284.512419][T13101] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 284.536222][T13101] bridge0: port 1(team0) entered blocking state [ 284.548410][T13101] bridge0: port 1(team0) entered disabled state [ 284.555337][T13101] team0: entered allmulticast mode [ 284.563335][T13101] team0: entered promiscuous mode [ 284.740855][T13113] bond0: entered promiscuous mode [ 284.747621][T13113] gretap0: entered promiscuous mode [ 284.756328][T13113] hsr1: entered promiscuous mode [ 285.139835][T13130] bond12: option min_links: invalid value (18446744073709551614) [ 285.149275][T13130] bond12: option min_links: allowed values 0 - 2147483647 [ 285.171756][T13130] bond12 (unregistering): Released all slaves [ 285.240485][ T9638] net_ratelimit: 24 callbacks suppressed [ 285.240506][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 285.390369][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 285.519397][T13151] bond6: option min_links: invalid value (18446744073709551614) [ 285.532557][T13151] bond6: option min_links: allowed values 0 - 2147483647 [ 285.543291][T13151] bond6 (unregistering): Released all slaves [ 285.587790][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 285.731287][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 285.775295][T13167] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 285.932644][T13167] bond12: (slave veth11): Enslaving as an active interface with a down link [ 285.944711][T13179] openvswitch: netlink: Message has 6 unknown bytes. [ 285.955252][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 286.023284][T13174] 8021q: adding VLAN 0 to HW filter on device bond12 [ 286.081980][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 286.194620][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 286.262187][T13189] syzkaller0: entered promiscuous mode [ 286.267707][T13189] syzkaller0: entered allmulticast mode [ 286.291170][T13192] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 286.302053][T13192] netlink: 'syz.0.2138': attribute type 2 has an invalid length. [ 286.314600][T13192] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 286.404206][T13200] vlan3: entered promiscuous mode [ 286.413673][T13200] erspan0: entered promiscuous mode [ 286.520539][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 286.614235][T13214] netlink: 'syz.4.2141': attribute type 126 has an invalid length. [ 286.651875][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 286.782816][T13223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.836368][T13228] tun0: tun_chr_ioctl cmd 1074025675 [ 286.855502][T13228] tun0: persist disabled [ 287.199801][T13257] sctp: [Deprecated]: syz.4.2153 (pid 13257) Use of int in maxseg socket option. [ 287.199801][T13257] Use struct sctp_assoc_value instead [ 287.839185][T13298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.943654][T13303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.959758][T13303] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 287.972852][T13303] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 288.033540][T13319] block nbd2: not configured, cannot reconfigure [ 288.213031][T13337] 8021q: VLANs not supported on ip6tnl0 [ 288.344284][T13345] netlink: 'syz.1.2180': attribute type 11 has an invalid length. [ 288.572713][T13358] veth17: entered promiscuous mode [ 288.802197][T13383] netlink: 'syz.3.2190': attribute type 4 has an invalid length. [ 288.874988][T13389] __nla_validate_parse: 47 callbacks suppressed [ 288.875007][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 288.930043][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'. [ 289.172624][T13408] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 289.182827][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 289.238631][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 289.278326][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 289.309710][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 289.326158][T13416] netlink: 'syz.1.2202': attribute type 20 has an invalid length. [ 289.338871][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 289.348948][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 289.358930][T13416] netlink: 'syz.1.2202': attribute type 20 has an invalid length. [ 289.359950][T13423] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2203'. [ 289.379790][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 289.402953][T13426] netlink: 'syz.3.2204': attribute type 12 has an invalid length. [ 289.490680][T13431] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 289.684193][T13439] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 289.843633][T13452] netlink: 'syz.3.2215': attribute type 3 has an invalid length. [ 290.351582][ T9648] net_ratelimit: 30 callbacks suppressed [ 290.351603][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 290.490763][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 290.610628][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 290.697157][T13500] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002 [ 290.752140][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 290.963690][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 291.082105][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 291.192835][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 291.310397][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 291.508954][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 291.642116][T13531] macvtap1: entered promiscuous mode [ 291.647637][T13531] vlan0: entered promiscuous mode [ 291.653587][T13531] macvtap1: entered allmulticast mode [ 291.659162][T13531] vlan0: entered allmulticast mode [ 291.664604][T13531] veth0_vlan: entered allmulticast mode [ 291.690402][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 292.044630][T13566] geneve4: entered promiscuous mode [ 292.049910][T13566] geneve4: entered allmulticast mode [ 292.141315][T13574] netlink: 'syz.1.2251': attribute type 9 has an invalid length. [ 292.227483][T13577] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 292.263604][T13577] team0: Port device geneve0 added [ 292.507999][T13596] netlink: 'syz.2.2257': attribute type 83 has an invalid length. [ 292.606261][T13600] gtp0: entered promiscuous mode [ 292.611530][T13600] gtp0: entered allmulticast mode [ 292.739642][ T30] audit: type=1800 audit(1764018299.070:5): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2263" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2251 res=0 errno=0 [ 292.904965][T13616] x_tables: duplicate underflow at hook 1 [ 293.483467][T13654] syzkaller1: entered promiscuous mode [ 293.488988][T13654] syzkaller1: entered allmulticast mode [ 294.036297][T13682] __nla_validate_parse: 31 callbacks suppressed [ 294.036328][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 294.052358][T13643] wlan0 speed is unknown, defaulting to 1000 [ 294.056304][T13643] lo speed is unknown, defaulting to 1000 [ 294.116645][T13682] macvlan2: entered promiscuous mode [ 294.136647][T13682] macvlan2: entered allmulticast mode [ 294.207835][T13691] validate_nla: 2 callbacks suppressed [ 294.207852][T13691] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 294.277661][T13691] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2292'. [ 294.338750][T13702] netlink: 'syz.3.2294': attribute type 13 has an invalid length. [ 294.617371][T13702] veth1_to_hsr: left promiscuous mode [ 294.623435][T13702] veth1_to_hsr: left allmulticast mode [ 294.648438][T13702] veth0_macvtap: left allmulticast mode [ 294.656257][T13715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 294.680776][T13702] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 294.718260][T13717] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2299'. [ 294.726618][T13702] veth3: left promiscuous mode [ 294.733551][T13702] veth3: left allmulticast mode [ 294.746437][T13702] gretap1: left promiscuous mode [ 294.757113][T13702] macvtap1: left promiscuous mode [ 294.762292][T13702] vlan0: left promiscuous mode [ 294.767348][T13702] macvtap1: left allmulticast mode [ 294.772921][T13702] vlan0: left allmulticast mode [ 294.777901][T13702] veth0_vlan: left allmulticast mode [ 294.785383][T13718] netlink: 'syz.0.2299': attribute type 2 has an invalid length. [ 295.076933][T13702] bond0: left promiscuous mode [ 295.082117][T13702] bond0: left allmulticast mode [ 295.093318][T13702] veth7: left promiscuous mode [ 295.099341][T13702] veth9: left promiscuous mode [ 295.106998][T13642] wlan0 speed is unknown, defaulting to 1000 [ 295.142643][T13642] lo speed is unknown, defaulting to 1000 [ 295.385879][T13731] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2302'. [ 295.434909][T13736] netlink: 'syz.0.2304': attribute type 12 has an invalid length. [ 295.454992][T13727] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2302'. [ 295.477651][ T9866] net_ratelimit: 23 callbacks suppressed [ 295.477670][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 295.674993][T13744] siw: device registration error -23 [ 295.684662][T13747] siw: device registration error -23 [ 295.744836][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 295.833506][T13752] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 295.870597][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 295.891877][T13752] netlink: 'syz.0.2307': attribute type 2 has an invalid length. [ 295.980767][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.092618][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.210343][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.238578][T13728] wlan0 speed is unknown, defaulting to 1000 [ 296.245320][T13776] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 296.383259][T13782] bond11: (slave ip6gretap2): making interface the new active one [ 296.399434][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2315'. [ 296.413807][T13782] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 296.451377][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.466806][T13728] lo speed is unknown, defaulting to 1000 [ 296.620890][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.750427][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 296.860836][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 297.016953][T13812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 297.168251][T13824] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 297.234439][T13828] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 297.302104][T13836] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 297.320123][T13838] netlink: 'syz.2.2331': attribute type 4 has an invalid length. [ 297.346699][T13832] smc: net device vcan0 applied user defined pnetid SYZ1 [ 297.506899][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 297.703462][T13865] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 297.736393][T13865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2341'. [ 298.295170][T13907] tipc: Enabled bearer , priority 0 [ 298.476706][T13921] tipc: Resetting bearer [ 298.533764][T13919] xt_cgroup: invalid path, errno=-2 [ 298.766743][T13947] x_tables: duplicate underflow at hook 2 [ 299.021218][T13962] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 299.147435][T13970] __nla_validate_parse: 6 callbacks suppressed [ 299.147454][T13970] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2373'. [ 299.228241][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 299.254831][T13978] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 299.268877][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 299.283293][T13980] validate_nla: 2 callbacks suppressed [ 299.283313][T13980] netlink: 'syz.4.2375': attribute type 3 has an invalid length. [ 299.423144][T13986] macsec0: entered promiscuous mode [ 299.429234][T13986] macsec0: entered allmulticast mode [ 299.436273][T13987] veth1_macvtap: entered allmulticast mode [ 299.444875][T13987] macsec0: left promiscuous mode [ 299.450145][T13987] macsec0: left allmulticast mode [ 299.455897][T13987] veth1_macvtap: left allmulticast mode [ 299.492155][T13990] netlink: 'syz.4.2379': attribute type 2 has an invalid length. [ 299.518285][T13990] netlink: 'syz.4.2379': attribute type 11 has an invalid length. [ 299.533280][T13990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2379'. [ 299.576921][T13990] netlink: 'syz.4.2379': attribute type 2 has an invalid length. [ 299.601098][T13990] netlink: 'syz.4.2379': attribute type 11 has an invalid length. [ 299.622953][T13990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2379'. [ 299.785322][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2384'. [ 