last executing test programs: 10.952780152s ago: executing program 1 (id=14650): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x8, 0x7, 0x1, 0x800}, {0x1, 0x1, 0x4}, {0x2, 0x3, 0x1, 0xfffffffffffffffb}, {0x8, 0x6, 0x5, 0xfffffffffffff9bd}, {0x4, 0x6, 0x4, 0x2}], 0x5, 0x20, 0x4, 0x5d7b}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000001100)={{0xfffffffffffffff7, 0x6, 0x7, 0xffff, 0x4}, [{0x7, 0xbe5, 0x4, 0x6}, {0x1, 0x100000001, 0xff, 0x8}, {0x100, 0xd5, 0x81, 0x5}, {0x52be, 0x56d, 0xb8, 0x8}, {0x9, 0x8001, 0x53, 0x1}]}) (async) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000001100)={{0xfffffffffffffff7, 0x6, 0x7, 0xffff, 0x4}, [{0x7, 0xbe5, 0x4, 0x6}, {0x1, 0x100000001, 0xff, 0x8}, {0x100, 0xd5, 0x81, 0x5}, {0x52be, 0x56d, 0xb8, 0x8}, {0x9, 0x8001, 0x53, 0x1}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_QUEUE_NUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_QUEUE_NUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) readv(r0, &(0x7f0000002540)=[{&(0x7f00000012c0)=""/254, 0xfe}, {&(0x7f00000013c0)=""/15, 0xf}, {&(0x7f0000001400)=""/55, 0x37}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/211, 0xd3}], 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r2) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) gettid() (async) r5 = gettid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002640)=0x0) gettid() (async) r7 = gettid() r8 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x67, 0x4b}}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x67, 0x4b}}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002780), 0x4) socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f00000027c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a80)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x88, r3, 0x408, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000002d00)={r1, &(0x7f0000002c00)='{}$*\x00', 0x200900, &(0x7f0000002c40)={@_ha_fsid={[0x1, 0x8]}, {0x0, 0x3, 0x4, 0x9}}, 0xf, &(0x7f0000002c80), &(0x7f0000002cc0)=0xfffffffb}) connect$unix(r11, &(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'devlink\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) recvmmsg(r9, &(0x7f000000a880)=[{{&(0x7f0000002ec0)=@sco={0x1f, @none}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f40)=""/21, 0x15}, {&(0x7f0000002f80)=""/88, 0x58}], 0x2, &(0x7f0000003040)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000003100)=""/229, 0xe5}, {&(0x7f0000003200)=""/92, 0x5c}, {&(0x7f0000003280)=""/217, 0xd9}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/139, 0x8b}, {&(0x7f0000004440)=""/47, 0x2f}, {&(0x7f0000004480)=""/253, 0xfd}, {&(0x7f0000004580)=""/243, 0xf3}, {&(0x7f0000004680)=""/227, 0xe3}, {&(0x7f0000004780)=""/213, 0xd5}], 0xa, &(0x7f0000004940)=""/154, 0x9a}, 0x8001}, {{&(0x7f0000004a00)=@hci, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004a80)=""/198, 0xc6}, {&(0x7f0000004b80)=""/128, 0x80}, {&(0x7f0000004c00)=""/178, 0xb2}, {&(0x7f0000004cc0)=""/230, 0xe6}, {&(0x7f0000004dc0)=""/239, 0xef}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x6, &(0x7f0000005f40)=""/27, 0x1b}, 0xbe8}, {{&(0x7f0000005f80)=@generic, 0x80, &(0x7f0000007300)=[{&(0x7f0000006000)=""/4, 0x4}, {&(0x7f0000006040)=""/52, 0x34}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/105, 0x69}, {&(0x7f0000007100)=""/181, 0xb5}, {&(0x7f00000071c0)}, {&(0x7f0000007200)=""/201, 0xc9}], 0x7, &(0x7f0000007380)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, &(0x7f00000087c0)=[{&(0x7f00000073c0)=""/219, 0xdb}, {&(0x7f00000074c0)=""/41, 0x29}, {&(0x7f0000007500)=""/74, 0x4a}, {&(0x7f0000007580)=""/254, 0xfe}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/29, 0x1d}], 0x7, &(0x7f0000008840)=""/199, 0xc7}, 0x8}, {{&(0x7f0000008940), 0x80, &(0x7f0000008bc0)=[{&(0x7f00000089c0)=""/48, 0x30}, {&(0x7f0000008a00)=""/210, 0xd2}, {&(0x7f0000008b00)=""/182, 0xb6}], 0x3}, 0x5}, {{&(0x7f0000008c00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000009e80)=[{&(0x7f0000008c80)=""/199, 0xc7}, {&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/199, 0xc7}], 0x3, &(0x7f0000009ec0)=""/94, 0x5e}, 0x3}, {{&(0x7f0000009f40)=@x25={0x9, @remote}, 0x80, &(0x7f000000a200)=[{&(0x7f0000009fc0)=""/188, 0xbc}, {&(0x7f000000a080)=""/9, 0x9}, {&(0x7f000000a0c0)=""/168, 0xa8}, {&(0x7f000000a180)=""/119, 0x77}], 0x4, &(0x7f000000a240)=""/68, 0x44}, 