299.871285][T14017] netlink: 'syz.2.2385': attribute type 29 has an invalid length. [ 299.909623][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 300.103839][T14026] nbd: must specify a device to reconfigure [ 300.495922][ T13] net_ratelimit: 28 callbacks suppressed [ 300.495940][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 300.533328][T14060] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 300.573274][T14058] veth5: entered promiscuous mode [ 300.578372][T14058] veth5: entered allmulticast mode [ 300.641562][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 300.861590][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 300.992971][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.115436][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.245652][T14114] pimreg3: entered allmulticast mode [ 301.258584][T14116] Cannot find del_set index 0 as target [ 301.287053][T14117] team0: Device ip6gre1 is of different type [ 301.370748][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.384804][T14125] siw: device registration error -23 [ 301.394448][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2412'. [ 301.491536][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.579781][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 301.605400][T14135] netlink: 'syz.4.2414': attribute type 2 has an invalid length. [ 301.631899][T14146] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 301.652639][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.790798][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 301.881990][T14165] sctp: [Deprecated]: syz.1.2421 (pid 14165) Use of int in max_burst socket option. [ 301.881990][T14165] Use struct sctp_assoc_value instead [ 301.900163][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 303.653252][T14236] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 303.661128][T14236] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 303.668885][T14236] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 303.948735][T14251] bond12: option mode: invalid value (133) [ 303.963088][T14251] bond12 (unregistering): Released all slaves [ 304.160530][T14261] __nla_validate_parse: 10 callbacks suppressed [ 304.160551][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 304.174119][T14264] sctp: [Deprecated]: syz.4.2452 (pid 14264) Use of int in max_burst socket option. [ 304.174119][T14264] Use struct sctp_assoc_value instead [ 304.458285][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 304.507870][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 304.520406][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 304.530313][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 304.550609][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 304.585667][T14295] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 304.623099][T14295] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 304.653957][T14298] validate_nla: 5 callbacks suppressed [ 304.653974][T14298] netlink: 'syz.0.2464': attribute type 8 has an invalid length. [ 304.822341][T14317] netlink: 'syz.4.2471': attribute type 1 has an invalid length. [ 304.848146][T14317] bond13: entered promiscuous mode [ 304.853527][T14317] bond13: entered allmulticast mode [ 304.859100][T14317] 8021q: adding VLAN 0 to HW filter on device bond13 [ 305.024833][T14322] netlink: 'syz.3.2469': attribute type 22 has an invalid length. [ 305.033275][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'. [ 305.043541][T14322] netlink: 'syz.3.2469': attribute type 22 has an invalid length. [ 305.051766][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'. [ 305.153925][T14328] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2472'. [ 305.327875][T14340] lo: entered promiscuous mode [ 305.336662][T14340] netlink: 'syz.3.2479': attribute type 2 has an invalid length. [ 305.407030][T14345] delete_channel: no stack [ 305.476710][T14347] netlink: 'syz.2.2482': attribute type 4 has an invalid length. [ 305.570783][ T9648] net_ratelimit: 26 callbacks suppressed [ 305.570806][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 305.686017][T14360] netlink: 'syz.3.2485': attribute type 10 has an invalid length. [ 305.696950][T14362] syzkaller0: entered promiscuous mode [ 305.705356][T14362] syzkaller0: entered allmulticast mode [ 305.723643][T14360] !€ÿ: (slave team0): Releasing backup interface [ 305.732174][T14365] ip6t_srh: unknown srh invflags 4000 [ 305.738400][T14360] team0: left promiscuous mode [ 305.743393][T14360] team_slave_0: left promiscuous mode [ 305.748969][T14360] team_slave_1: left promiscuous mode [ 305.872971][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 305.899411][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2492'. [ 305.992761][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.180387][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.291338][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.400340][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.572141][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.692326][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.824830][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 306.972192][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 307.472742][T14491] netlink: 'syz.3.2526': attribute type 5 has an invalid length. [ 307.659487][T14503] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 307.686042][T14507] pimreg3: entered allmulticast mode [ 307.920940][T14526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 308.190860][T14546] netlink: 'syz.1.2546': attribute type 10 has an invalid length. [ 308.352041][T14556] netlink: 'syz.3.2548': attribute type 83 has an invalid length. [ 308.748183][T14560] vlan0 (unregistering): left allmulticast mode [ 308.755350][T14560] veth0_vlan (unregistering): left allmulticast mode [ 308.762135][T14560] vlan0 (unregistering): left promiscuous mode [ 309.241075][T14592] __nla_validate_parse: 13 callbacks suppressed [ 309.241095][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 309.269235][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 309.324084][T14598] geneve3: entered promiscuous mode [ 309.341681][ T9868] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20002 - 0 [ 309.360398][ T9868] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20002 - 0 [ 309.368718][ T9868] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20002 - 0 [ 309.423908][ T9868] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20002 - 0 [ 309.505990][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 309.582497][T14620] ipt_ECN: cannot use operation on non-tcp rule [ 309.606788][T14616] dvmrp0: entered allmulticast mode [ 309.708420][T14628] dvmrp0: entered allmulticast mode [ 309.717347][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 309.729545][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 309.880516][T14642] No such timeout policy "syz0" [ 309.917460][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 310.096661][T14662] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2575'. [ 310.192949][T14667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'. [ 310.406298][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2587'. [ 310.557177][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2591'. [ 310.600402][T14699] : left promiscuous mode [ 310.708869][T14710] veth0_to_bond: entered allmulticast mode [ 310.757344][T14713] netlink: 'syz.3.2595': attribute type 16 has an invalid length. [ 310.765664][ T13] net_ratelimit: 23 callbacks suppressed [ 310.765688][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 310.809212][T14713] netlink: 'syz.3.2595': attribute type 17 has an invalid length. [ 310.847991][T14713] lo: left promiscuous mode [ 310.905607][T14713] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.958723][T14713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.060844][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.135747][T14730] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 311.182754][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.290912][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.410426][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.540731][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.685002][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 311.739532][T14755] geneve5: entered promiscuous mode [ 311.821664][ T9866] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 312.396366][T14791] netlink: 'syz.0.2622': attribute type 10 has an invalid length. [ 312.421650][T14791] team0: Device veth1_macvtap failed to register rx_handler [ 312.504417][T14798] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 312.512832][T14798] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 312.520650][T14798] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 312.528609][T14798] netlink: 'syz.2.2624': attribute type 2 has an invalid length. [ 312.614940][T14800] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 312.634708][T14800] netlink: 'syz.0.2625': attribute type 29 has an invalid length. [ 312.637360][T14803] IPVS: ip_vs_edit_dest(): server weight less than zero [ 313.306744][T14833] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 313.391625][T14837] tipc: Enabled bearer , priority 0 [ 313.399108][T14837] syzkaller0: entered promiscuous mode [ 313.430366][T14837] syzkaller0: entered allmulticast mode [ 313.636567][T14834] tipc: Resetting bearer [ 313.692350][T14834] tipc: Disabling bearer [ 313.776938][T14856] Cannot find add_set index 2 as target [ 313.787243][T14856] netlink: 'syz.1.2644': attribute type 2 has an invalid length. [ 314.584993][T14899] __nla_validate_parse: 23 callbacks suppressed [ 314.585015][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 314.669047][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 315.124677][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2665'. [ 315.501228][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 315.778869][ T9648] net_ratelimit: 32 callbacks suppressed [ 315.778890][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 315.924296][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.050626][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.135432][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 316.171518][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.253676][T14961] raw_sendmsg: syz.2.2675 forgot to set AF_INET. Fix it! [ 316.327889][T14973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2680'. [ 316.354517][T14974] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2680'. [ 316.370656][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.385745][T14973] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2680'. [ 316.491024][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.543205][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2685'. [ 316.614031][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.707326][T14994] validate_nla: 2 callbacks suppressed [ 316.707345][T14994] netlink: 'syz.4.2688': attribute type 11 has an invalid length. [ 316.744820][ T50] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 316.821397][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2687'. [ 316.920417][ T50] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 317.058363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.069444][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.110377][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 317.526620][T15028] tipc: Enabling of bearer rejected, already enabled [ 317.779851][T15050] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 317.790125][T15044] veth17: entered allmulticast mode [ 318.079571][T15067] 8021q: adding VLAN 0 to HW filter on device bond14 [ 318.117564][T15067] 8021q: adding VLAN 0 to HW filter on device bond15 [ 318.315421][T15077] sctp: [Deprecated]: syz.4.2706 (pid 15077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.315421][T15077] Use struct sctp_sack_info instead [ 318.436522][T15085] netlink: 'syz.3.2707': attribute type 83 has an invalid length. [ 318.953550][T15107] Cannot find del_set index 49151 as target [ 319.792134][T15160] __nla_validate_parse: 8 callbacks suppressed [ 319.792153][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 319.808625][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 319.943526][T15163] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 319.980871][T15163] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 320.304541][T15183] netlink: 'syz.0.2741': attribute type 15 has an