0x10000}, {{&(0x7f000000a2c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f000000a800)=[{&(0x7f000000a340)=""/96, 0x60}, {&(0x7f000000a3c0)=""/84, 0x54}, {&(0x7f000000a440)=""/64, 0x40}, {&(0x7f000000a480)=""/238, 0xee}, {&(0x7f000000a580)=""/88, 0x58}, {&(0x7f000000a600)=""/97, 0x61}, {&(0x7f000000a680)=""/114, 0x72}, {&(0x7f000000a700)=""/199, 0xc7}], 0x8}, 0x8}], 0x9, 0x0, &(0x7f000000aac0)={0x0, 0x3938700}) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f000000ab00)=0x9) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg$can_raw(r11, &(0x7f000000ac00)={0x0, 0x0, &(0x7f000000abc0)={&(0x7f000000ab40)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "06cd4df63100cc9c16e089d5da94e53cb069e2f8f60b592e560f3dd5111c456179415ae9d744637f748ca7ad283d987ac133952df2846de2c71cb7521028bd48"}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0xc0) (async) sendmsg$can_raw(r11, &(0x7f000000ac00)={0x0, 0x0, &(0x7f000000abc0)={&(0x7f000000ab40)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "06cd4df63100cc9c16e089d5da94e53cb069e2f8f60b592e560f3dd5111c456179415ae9d744637f748ca7ad283d987ac133952df2846de2c71cb7521028bd48"}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0xc0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r12, &(0x7f000000ac40)="459032531c0e1cac70f63414eda305c3663951b04a94bd5c7119", 0x1a, 0x8001, &(0x7f000000ad00)=@ll={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @random="faf643d83f85"}, 0x80) 10.729789039s ago: executing program 1 (id=14655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="fd7df6251a43"], 0xfdef) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 10.309482077s ago: executing program 1 (id=14661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0xfffffffc, 0x5a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x40}}) 10.068985027s ago: executing program 1 (id=14666): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f007ef013b6ca83da88b74b0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 10.066548245s ago: executing program 1 (id=14668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x3, 0x100, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @timestamp={0x44, 0xc, 0x84, 0x0, 0x8, [0x5, 0x2]}, @noop, @rr={0x7, 0x23, 0x5, [@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @loopback, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x7, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x2}, @rr={0x7, 0x7, 0x79, [@rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x3, 0x100, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @timestamp={0x44, 0xc, 0x84, 0x0, 0x8, [0x5, 0x2]}, @noop, @rr={0x7, 0x23, 0x5, [@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @loopback, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x7, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x2}, @rr={0x7, 0x7, 0x79, [@rand_addr=0x64010101]}]}}}}}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0xd, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000380)='n\x00', 0x80100, &(0x7f00000003c0)={@align=0x4, {0x8001, 0x7fff, 0x0, 0x1ff}}, 0x6, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x7}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0xfffff001, 0x18}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x7f, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1486, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff7, 0x4a, &(0x7f00000001c0)=""/74, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000780)=[{0x3, 0x2, 0x10, 0x1}, {0x0, 0x5, 0x2, 0x6}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x5, 0xa, 0xb}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0xd}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1486, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff7, 0x4a, &(0x7f00000001c0)=""/74, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000780)=[{0x3, 0x2, 0x10, 0x1}, {0x0, 0x5, 0x2, 0x6}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x5, 0xa, 0xb}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x19e}, [@map_fd={0x18, 0x4, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0x3, 0xa, 0xb, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0x9, 0x2, 0xc}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}]}, &(0x7f0000000980)='syzkaller\x00', 0xffff, 0x8f, &(0x7f00000009c0)=""/143, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x10, 0xfffffff8, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x19e}, [@map_fd={0x18, 