invalid length. [ 320.341388][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2742'. [ 320.357372][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2741'. [ 320.358538][T15186] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2741'. [ 320.455473][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 320.484789][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2743'. [ 320.489033][T15195] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2744'. [ 320.504467][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2743'. [ 320.990797][ T12] net_ratelimit: 26 callbacks suppressed [ 320.990827][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 321.046458][T15217] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 321.083580][T15217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.135656][T15217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.153681][T15217] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 321.169996][T15217] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 321.261574][T15223] veth21: entered promiscuous mode [ 321.275510][T15223] bond7: (slave veth21): Enslaving as an active interface with a down link [ 321.302488][T15233] netlink: 'syz.4.2751': attribute type 39 has an invalid length. [ 321.349058][T15232] vlan0: entered allmulticast mode [ 321.377784][T15232] bond7: entered allmulticast mode [ 321.444836][T15241] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2750'. [ 321.558642][T15246] bond11 (unregistering): Released all slaves [ 321.643117][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 321.800328][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 321.887809][T15263] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 321.900535][T15264] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 322.011393][T15264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.145592][T15269] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 322.231638][T15269] bond16 (unregistering): Released all slaves [ 322.319830][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 322.405223][T15289] netlink: 'syz.3.2764': attribute type 1 has an invalid length. [ 322.441207][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 322.525050][T15289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 322.574079][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 322.767072][T15308] chnl_net:caif_netlink_parms(): no params data found [ 322.832209][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 322.981023][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 323.291404][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 323.430367][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 323.439262][T15281] wlan0 speed is unknown, defaulting to 1000 [ 323.565248][T15281] lo speed is unknown, defaulting to 1000 [ 324.358061][T15381] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 324.540984][T15387] netlink: 'syz.0.2789': attribute type 23 has an invalid length. [ 324.743062][T15398] netlink: 'syz.3.2791': attribute type 24 has an invalid length. [ 324.962107][T15410] syzkaller1: entered promiscuous mode [ 324.967621][T15410] syzkaller1: entered allmulticast mode [ 325.517719][T15433] netlink: 'syz.1.2801': attribute type 1 has an invalid length. [ 325.544083][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.552131][T15429] bond0: entered promiscuous mode [ 325.557624][T15429] : entered promiscuous mode [ 325.557697][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.574716][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.588224][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.596377][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.604052][ T10] syz1: Port: 1 Link DOWN [ 325.639609][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.701915][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.709474][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.739418][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.757618][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.050717][ T9638] net_ratelimit: 19 callbacks suppressed [ 326.050738][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 326.069400][T15436] wlan0 speed is unknown, defaulting to 1000 [ 326.085672][T15436] lo speed is unknown, defaulting to 1000 [ 326.181015][T15460] netlink: 'syz.3.2811': attribute type 11 has an invalid length. [ 326.189184][T15460] netlink: 'syz.3.2811': attribute type 4 has an invalid length. [ 326.190857][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 326.216611][T15460] __nla_validate_parse: 9 callbacks suppressed [ 326.216630][T15460] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.2811'. [ 326.340704][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 326.401977][T15436] chnl_net:caif_netlink_parms(): no params data found [ 326.415168][T15473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.441613][T15473] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2813'. [ 326.604862][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.620440][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.668348][T15436] bridge_slave_0: entered allmulticast mode [ 326.696068][T15436] bridge_slave_0: entered promiscuous mode [ 326.739505][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.747572][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.759530][T15436] bridge_slave_1: entered allmulticast mode [ 326.779153][T15436] bridge_slave_1: entered promiscuous mode [ 327.276859][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.305731][T15498] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.332514][T15498] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.345932][T15498] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.360812][T15498] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 327.410462][T15510] netlink: 'syz.1.2825': attribute type 7 has an invalid length. [ 327.424665][ T9869] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.447958][ T9869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.458130][ T9869] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.470369][ T9869] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20002 - 0 [ 327.491469][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.523225][ T9869] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.553801][ T9869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.579417][ T9869] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.598700][ T9869] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20002 - 0 [ 327.666432][ T9869] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.680265][ T9869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.689072][ T9869] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.720514][ T9869] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20002 - 0 [ 327.758437][T15436] team0: Port device team_slave_0 added [ 327.777597][T15436] team0: Port device team_slave_1 added [ 327.828071][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.843372][T15541] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2833'. [ 327.850485][ T5844] Bluetooth: hci1: command tx timeout [ 327.870325][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.896669][T15541] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2833'. [ 327.932769][T15541] netlink: 'syz.4.2833': attribute type 6 has an invalid length. [ 327.935832][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.951764][T15541] netlink: 'syz.4.2833': attribute type 5 has an invalid length. [ 327.951798][T15541] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2833'. [ 327.976262][T15542] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2834'. [ 327.987476][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.994815][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.050961][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.087319][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 328.219315][T15436] hsr_slave_0: entered promiscuous mode [ 328.231177][T15436] hsr_slave_1: entered promiscuous mode [ 328.237638][T15436] debugfs: 'hsr0' already exists in 'hsr' [ 328.246340][T15436] Cannot create hsr debugfs directory [ 328.496177][T15574] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2841'. [ 328.511986][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 328.670477][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 328.780481][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 328.910377][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 328.992937][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 329.106574][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 329.203871][T15436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.229531][T15436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.243158][T15436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.258221][T15436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.284989][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2856'. [ 329.377260][T15617] batadv_slave_1: entered promiscuous mode [ 329.416921][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.454457][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.472719][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.479872][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.491012][T15616] batadv_slave_1: left promiscuous mode [ 329.502395][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.509576][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.545274][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 329.664782][T15628] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 329.755917][T15632] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 329.909235][T15644] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 329.930328][ T5844] Bluetooth: hci1: command tx timeout [ 330.003367][T15646] bond16: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 330.016734][T15646] bond16: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 330.027940][T15646] bond16: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 330.138924][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.196635][T15436] veth0_vlan: entered promiscuous mode [ 330.214038][T15436] veth1_vlan: entered promiscuous mode [ 330.248879][T15436] veth0_macvtap: entered promiscuous mode [ 330.261476][T15436] veth1_macvtap: entered promiscuous mode [ 330.285727][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.316404][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.355128][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.406651][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.434132][ T9640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.456555][ T9640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.551678][ T9640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.564374][ T9640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.613589][T15671] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 330.620801][ T9640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.630108][ T9640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.161024][ T12] net_ratelimit: 11 callbacks suppressed [ 331.161047][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 331.309899][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 331.480147][T15733] netlink: 'syz.1.2888': attribute type 13 has an invalid length. [ 331.488205][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 331.515115][T15733] __nla_validate_parse: 8 callbacks suppressed [ 331.515134][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2888'. [ 331.563220][T15744] openvswitch: netlink: Unknown nsh attribute 0 [ 331.569576][T15744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.577367][T15746] netlink: 'syz.2.2893': attribute type 13 has an invalid length. [ 331.587745][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 331.597899][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 331.628170][T15746] netlink: 'syz.2.2893': attribute type 13 has an invalid length. [ 331.638104][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 331.645335][T15750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2894'. [ 331.656506][T15749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2894'. [ 331.694496][T15749] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 331.759282][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 331.854935][T15749] bond17 (unregistering): Released all slaves [ 331.909566][T15750] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 331.916768][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'. [ 332.012864][ T5844] Bluetooth: hci1: command tx timeout [ 332.079695][T15771] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2899'. [ 332.090844][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 332.201978][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 332.231198][T15777] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 332.348923][T15784] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2903'. [ 332.397158][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2905'. [ 332.420639][T15791] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.422286][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 332.545011][T15800] netlink: 'syz.3.2908': attribute type 9 has an invalid length. [ 332.570680][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 333.295643][T15814] syzkaller0: entered promiscuous mode [ 333.301772][T15814] syzkaller0: entered allmulticast mode [ 334.061717][T15854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.062121][T15878] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 334.078993][T15853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.097548][ T5844] Bluetooth: hci1: command tx timeout [ 334.252776][T15887] tipc: New replicast peer: 255.255.255.255 [ 334.265427][T15887] tipc: Enabled bearer , priority 10 [ 334.453114][T15905] netlink: 'syz.4.2932': attribute type 3 has an invalid length. [ 334.472888][T15905] netlink: 'syz.4.2932': attribute type 2 has an invalid length. [ 334.545919][T15909] tipc: Bearer : already 2 bearers with priority 10 [ 334.553688][T15909] tipc: Bearer : trying with adjusted priority [ 334.561214][T15909] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 335.163323][T15933] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.280518][T15939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.319809][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.330165][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.341397][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.350724][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.358513][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.699114][T15947] wlan0 speed is unknown, defaulting to 1000 [ 335.718362][T15947] lo speed is unknown, defaulting to 1000 [ 336.008559][T15986] delete_channel: no stack [ 336.171345][ T9638] net_ratelimit: 20 callbacks suppressed [ 336.171366][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 336.290394][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 336.313354][T15947] chnl_net:caif_netlink_parms(): no params data found [ 336.440706][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 336.477226][T16006] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 336.489747][T16006] bond1 (unregistering): Released all slaves [ 336.754681][T16024] netlink: 'syz.0.2969': attribute type 2 has an invalid length. [ 336.762872][T16024] netlink: 'syz.0.2969': attribute type 8 has an invalid length. [ 336.785201][T16024] __nla_validate_parse: 18 callbacks suppressed [ 336.785220][T16024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2969'. [ 336.812112][T15997] wlan0 speed is unknown, defaulting to 1000 [ 336.818414][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.833825][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.843132][T15947] bridge_slave_0: entered allmulticast mode [ 336.852138][T15947] bridge_slave_0: entered promiscuous mode [ 336.866677][T15997] lo speed is unknown, defaulting to 1000 [ 336.881109][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 336.897371][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.913460][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.929542][T15947] bridge_slave_1: entered allmulticast mode [ 336.952890][T15947] bridge_slave_1: entered promiscuous mode [ 336.995644][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 337.036533][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.053265][T16032] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2973'. [ 337.060811][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 337.113671][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.224518][T15947] team0: Port device team_slave_0 added [ 337.244050][T15947] team0: Port device team_slave_1 added [ 337.363692][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.378577][T16050] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 337.381235][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.461262][ T5844] Bluetooth: hci3: command tx timeout [ 337.463133][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.528304][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.550957][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.577782][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.712734][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 337.737491][T15947] hsr_slave_0: entered promiscuous mode [ 337.753164][T15947] hsr_slave_1: entered promiscuous mode [ 337.759587][T15947] debugfs: 'hsr0' already exists in 'hsr' [ 337.768019][T15947] Cannot create hsr debugfs directory [ 337.798843][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 338.714877][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 338.779540][T16081] syzkaller1: entered promiscuous mode [ 338.789379][T16081] syzkaller1: entered allmulticast mode [ 338.807240][T16088] sctp: [Deprecated]: syz.1.2987 (pid 16088) Use of int in max_burst socket option deprecated. [ 338.807240][T16088] Use struct sctp_assoc_value instead [ 338.812718][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2988'. [ 338.903688][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 338.965000][T16094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2988'. [ 338.975375][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 339.070400][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 339.201727][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 339.291952][T16101] can: request_module (can-proto-0) failed. [ 339.456954][T15947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.471387][T15947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.485079][T15947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.516932][T15947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.541223][ T5844] Bluetooth: hci3: command tx timeout [ 339.542009][T16117] netlink: 'syz.4.2995': attribute type 3 has an invalid length. [ 339.661666][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.684521][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.705698][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.712906][ T9640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.784195][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.791432][ T9640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.876219][T16135] netlink: 'syz.1.2998': attribute type 1 has an invalid length. [ 339.897943][T16135] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2998'. [ 340.022976][T16141] netlink: 'syz.4.2999': attribute type 21 has an invalid length. [ 340.065059][T16141] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2999'. [ 340.363056][T16157] veth1_to_bond: entered allmulticast mode [ 340.534488][T16157] veth1_to_bond (unregistering): left allmulticast mode [ 340.617942][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.698111][T16173] netlink: 'syz.0.3008': attribute type 4 has an invalid length. [ 340.727404][T15947] veth0_vlan: entered promiscuous mode [ 340.747378][T15947] veth1_vlan: entered promiscuous mode [ 340.823865][T15947] veth0_macvtap: entered promiscuous mode [ 340.842342][T15947] veth1_macvtap: entered promiscuous mode [ 340.892077][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.909355][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.952822][ T9638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.961793][ T9638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.034868][ T9638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.056405][ T9638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.147328][T16201] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 341.195103][T16201] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 341.218404][ T9640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.236873][ T9640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.270511][ T9638] net_ratelimit: 8 callbacks suppressed [ 341.270528][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 341.331057][T16211] tipc: Enabling of bearer rejected, already enabled [ 341.355684][ T9868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.381520][ T9868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.429187][ T9868] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.442576][ T9868] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.462138][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 341.503455][T16220] geneve2: entered promiscuous mode [ 341.530397][T16220] geneve2: entered allmulticast mode [ 341.547267][ T9868] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.612763][ T5844] Bluetooth: hci3: command tx timeout [ 341.620694][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 341.684044][ T9868] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.722232][ T9868] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 341.783171][ T9868] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 341.800718][ T9868] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 341.836101][ T9869] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 341.913245][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 341.949163][T16245] __nla_validate_parse: 6 callbacks suppressed [ 341.949183][T16245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3028'. [ 341.988533][T16249] xt_recent: Unsupported userspace flags (000000b1) [ 342.006038][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3029'. [ 342.028682][T16245] tipc: Enabling of bearer rejected, already enabled [ 342.101483][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.242476][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.360375][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.395498][T16267] netlink: 'syz.3.3036': attribute type 10 has an invalid length. [ 342.447061][T16267] netlink: 'syz.3.3036': attribute type 10 has an invalid length. [ 342.470357][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.583155][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.701997][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 342.899584][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.909081][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.919256][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.934935][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.948841][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.975121][T16290] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 343.045722][T16292] block nbd2: Unsupported socket: should be TCP or UNIX. [ 343.423865][T16283] wlan0 speed is unknown, defaulting to 1000 [ 343.433821][T16283] lo speed is unknown, defaulting to 1000 [ 343.499140][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'. [ 343.622228][T16283] chnl_net:caif_netlink_parms(): no params data found [ 343.692283][ T5840] Bluetooth: hci3: command tx timeout [ 343.746811][T16283] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.754790][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.765361][T16283] bridge_slave_0: entered allmulticast mode [ 343.775872][T16283] bridge_slave_0: entered promiscuous mode [ 343.786376][T16283] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.794764][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.804871][T16283] bridge_slave_1: entered allmulticast mode [ 343.834655][T16283] bridge_slave_1: entered promiscuous mode [ 343.917380][T16283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.952059][T16283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.013812][T16283] team0: Port device team_slave_0 added [ 344.039676][T16283] team0: Port device team_slave_1 added [ 344.139106][T16283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.157600][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.189785][T16283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.232512][T16283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.243244][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.269957][T16283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.434817][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'. [ 344.449978][T16283] hsr_slave_0: entered promiscuous mode [ 344.459434][T16283] hsr_slave_1: entered promiscuous mode [ 344.466602][T16283] debugfs: 