0x4, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0x3, 0xa, 0xb, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0x9, 0x2, 0xc}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}]}, &(0x7f0000000980)='syzkaller\x00', 0xffff, 0x8f, &(0x7f00000009c0)=""/143, 0x41100, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x10, 0xfffffff8, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x11, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x75a, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x75, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000001cc0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001d00)={0x3, 0x2, 0x4a, 0xffffff00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r6, r8, r2, r4]}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x11, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x75a, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x75, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000001cc0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001d00)={0x3, 0x2, 0x4a, 0xffffff00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r6, r8, r2, r4]}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001f00)={0x0, 0x6, 0x6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000002300)={{r10}, 0x0, 0xe, @inherit={0x90, &(0x7f0000001e40)={0x1, 0x9, 0x9a, 0x8, {0x4, 0x7, 0x81, 0x6, 0x9}, [0x2, 0x5, 0x10001, 0xf, 0x3, 0x5, 0x268f, 0x81, 0xffffffff]}}, @devid=r11}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003640)={{r5, 0xffffffffffffffff}, &(0x7f00000035c0), &(0x7f0000003600)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003680)={&(0x7f0000003300)="a14b266704279e4512c055617207413dbe5216c58701f0719e0a57dbc0d4280ecf20f00eb4282c8dea607744475993df088e4cd3a55cf0d4ce", &(0x7f0000003340)=""/74, &(0x7f00000033c0)="602aa5ffa186352b94c122e54a9bced23ebd9fbbc391f966924c34ad0cfec879bb80d8f6adfe08c60d9be6b9b7fa21b182f910cf4a3ff93b9aaad49e465d917b462d9e413f3dec4139efbd3243cfc235659c76c7608f48d17be39543df21c28192e1ca44ef38547ff81e6e4b9994d9d7da04259aacf3d1d4946db8e11fa715ff38f4152ee5243d45d2e694bcc8538a351a93936dd846ab71b8552256e07d6317c6716cd1cbfc69c1413a130bacb43eca3bd18784f7e27e676c1120c59bbe04709d1ebc80", &(0x7f00000034c0)="4969a5d974a92e6595abb8246934871028426c761e63d88e97c08b9798e1f4e4ca56ca9546d6967255e054ef08c8ddea0973cef082b334b1e56e81d63a8b6bb6067ca77fc9f25f3baa7d600891b5fd65e4f0f68b090bd7d77036e79a10c921e327ee581c8a19ad764cf736855bca1f365704ddca324fe41c529ad2a8e0301a7697a243d682f69e7f1279cdff3b55c6c043673a1a04f7caffbdd8641058341dc64b3bfe52c10643704344c0e8e902c74baf77af7797a6add212c94806bc95a4f8156e37ef723a7dd00a32b8c1351f985cf1a8618b77b38f274cbaf295621ba478efc7059b7ea3bd7731018c0e4a547f", 0x5, r12, 0x4}, 0x38) getsockname$packet(r3, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003700)=0x14) (async) getsockname$packet(r3, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003700)=0x14) ioctl$XFS_IOC_AG_GEOMETRY(r10, 0xc080583d, &(0x7f0000003740)={0x3, 0x6, 0x5, 0x1e600, 0xfffffe00, 0x7, 0x5, 0xd76}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000037c0)=""/200, &(0x7f00000038c0)=0xc8) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000037c0)=""/200, &(0x7f00000038c0)=0xc8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003900)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003940)={r14}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003ac0)={0x1b, 0x0, 0x0, 0xffff, 0x0, r4, 0x2, '\x00', r1, r3, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003a80)={@map=r15, 0x14, 0x0, 0xbe6, &(0x7f0000003980)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a00)=[0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000003b80)={{[0x7, 0x6e2e, 0x80, 0x2]}, 0x0, 0x0, 0x6960, 0x0, &(0x7f0000003b40)=[{{@_ha_fsid={[0xff, 0xac5]}, {0x0, 0x7, 0xada6, 0x8000}}, 0x80, 0x0, '%pB \x00'}]}) (async) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000003b80)={{[0x7, 0x6e2e, 0x80, 0x2]}, 0x0, 0x0, 0x6960, 0x0, &(0x7f0000003b40)=[{{@_ha_fsid={[0xff, 0xac5]}, {0x0, 0x7, 0xada6, 0x8000}}, 0x80, 0x0, '%pB \x00'}]}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c00), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000003c40)={'syztnl2\x00', r13, 0x29, 0x7, 0x1, 0x2, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x80, 0x7f, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000003c40)={'syztnl2\x00', r13, 