'hsr0' already exists in 'hsr' [ 344.473160][T16283] Cannot create hsr debugfs directory [ 344.745857][T16371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3066'. [ 344.936475][T16283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.959251][T16283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 345.066083][ T5840] Bluetooth: hci5: command tx timeout [ 345.094325][T16283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.104760][T16283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 345.135180][T16361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3061'. [ 345.179970][T16283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.195337][T16283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 345.259943][T16283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.281921][T16283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 345.468450][T16396] netlink: 'syz.2.3073': attribute type 1 has an invalid length. [ 345.489890][T16283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.498057][T16396] netlink: 'syz.2.3073': attribute type 1 has an invalid length. [ 345.501508][T16283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.517096][T16283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.528354][T16283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.586481][T16410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3076'. [ 345.662098][T16415] syzkaller0: entered promiscuous mode [ 345.667776][T16415] syzkaller0: entered allmulticast mode [ 345.741948][T16414] tipc: Started in network mode [ 345.746885][T16414] tipc: Node identity f6393272382e, cluster identity 4711 [ 345.755312][T16414] tipc: Enabled bearer , priority 0 [ 345.784475][T16415] tipc: Enabling of bearer rejected, already enabled [ 345.796899][T16419] netlink: 'syz.3.3078': attribute type 23 has an invalid length. [ 345.810266][T16283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.825855][T16412] tipc: Resetting bearer [ 345.885741][T16412] tipc: Disabling bearer [ 345.959558][T16283] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.967561][T16423] tipc: Enabling of bearer rejected, already enabled [ 346.051324][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.058505][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.074532][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.081748][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.138129][T16283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.298152][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'. [ 346.382216][ T9868] net_ratelimit: 16 callbacks suppressed [ 346.382238][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 346.550412][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 346.664356][T16442] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 346.694236][T16442] bond1 (unregistering): Released all slaves [ 346.708167][T16450] netlink: 'syz.1.3087': attribute type 3 has an invalid length. [ 346.733732][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 346.770130][T16283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.867064][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 346.962938][T16464] netlink: 'syz.2.3089': attribute type 1 has an invalid length. [ 346.981833][T16464] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3089'. [ 346.985452][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 347.017145][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'. [ 347.026540][T16464] netlink: 'syz.2.3089': attribute type 1 has an invalid length. [ 347.093930][T16464] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3089'. [ 347.144002][ T5840] Bluetooth: hci5: command tx timeout [ 347.236761][T16456] hsr_slave_0 (unregistering): left promiscuous mode [ 347.246259][T16477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3092'. [ 347.357227][T16476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.420383][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 347.532020][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 347.552966][T16283] veth0_vlan: entered promiscuous mode [ 347.588828][T16283] veth1_vlan: entered promiscuous mode [ 347.609523][T16489] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 347.617396][T16489] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 347.644480][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 347.666755][T16497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.731293][T16283] veth0_macvtap: entered promiscuous mode [ 347.758528][T16283] veth1_macvtap: entered promiscuous mode [ 347.778631][T16501] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 347.854993][T16283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.874764][T16283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.903661][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.932561][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.942882][T16504] netlink: 'syz.2.3101': attribute type 10 has an invalid length. [ 347.945143][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.960407][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.026402][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.035765][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.066512][ T9638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.074665][ T9638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.092276][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 348.584948][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 348.939768][T16520] wlan0 speed is unknown, defaulting to 1000 [ 348.961727][T16520] lo speed is unknown, defaulting to 1000 [ 348.985674][T16545] tipc: Enabling of bearer rejected, already enabled [ 349.088551][T16550] Unknown options in mask b7f2 [ 349.114489][T16549] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 349.155902][T16549] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 349.211322][ T5840] Bluetooth: hci5: command tx timeout [ 349.311134][T16557] netlink: 'syz.0.3113': attribute type 1 has an invalid length. [ 349.330350][T16549] tipc: Resetting bearer [ 349.453904][T16557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.529433][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.546299][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.554335][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.564118][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.575442][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.658610][T16559] bond1: (slave veth3): Enslaving as an active interface with a down link [ 349.688443][T16560] veth5: entered promiscuous mode [ 349.701654][T16560] bond1: (slave veth5): Enslaving as an active interface with a down link [ 349.729233][T16557] vlan2: entered allmulticast mode [ 349.735747][T16557] bond1: entered allmulticast mode [ 349.743014][T16557] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 349.850712][T16569] tipc: Enabled bearer , priority 0 [ 349.865526][T16572] syzkaller0: entered promiscuous mode [ 349.872423][T16572] syzkaller0: entered allmulticast mode [ 349.879761][T16568] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3114'. [ 349.902535][T16569] tipc: Resetting bearer [ 349.919802][T16561] tipc: Resetting bearer [ 349.963369][T16561] tipc: Disabling bearer [ 350.119182][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3116'. [ 350.474652][T16563] wlan0 speed is unknown, defaulting to 1000 [ 350.492831][T16563] lo speed is unknown, defaulting to 1000 [ 350.600704][T16599] syzkaller0: entered promiscuous mode [ 350.606226][T16599] syzkaller0: entered allmulticast mode [ 350.885741][T16621] 8021q: VLANs not supported on ip6_vti0 [ 351.159592][T16563] chnl_net:caif_netlink_parms(): no params data found [ 351.189296][T16643] netlink: 'syz.3.3137': attribute type 10 has an invalid length. [ 351.200318][T16643] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3137'. [ 351.291367][ T5844] Bluetooth: hci5: command tx timeout [ 351.319280][T16656] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3139'. [ 351.403787][T16563] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.437581][T16563] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.449464][T16563] bridge_slave_0: entered allmulticast mode [ 351.458725][T16563] bridge_slave_0: entered promiscuous mode [ 351.471852][T16563] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.489000][T16563] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.506994][T16563] bridge_slave_1: entered allmulticast mode [ 351.519496][T16563] bridge_slave_1: entered promiscuous mode [ 351.596569][T16673] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 351.670568][T16563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.692377][ T5844] Bluetooth: hci4: command tx timeout [ 351.733080][T16563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.812008][T16563] team0: Port device team_slave_0 added [ 351.834871][T16563] team0: Port device team_slave_1 added [ 351.882735][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 351.996935][T16563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.008592][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.071458][T16563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.100797][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 352.109728][T16697] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3151'. [ 352.129064][T16697] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3151'. [ 352.140021][T16563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.147157][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.242254][T16563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.310628][ T9869] net_ratelimit: 16 callbacks suppressed [ 352.310649][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 352.332309][T16706] sock: sock_timestamping_bind_phc: sock not bind to device [ 352.437423][T16563] hsr_slave_0: entered promiscuous mode [ 352.457144][T16563] hsr_slave_1: entered promiscuous mode [ 352.472667][T16563] debugfs: 'hsr0' already exists in 'hsr' [ 352.488782][T16563] Cannot create hsr debugfs directory [ 352.701485][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 352.750130][T16726] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 352.777292][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 352.887594][T16732] bond2: (slave bridge2): making interface the new active one [ 352.924668][T16732] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 352.991022][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 353.031970][T16693] wlan0 speed is unknown, defaulting to 1000 [ 353.096508][T16563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.127190][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 353.136786][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 353.152108][T16693] lo speed is unknown, defaulting to 1000 [ 353.162237][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 353.223318][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 353.251230][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 353.277838][T16563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.483892][T16563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.540350][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 353.622228][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3170'. [ 353.668595][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 353.770575][ T5844] Bluetooth: hci4: command tx timeout [ 353.837094][T16770] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 353.864550][T16770] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 353.890521][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 353.910013][T16563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.972873][T16563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.023738][T16563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.048901][T16563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.204043][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 354.360318][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 354.366469][T16801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 354.397071][T16803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 354.465516][T16563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.496268][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 354.546108][T16563] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.577876][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.585155][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.630788][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.637998][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.672481][T16810] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 