0x29, 0x7, 0x1, 0x2, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x80, 0x7f, 0x9}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003fc0)={r10, 0xe0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000003d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0], 0x0, 0x2c, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000003e00), &(0x7f0000003e40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000003e80)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003fc0)={r10, 0xe0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000003d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0], 0x0, 0x2c, &(0x7f0000003dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000003e00), &(0x7f0000003e40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000003e80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000041c0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004180)={&(0x7f0000004040)={0x134, r16, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 9.947937402s ago: executing program 1 (id=14670): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.164748817s ago: executing program 3 (id=14734): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000000006111680000000080180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) 2.06599438s ago: executing program 4 (id=14735): bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x1, 0x20003}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x20, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf, 0x0, 0x1}]}}, "11f3305280f125e6"}}, 0x2e) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_delroute={0x34, 0x19, 0x10, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x10, 0xb, 0xfe, 0x1, 0xfd, 0x8, 0x800}, [@RTA_UID={0x8, 0x19, r7}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_IIF={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000004) 1.989190294s ago: executing program 3 (id=14736): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000200)='\\\'\x80\xb3\x1fL\xc1\x8d\xb1UN#\f\x13q\x12X\x05\xed1/\x84\x85\xb3\xf2\xe0\x7fM:sM\x94\v\xff&|{\xdc\xb5>\x16,\x9f\x9clQ\xf1\x1f\xa7\x01\xaf\xe0\x87b\xcd\xa8\xaf\v\xe8\\\xe9\xa8e\xf5\x97\xd3\xcd\xe1\xbd\xc6\x03\x00\xa3\x00J\xc4\xbc\xd0=\x1a\xa1\xec\xcc\x00i\xea-L\xb4\xde^\x1d\xbeXo\"\xa3\x8c\xfa\xe4\x1c\xe4[\xf1\x9d\x17\xce', 0x5fb300, &(0x7f0000000040)={@align=0x5, {0xeb5, 0x6, 0x5e2, 0x8}}, 0x3, &(0x7f0000000080), &(0x7f0000000000)=0x100000a}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x100, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xba29}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff8cc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x851b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd25}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcbe}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x4000004) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000200)='\\\'\x80\xb3\x1fL\xc1\x8d\xb1UN#\f\x13q\x12X\x05\xed1/\x84\x85\xb3\xf2\xe0\x7fM:sM\x94\v\xff&|{\xdc\xb5>\x16,\x9f\x9clQ\xf1\x1f\xa7\x01\xaf\xe0\x87b\xcd\xa8\xaf\v\xe8\\\xe9\xa8e\xf5\x97\xd3\xcd\xe1\xbd\xc6\x03\x00\xa3\x00J\xc4\xbc\xd0=\x1a\xa1\xec\xcc\x00i\xea-L\xb4\xde^\x1d\xbeXo\"\xa3\x8c\xfa\xe4\x1c\xe4[\xf1\x9d\x17\xce', 0x5fb300, &(0x7f0000000040)={@align=0x5, {0xeb5, 0x6, 0x5e2, 0x8}}, 0x3, &(0x7f0000000080), &(0x7f0000000000)=0x100000a}) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x100, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xba29}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff8cc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x851b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd25}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcbe}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x4000004) (async) 1.788535496s ago: executing program 3 (id=14739): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 1.33722007s ago: executing program 0 (id=14741): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x64, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="0800b123e7ef003f", 0x8}], 0x1, &(0x7f0000000000)=ANY=[], 0x40}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r0}, 0x90) 1.314063093s ago: executing program 3 (id=14742): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r0}, 0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf4}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0x9, 