354.974772][T16837] netlink: 'syz.0.3192': attribute type 4 has an invalid length. [ 355.078592][T16840] syzkaller0: entered promiscuous mode [ 355.084311][T16840] syzkaller0: entered allmulticast mode [ 355.129340][T16842] syzkaller1: entered promiscuous mode [ 355.135606][T16842] syzkaller1: entered allmulticast mode [ 355.193494][T16846] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 355.246254][T16837] syzkaller1: left promiscuous mode [ 355.252477][T16837] syzkaller1: left allmulticast mode [ 355.278018][T16848] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 355.288383][T16848] netlink: 'syz.2.3194': attribute type 2 has an invalid length. [ 355.356401][T16563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.443491][T16563] veth0_vlan: entered promiscuous mode [ 355.468043][T16563] veth1_vlan: entered promiscuous mode [ 355.586927][T16863] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 355.633249][T16563] veth0_macvtap: entered promiscuous mode [ 355.664994][T16869] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 355.724535][T16563] veth1_macvtap: entered promiscuous mode [ 355.747814][T10926] IPVS: starting estimator thread 0... [ 355.787357][T16563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.837243][T16563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.850554][ T5844] Bluetooth: hci4: command tx timeout [ 355.850694][T16875] IPVS: using max 24 ests per chain, 57600 per kthread [ 355.946233][T16882] pimreg: entered allmulticast mode [ 355.986711][ T9635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.035317][ T9635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.099830][ T9635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.113288][ T9635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.381522][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.389389][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.467998][ T9635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.476957][ T9635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.569098][T16912] netlink: 'syz.0.3212': attribute type 4 has an invalid length. [ 356.595057][T16912] netlink: 'syz.0.3212': attribute type 29 has an invalid length. [ 356.610235][T16912] netlink: 'syz.0.3212': attribute type 29 has an invalid length. [ 356.637328][T16916] unsupported nlmsg_type 40 [ 356.852734][T16933] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.883818][T16932] rdma_op ffff888021bce9f0 conn xmit_rdma 0000000000000000 [ 357.018093][ T9] IPVS: starting estimator thread 0... [ 357.026709][T16939] netlink: 'syz.4.3221': attribute type 83 has an invalid length. [ 357.110336][T16940] IPVS: using max 30 ests per chain, 72000 per kthread [ 357.190805][T16948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.372228][T16950] __nla_validate_parse: 7 callbacks suppressed [ 357.372249][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 357.411578][ T9640] net_ratelimit: 19 callbacks suppressed [ 357.411600][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 357.432166][T16952] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3224'. [ 357.522494][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.533804][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.560549][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.568687][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.576715][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.736507][T16960] IPv6: sit1: Disabled Multicast RS [ 357.771292][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 357.890332][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 357.934646][ T5840] Bluetooth: hci4: command tx timeout [ 358.007347][T16971] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 358.049330][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 358.191405][T16978] bond1: option miimon: invalid value (18446744073709551585) [ 358.199886][T16978] bond1: option miimon: allowed values 0 - 2147483647 [ 358.209131][T16978] bond1 (unregistering): Released all slaves [ 358.250873][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 358.281590][T16954] wlan0 speed is unknown, defaulting to 1000 [ 358.285081][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3233'. [ 358.352126][T16954] lo speed is unknown, defaulting to 1000 [ 358.362607][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 358.611507][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 358.628620][T17011] netlink: 'syz.4.3240': attribute type 3 has an invalid length. [ 358.647270][T17011] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3240'. [ 358.652173][T17008] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 358.783344][T17018] Bluetooth: MGMT ver 1.23 [ 358.872962][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 358.873929][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 358.906119][T17024] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 359.038775][T17024] bond3 (unregistering): Released all slaves [ 359.068205][T17034] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 359.135443][T17034] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 359.147838][T17036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3250'. [ 359.221528][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 359.336685][T17047] netlink: 'syz.4.3253': attribute type 4 has an invalid length. [ 359.336730][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 359.442396][T17047] netlink: 'syz.4.3253': attribute type 4 has an invalid length. [ 359.451978][T16954] chnl_net:caif_netlink_parms(): no params data found [ 359.462148][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 359.610832][ T5840] Bluetooth: hci0: command tx timeout [ 359.713806][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 359.726440][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3261'. [ 359.768115][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.790517][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.807853][T16954] bridge_slave_0: entered allmulticast mode [ 359.822659][T16954] bridge_slave_0: entered promiscuous mode [ 359.834838][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.843387][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.851397][T16954] bridge_slave_1: entered allmulticast mode [ 359.858648][T16954] bridge_slave_1: entered promiscuous mode [ 359.892289][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.904457][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.943980][T16954] team0: Port device team_slave_0 added [ 359.952660][T16954] team0: Port device team_slave_1 added [ 359.984620][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.991930][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.018980][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.032456][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.039413][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.065598][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.082847][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 360.122319][T16954] hsr_slave_0: entered promiscuous mode [ 360.128812][T16954] hsr_slave_1: entered promiscuous mode [ 360.135342][T16954] debugfs: 'hsr0' already exists in 'hsr' [ 360.141250][T16954] Cannot create hsr debugfs directory [ 360.276045][T16954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.286673][T16954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.372194][T16954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.382677][T16954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.459722][T16954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.470515][T16954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.555685][T16954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.566058][T16954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.699065][T16954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.709091][T16954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.718991][T16954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.729295][T16954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.813736][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.834277][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.848530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.855672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.874506][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.881657][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.065985][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.109873][T16954] veth0_vlan: entered promiscuous mode [ 361.123329][T16954] veth1_vlan: entered promiscuous mode [ 361.152493][T16954] veth0_macvtap: entered promiscuous mode [ 361.161988][T16954] veth1_macvtap: entered promiscuous mode [ 361.179782][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.195904][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.218547][ T9638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.227734][ T9638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.242564][ T9638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.253136][ T9638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.313781][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.324232][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.352935][ T9869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.361298][ T9869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.691237][ T5840] Bluetooth: hci0: command tx timeout [ 362.521067][ T9869] net_ratelimit: 19 callbacks suppressed [ 362.521091][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 362.640423][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 362.750416][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 362.860447][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 362.970880][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.080412][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.190616][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.300681][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.410389][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.520416][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 363.770618][ T5840] Bluetooth: hci0: command tx timeout [ 365.851516][ T5840] Bluetooth: hci0: command tx timeout [ 367.600480][ T9869] net_ratelimit: 36 callbacks suppressed [ 367.600506][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 367.720413][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 367.830402][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 367.940641][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.050453][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.160412][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.270689][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.380410][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.490786][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 368.600623][ T1151] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 372.680768][ T9869] net_ratelimit: 36 callbacks suppressed [ 372.680792][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 372.810698][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 372.922146][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.030797][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.140535][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.250405][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.360818][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.470684][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.580659][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 373.690797][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 377.771355][ T9868] net_ratelimit: 36 callbacks suppressed [ 377.771379][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 377.890816][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.000932][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.110474][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.220600][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.331296][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.440417][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.494485][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.500962][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.550616][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.660344][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 378.770595][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 379.992094][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3268'. [ 380.029194][T17093] ip6t_REJECT: ECHOREPLY is not supported [ 380.126732][T17107] netlink: 'syz.0.3269': attribute type 1 has an invalid length. [ 380.145129][T17107] netlink: 'syz.0.3269': attribute type 2 has an invalid length. [ 380.182337][T17113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.189640][T17113] IPv6: NLM_F_CREATE should be set when creating new route [ 380.196895][T17113] IPv6: NLM_F_CREATE should be set when creating new route [ 380.206000][T17113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.236723][T17116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3272'. [ 380.253872][T17122] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 380.463871][T17139] vetè0_virt_wifi: renamed from lo (while UP) [ 381.216660][T17180] netlink: 'syz.3.3288': attribute type 13 has an invalid length. [ 381.727486][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3297'. [ 381.937652][T17228] x_tables: duplicate underflow at hook 1 [ 382.100291][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3307'. [ 384.863506][T17248] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 384.876145][T17241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.996797][T17241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.046277][T17245] C: renamed from team_slave_0 (while UP) [ 385.058296][T17245] netlink: 'syz.1.3309': attribute type 1 has an invalid length. [ 385.069150][T17245] net_ratelimit: 24 callbacks suppressed [ 385.069170][T17245] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 385.098547][T17254] pim6reg: entered allmulticast mode [ 385.110391][ T9638] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.220416][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.273969][T17265] netlink: 'syz.0.3316': attribute type 10 has an invalid length. [ 385.299279][T17264] dvmrp0: entered allmulticast mode [ 385.322974][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.373371][T17265] bridge_slave_1: left allmulticast mode [ 385.379087][T17265] bridge_slave_1: left promiscuous mode [ 385.400091][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.435591][T17265] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 385.470807][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.578030][T17286] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 385.610994][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.686319][T17294] netlink: 'syz.4.3325': attribute type 2 has an invalid length. [ 385.731089][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.860347][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 385.983107][T17313] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 2, id = 0 [ 386.001435][T17311] bridge1: entered promiscuous mode [ 386.009136][T17311] bridge1: entered allmulticast mode [ 386.070839][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 386.183182][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 386.300428][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 386.400098][T17336] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 386.665324][T17345] 8021q: VLANs not supported on ip_vti0 [ 386.678425][T17347] x_tables: duplicate underflow at hook 4 [ 386.757518][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'. [ 386.849269][T17361] netlink: 'syz.1.3344': attribute type 83 has an invalid length. [ 386.891160][ T5840] Bluetooth: hci0: command tx timeout [ 387.116367][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'. [ 387.303996][T17392] netlink: 'syz.4.3355': attribute type 2 has an invalid length. [ 387.318744][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 387.393989][T17402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3355'. [ 387.529304][T17407] Bluetooth: MGMT ver 1.23 [ 387.651037][T17413] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 387.731914][T17413] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 387.803236][T17418] team0: Device gtp0 is of different type [ 388.038861][T17434] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 388.113880][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3370'. [ 388.276459][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3373'. [ 388.455690][T17457] syzkaller0: entered promiscuous mode [ 388.461493][T17457] syzkaller0: entered allmulticast mode [ 388.595773][T17463] ieee802154 phy0 wpan0: encryption failed: -126 [ 388.629121][T17467] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3381'. [ 388.726640][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 388.787184][T17476] netlink: 'syz.1.3384': attribute type 1 has an invalid length. [ 388.824214][T17478] x_tables: duplicate entry at hook 1 [ 388.912725][T17480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3385'. [ 388.940000][T17481] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3385'. [ 388.944230][T17484] pim6reg1: entered promiscuous mode [ 388.954965][T17484] pim6reg1: entered allmulticast mode [ 388.977412][T17481] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 389.000760][T17481] nbd: error processing sock list [ 389.012846][T17480] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 389.047965][T17480] nbd: error processing sock list [ 389.210143][T17498] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 389.397155][T17491] wlan0 speed is unknown, defaulting to 1000 [ 389.407006][T17491] lo speed is unknown, defaulting to 1000 [ 389.609340][T17519] netlink: 'syz.0.3399': attribute type 12 has an invalid length. [ 389.621362][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.622145][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 389.766438][T17523] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 389.825973][T17528] rdma_op ffff8880540d79f0 conn xmit_rdma 0000000000000000 [ 390.034149][T17538] vlan2: entered promiscuous mode [ 390.047889][T17538] bond0: entered promiscuous mode [ 390.075219][T17538] bond_slave_0: entered promiscuous mode [ 390.095391][T17538] bond_slave_1: entered promiscuous mode [ 390.181303][ T9641] net_ratelimit: 28 callbacks suppressed [ 390.181324][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 390.320366][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 390.460400][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 390.571467][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 390.652889][T17570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.691058][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.699979][T17570] bond1: (slave bond0): Enslaving as an active interface with an up link [ 390.839389][T17570] bond1 (unregistering): (slave bond0): Releasing backup interface [ 390.854572][T17570] bond1 (unregistering): Released all slaves [ 390.880323][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 390.990311][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 391.098977][T17593] validate_nla: 2 callbacks suppressed [ 391.098992][T17593] netlink: 'syz.4.3422': attribute type 1 has an invalid length. [ 391.102319][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 391.222868][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 391.340343][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 391.451085][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 391.617312][T17611] netlink: 'syz.2.3429': attribute type 1 has an invalid length. [ 391.629417][T17581] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 391.691703][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.840532][T17629] __nla_validate_parse: 48 callbacks suppressed [ 391.840551][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3434'. [ 391.846027][T17625] bond2: Unable to set up delay as MII monitoring is disabled [ 391.868075][T17625] bond2 (unregistering): Released all slaves [ 391.894244][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3434'. [ 392.024836][T17638] dvmrp0: left allmulticast mode [ 392.082137][T17642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3436'. [ 392.149396][T17643] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 392.335564][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3443'. [ 392.352575][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 392.494565][T17672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3446'. [ 392.807531][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 392.849325][T17696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.957374][T17709] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 392.965899][T17709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3456'. [ 393.037922][T17709] team0: Port device geneve0 added [ 393.049819][T17714] veth0: entered promiscuous mode [ 393.077998][T17714] veth0: left promiscuous mode [ 393.226531][T17721] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 393.339070][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 393.381963][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3465'. [ 393.463964][T17737] netlink: 'syz.4.3466': attribute type 12 has an invalid length. [ 393.763601][T17748] pim6reg1: entered promiscuous mode [ 393.770946][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.780502][T17748] pim6reg1: entered allmulticast mode [ 393.821975][T17755] xt_hashlimit: size too large, truncated to 1048576 [ 394.101756][T17760] !€ÿ: renamed from bond_slave_0 (while UP) [ 394.583519][T17785] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 394.869956][T17806] netlink: 'syz.0.3488': attribute type 12 has an invalid length. [ 394.914209][T17804] team0: Device ip6gre1 is of different type [ 394.990028][T17810] netlink: 'syz.2.3490': attribute type 12 has an invalid length. [ 395.008494][T17810] netlink: 'syz.2.3490': attribute type 29 has an invalid length. [ 395.200408][ T9869] net_ratelimit: 30 callbacks suppressed [ 395.200428][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 395.330956][ T9868] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 395.500952][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 395.518847][T17826] netlink: 'syz.1.3494': attribute type 13 has an invalid length. [ 395.541044][T17826] veth0_macvtap: left promiscuous mode [ 395.547761][T17826] macvtap0: entered allmulticast mode [ 395.565101][T17826] macvtap0: refused to change device tx_queue_len [ 395.601046][T17825] delete_channel: no stack [ 395.611837][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 395.741016][ T9640] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 395.932793][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 396.075413][T17871] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 396.100551][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 396.113353][T17871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.159026][T17876] netlink: 'syz.1.3508': attribute type 4 has an invalid length. [ 396.210418][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 396.291612][T17882] xt_l2tp: missing protocol rule (udp|l2tpip) [ 396.629897][T17883] wlan0 speed is unknown, defaulting to 1000 [ 396.639546][T17883] lo speed is unknown, defaulting to 1000 [ 396.924274][T17919] xt_hashlimit: size too large, truncated to 1048576 [ 396.932819][T17917] pim6reg: entered allmulticast mode [ 397.138632][T17933] nbd: nbd0 already in use [ 397.168622][T17933] block nbd0: NBD_DISCONNECT [ 397.177579][T17933] block nbd0: Send disconnect failed -32 [ 397.204285][T17933] block nbd0: shutting down sockets [ 397.674245][T17961] __nla_validate_parse: 8 callbacks suppressed [ 397.674266][T17961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 397.706004][T17963] netem: change failed [ 397.833388][T17973] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 397.869675][T17973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3534'. [ 398.345186][T18002] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3547'. [ 398.595282][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3551'. [ 398.640468][T18024] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 398.691702][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'. [ 398.701076][T18026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.801529][T18026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.996464][T18042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 399.005699][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 399.136368][T18040] tipc: Resetting bearer [ 399.222741][T18056] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 399.257172][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 399.305736][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3558'. [ 399.532363][T18060] netlink: 