0x200, 0x5}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.161545345s ago: executing program 2 (id=14743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x270, 0x1398, 0x1398, 0x270, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@dst={{0x48}, {0x401, 0x2, 0x1, [0x2, 0x5, 0x7, 0x4, 0x967, 0x0, 0x8, 0x7, 0x6, 0x60, 0x8, 0x2, 0x625, 0x2, 0x8742, 0x800], 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14a6070000000000f960b6f57dc737f68fe98e8a9c7dd625bfe516930829090d950974119325de9e89c9eea35c5e41efb536393c493931f51771013e96714451f4b06b5d3d562d03ddb8a94fa6d50100"/90, @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x824) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086602, &(0x7f0000000000)={0xfff}) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r6, 0x1, 0x3, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.151024414s ago: executing program 3 (id=14744): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) 1.004564742s ago: executing program 0 (id=14745): r0 = epoll_create1(0x0) r1 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x8002015}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000020000000000590000180100002020692500000000002020207b1a020000bfa10000000000004aa65d54ed31aa9907010000f8fff3ffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000950000000000000037c7e111a01b389def9dd210ca94c14d98a418565471561b6f98e4b0a7f616a09b770182b88bc85a31b81d1a9b99fceba5"], &(0x7f0000000100)='GPL\x00'}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xfd9c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5c1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000f608d8531a342b6e076c3b7505b89e775cd4e52fafc2e6e3e393929ee832dc3725d43cf6c5edae343a6335065b365dd045dd33a8b5bc44897a1e560f8854cabc1d", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000008c0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x80000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005600230d000000050000000007000000", @ANYRES32=0x0], 0x18}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvmsg$unix(r4, 0x0, 0x40010000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xe}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) 970.172837ms ago: executing program 2 (id=14746): r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r6}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000580)={r6, 0x7fff, 0x5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r3, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r9, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4077, 0xfed}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f00000004c0)=""/172, 0xac}], 0x8}, 0x32120) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7fffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000480)=[{}, {{&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="d47217d50606741814ebe81d7315f96a8aa56b7ba335c0f54abbbd4ef82f12fc9deb1db2b9578bff02cb26aa73212ccb9e3908b325cb83fc51dc9bb1710bf196cccbca1a6861a06a07f3213d19fe4ed64b21a2338790b0b4a437524c3896b5861b8cab5a2f819ca6f4a3392ce353", 0x6e}, {&(0x7f00000002c0)="0ac64d29d465ccb286737d1812db652121da417bf9ee758a15bc1e57bb55982209fe2de3e670c58905921c3d942823cfa649d8417d", 0x35}, {&(0x7f0000000300)="e192acf427ed7e756adfd1106afe03e30ad51afc6898e6ed9a3c08d233146a975dfa24eaaa4ccc2334199094a8971c0d8802ec2e09baef2f7a6f4fb879460d8a924874507a6f99c075d1256d", 0x4c}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x11c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7c, [@broadcast, @empty]}, @noop, @timestamp_addr={0x44, 0x2c, 0xc0, 0x1, 0x5, [{@multicast1, 0xfffffe01}, {@loopback, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@rand_addr=0x64010101}, {@multicast2, 0x75}]}, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0xd, [{@broadcast, 0x1}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@rand_addr=0x64010101, 0x2}, {@local, 0x31}, {@loopback, 0x7fff}]}, @rr={0x7, 0xb, 0x8e, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x2b, 0x21, [@loopback, @broadcast, @private=0xa010100, @remote, @private=0xa010101, @multicast2, @empty, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x8, [{@broadcast, 0x6e4e}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x8}]}, @timestamp_addr={0x44, 0x3c, 0x50, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff0}, {@private=0xa010102, 0x3}, {@loopback, 0x8e5}, {@loopback, 0x9}, {@remote, 