'syz.0.3560': attribute type 13 has an invalid length. [ 399.852738][T18077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3566'. [ 399.873223][T18047] wlan0 speed is unknown, defaulting to 1000 [ 399.884641][T18047] lo speed is unknown, defaulting to 1000 [ 400.022912][T18085] netlink: 'syz.4.3570': attribute type 1 has an invalid length. [ 400.095693][T18085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.144214][T18089] bond2: (slave geneve2): making interface the new active one [ 400.154918][T18089] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 400.281644][ T9635] net_ratelimit: 27 callbacks suppressed [ 400.281665][ T9635] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.460320][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.583990][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.739533][T18112] IPVS: Unknown mcast interface: nicvf0 [ 400.810757][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.950421][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.070308][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.273051][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.404604][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.516342][T18176] Cannot find set identified by id 0 to match [ 401.523075][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.690473][ T9637] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 401.851539][T18210] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.018212][T18217] erspan0: entered allmulticast mode [ 402.364181][T18233] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 402.557192][T18240] netlink: 'syz.2.3612': attribute type 1 has an invalid length. [ 402.567969][T18240] netlink: 'syz.2.3612': attribute type 2 has an invalid length. [ 402.819542][T18250] netlink: 'syz.0.3616': attribute type 39 has an invalid length. [ 402.852864][T18254] __nla_validate_parse: 12 callbacks suppressed [ 402.852883][T18254] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3615'. [ 402.890351][T18257] nbd: must specify a device to reconfigure [ 402.932372][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 403.095223][T18274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3622'. [ 403.121223][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 403.163557][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3623'. [ 403.330071][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 403.499990][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3632'. [ 403.542575][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.575943][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3632'. [ 403.635502][T18312] geneve2: entered promiscuous mode [ 403.655337][T18317] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3635'. [ 403.670645][T18312] geneve2: entered allmulticast mode [ 403.817973][T18328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 404.005135][T18341] netlink: 'syz.0.3640': attribute type 12 has an invalid length. [ 404.042840][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 404.077462][T18349] vlan2: entered allmulticast mode [ 404.086242][T18349] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 404.416582][T18374] netlink: 'syz.3.3653': attribute type 11 has an invalid length. [ 404.946344][T18400] 8021q: VLANs not supported on ip6_vti0 [ 405.319025][T18421] syzkaller0: entered promiscuous mode [ 405.357910][T18421] syzkaller0: entered allmulticast mode [ 405.366243][T18431] netlink: 'syz.4.3668': attribute type 1 has an invalid length. [ 405.387409][T18431] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 405.390607][ T9641] net_ratelimit: 25 callbacks suppressed [ 405.390625][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.496422][T18441] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 406.818833][T18440] netlink: 'syz.0.3671': attribute type 4 has an invalid length. [ 406.840422][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 406.960394][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 407.075826][T18468] xt_hashlimit: size too large, truncated to 1048576 [ 407.110830][ T9869] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 407.221808][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 407.349670][T18484] [ 407.352043][T18484] ====================================================== [ 407.359075][T18484] WARNING: possible circular locking dependency detected [ 407.366115][T18484] syzkaller #0 Not tainted [ 407.370540][T18484] ------------------------------------------------------ [ 407.377554][T18484] syz.2.3685/18484 is trying to acquire lock: [ 407.383618][T18484] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 407.393132][T18484] [ 407.393132][T18484] but task is already holding lock: [ 407.400575][T18484] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 407.410163][T18484] [ 407.410163][T18484] which lock already depends on the new lock. [ 407.410163][T18484] [ 407.420569][T18484] [ 407.420569][T18484] the existing dependency chain (in reverse order) is: [ 407.429576][T18484] [ 407.429576][T18484] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 407.437499][T18484] lock_acquire+0x120/0x360 [ 407.442534][T18484] _raw_spin_lock_bh+0x36/0x50 [ 407.447911][T18484] nr_rt_ioctl+0x390/0xd50 [ 407.452950][T18484] sock_do_ioctl+0xdc/0x300 [ 407.457980][T18484] sock_ioctl+0x576/0x790 [ 407.462828][T18484] __se_sys_ioctl+0xfc/0x170 [ 407.467946][T18484] do_syscall_64+0xfa/0xfa0 [ 407.472986][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.479403][T18484] [ 407.479403][T18484] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 407.487395][T18484] lock_acquire+0x120/0x360 [ 407.492422][T18484] _raw_spin_lock_bh+0x36/0x50 [ 407.497717][T18484] nr_rt_ioctl+0x193/0xd50 [ 407.502657][T18484] sock_do_ioctl+0xdc/0x300 [ 407.507689][T18484] sock_ioctl+0x576/0x790 [ 407.512544][T18484] __se_sys_ioctl+0xfc/0x170 [ 407.517661][T18484] do_syscall_64+0xfa/0xfa0 [ 407.522695][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.529110][T18484] [ 407.529110][T18484] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 407.536936][T18484] validate_chain+0xb9b/0x2140 [ 407.542242][T18484] __lock_acquire+0xab9/0xd20 [ 407.547439][T18484] lock_acquire+0x120/0x360 [ 407.552459][T18484] _raw_spin_lock_bh+0x36/0x50 [ 407.557749][T18484] nr_rt_device_down+0xa9/0x720 [ 407.563118][T18484] nr_device_event+0x137/0x150 [ 407.568401][T18484] notifier_call_chain+0x1b6/0x3e0 [ 407.574033][T18484] __dev_notify_flags+0x18d/0x2e0 [ 407.579663][T18484] netif_change_flags+0xe8/0x1a0 [ 407.585118][T18484] dev_change_flags+0x130/0x260 [ 407.590486][T18484] dev_ioctl+0x7b4/0x1150 [ 407.595352][T18484] sock_do_ioctl+0x22c/0x300 [ 407.600475][T18484] sock_ioctl+0x576/0x790 [ 407.605347][T18484] __se_sys_ioctl+0xfc/0x170 [ 407.610463][T18484] do_syscall_64+0xfa/0xfa0 [ 407.615592][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.622005][T18484] [ 407.622005][T18484] other info that might help us debug this: [ 407.622005][T18484] [ 407.632225][T18484] Chain exists of: [ 407.632225][T18484] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 407.632225][T18484] [ 407.646042][T18484] Possible unsafe locking scenario: [ 407.646042][T18484] [ 407.653487][T18484] CPU0 CPU1 [ 407.658851][T18484] ---- ---- [ 407.664209][T18484] lock(nr_neigh_list_lock); [ 407.668890][T18484] lock(&nr_node->node_lock); [ 407.676173][T18484] lock(nr_neigh_list_lock); [ 407.683369][T18484] lock(nr_node_list_lock); [ 407.687961][T18484] [ 407.687961][T18484] *** DEADLOCK *** [ 407.687961][T18484] [ 407.696131][T18484] 2 locks held by syz.2.3685/18484: [ 407.701331][T18484] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 407.710237][T18484] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 407.720289][T18484] [ 407.720289][T18484] stack backtrace: [ 407.726196][T18484] CPU: 0 UID: 0 PID: 18484 Comm: syz.2.3685 Not tainted syzkaller #0 PREEMPT(full) [ 407.726223][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.726240][T18484] Call Trace: [ 407.726247][T18484] [ 407.726255][T18484] dump_stack_lvl+0x189/0x250 [ 407.726282][T18484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.726306][T18484] ? __pfx__printk+0x10/0x10 [ 407.726329][T18484] ? print_lock_name+0xde/0x100 [ 407.726348][T18484] print_circular_bug+0x2ee/0x310 [ 407.726372][T18484] check_noncircular+0x134/0x160 [ 407.726396][T18484] validate_chain+0xb9b/0x2140 [ 407.726420][T18484] ? rt6_disable_ip+0x6b3/0x720 [ 407.726463][T18484] ? __lock_acquire+0xab9/0xd20 [ 407.726479][T18484] __lock_acquire+0xab9/0xd20 [ 407.726497][T18484] ? nr_rt_device_down+0xa9/0x720 [ 407.726515][T18484] lock_acquire+0x120/0x360 [ 407.726529][T18484] ? nr_rt_device_down+0xa9/0x720 [ 407.726554][T18484] ? nr_rt_device_down+0xa9/0x720 [ 407.726572][T18484] _raw_spin_lock_bh+0x36/0x50 [ 407.726594][T18484] ? nr_rt_device_down+0xa9/0x720 [ 407.726612][T18484] nr_rt_device_down+0xa9/0x720 [ 407.726632][T18484] ? do_raw_spin_unlock+0x122/0x240 [ 407.726656][T18484] nr_device_event+0x137/0x150 [ 407.726675][T18484] notifier_call_chain+0x1b6/0x3e0 [ 407.726698][T18484] __dev_notify_flags+0x18d/0x2e0 [ 407.726718][T18484] ? __pfx___dev_notify_flags+0x10/0x10 [ 407.726733][T18484] ? __dev_change_flags+0x4cc/0x6d0 [ 407.726753][T18484] ? __pfx___dev_change_flags+0x10/0x10 [ 407.726789][T18484] ? full_name_hash+0x92/0xe0 [ 407.726811][T18484] netif_change_flags+0xe8/0x1a0 [ 407.726831][T18484] dev_change_flags+0x130/0x260 [ 407.726850][T18484] dev_ioctl+0x7b4/0x1150 [ 407.726877][T18484] sock_do_ioctl+0x22c/0x300 [ 407.726901][T18484] ? __pfx_sock_do_ioctl+0x10/0x10 [ 407.726950][T18484] sock_ioctl+0x576/0x790 [ 407.726972][T18484] ? __pfx_sock_ioctl+0x10/0x10 [ 407.726996][T18484] ? __fget_files+0x3a0/0x420 [ 407.727012][T18484] ? __fget_files+0x2a/0x420 [ 407.727030][T18484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.727050][T18484] ? __pfx_sock_ioctl+0x10/0x10 [ 407.727071][T18484] __se_sys_ioctl+0xfc/0x170 [ 407.727094][T18484] do_syscall_64+0xfa/0xfa0 [ 407.727120][T18484] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.727144][T18484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.727162][T18484] ? clear_bhb_loop+0x60/0xb0 [ 407.727182][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.727205][T18484] RIP: 0033:0x7f3eb038f749 [ 407.727222][T18484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.727238][T18484] RSP: 002b:00007f3eb11c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.727256][T18484] RAX: ffffffffffffffda RBX: 00007f3eb05e5fa0 RCX: 00007f3eb038f749 [ 407.727270][T18484] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 407.727281][T18484] RBP: 00007f3eb0413f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.727293][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.727303][T18484] R13: 00007f3eb05e6038 R14: 00007f3eb05e5fa0 R15: 00007ffd37095148 [ 407.727331][T18484] [ 408.057629][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 408.172226][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 408.280556][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 408.400869][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 408.510403][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.400631][ T9641] net_ratelimit: 16 callbacks suppressed [ 410.400656][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.520536][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.630286][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.740532][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.850332][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.970699][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 411.080318][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 411.190658][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 411.300447][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 411.410428][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.410407][ T9641] net_ratelimit: 35 callbacks suppressed [ 415.410430][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.530702][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.640482][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.750287][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.860372][ T12] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.970312][ T9865] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 416.080667][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 416.190346][ T9648] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 416.300391][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 416.410837][ T9641] bond2: (slave ip6gretap2): failed to get link speed/duplex