0x1000}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}, @end, @rr={0x7, 0xf, 0x86, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}], 0x1f0}}], 0x2, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x43, "e1caf57fca31d1de15efef120b6dc204263e10539eae958bca76efe40d1a0f127f4e31d8e37c21da85d711a72a474f3ee2867916b6d7714645cb177c9f23455c3f06c9"}, &(0x7f0000000140)=0x4b) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000000180)={r14, 0x5}, 0x8) 881.88536ms ago: executing program 3 (id=14747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(r0, 0x400000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto(r4, &(0x7f0000000140)="8c71baa306b388e96b4e4029d1fa9e6b143657d285f73e0c593e0ad47b29a4a224cebec2d9560913210e174fb97d579fe9e62819ff9c74ba992c07d8f3709963b0bc5ef2dfebb18bb0a36117dc", 0x4d, 0x4011, 0x0, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delchain={0x58, 0x65, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {0xf, 0x10}, {0x5, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcc}, @TCA_U32_LINK={0x8, 0x3, 0xffffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0xd8ab}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 797.601992ms ago: executing program 0 (id=14748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000009d2e3b370af3cbb4c720f9797753e98d1c132f0e4fefe2d69d8c99df724e5fb751ddd3625ff1f11ba4598d23ed75b0316eaf9dfcb5cda02b13ae8885fa2ada98b880d528edc42acc78407796299f1149c1355fc9527fdb74b501b11a2ab87abcfe28a68c40a5dd6220c4108e779728a7402953b8987c5882913415809d0c77fb87ea6ed953835b939135b1f20d00b7b860c5adf70eae61e574d2a8c84cb23a3b49047d29e057945394", @ANYRES16=r1, @ANYBLOB="01000300000000000000070000001c00018008000300ac1414aa060005004e2400000600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8) 770.073128ms ago: executing program 4 (id=14749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x200) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xec}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c011}, 0x804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, 0x0, 0x4028000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x40000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r2, 0x401, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x20}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 685.566851ms ago: executing program 0 (id=14750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0), 0x4) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x279c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2770, 0x3, 0x0, 0x1, [{0x11c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x11b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "e9e06b2a8ec53a350d10afb106732694660f1bb132162fc5ddec9c8259ca27598ab10c90a9912b4ea1686f1e521b20fea4cdca77c65cce8e59359dc69aca047a6e279a42193274c89b2226819033ae45f245b72ad8bf513e482de7ab382d81ac9530d151ce5ae30376c1e85dc89e996657f621ed3464ff1df76bf7ea9599ed20e22be848da824b94a92e27815d1946fe803abe8e27b47521168dad92a874452ed1d821adf35fc2a885e795a97976892dda10e3a9e1ad4018ff5005af08"}, @NFTA_DATA_VALUE={0x66, 0x1, "e70a78fc3e727d367496c3e58729f04b5a29574f71e328fa8a0cb68fb447725736d4dd6c208ef0e5843d4a58b54440161fd0d5b82417b0c491f9d15e9a61989e2c63e5fab608f2d27b53c3cc07966d29b0ce82a281f9e56af79a875956f6f83cd724"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "74bff5fb87d94d2458c2f7988895e19b89a734fab94c9976ed39fe3b4237f676f52fb5832119f42f0c02ce851859def3101035353ec3e0bd12a4cd487305f3074c37c0285daa118f71c0a0836b5378a6f18efa1ed1341a53f3b27d2a33d71f8c6532b1e293f61d36e7cf431b62a28bc15098cb066f8ddc8c40aa6647978288cb14a75b49c1fe2ecd6ab0333e8a517579ddb4c51b956e035de0c16dde6f47b3b6038368ad35fc9afddc090ee29d354cebbd9bd4d252c16eaee2dc0cc8de9c4c6137a672a0559ce4644bbe0751e7e3154ba7d10872ad8ad54f0c6a60992ae1a3a0ffaf8ee0d186f72f11a07329d76a520f645553636c8aa86a2d612b94c70494a65f259366e33422bba91beb4931fd8f77248ef16ac322fc73a5e8f5a6dd7bdb99c562678539017a812126677fe8d767c7c7c48a998697dadc8dd4a068eb6f4f00e045743453362ed8a7a73dbb695531db4f27b90cbd07d83811cedae782eb8d363519437040e8c2c7e59b26c35905b0413a5991738b18deb2df6146cc483cb36e6b31450b1f6fdde13c4988dd9ca023eab31f205887337b6441017318c6b442c0d4060b148d7997fde8ec78fd92b6b90aedd761d5cec4ec7f821a536797e175630a8d708cf669713340dbae6b623f34ea8d9b8c6c565e8fb6df9f81d4587e513ffb7553abf3a6704046a7f2baf020d9df77240774518e1e9fa81b96fbb3bdeb6b3c2bc6683aea97b1d199cd390ef0258c9780cff8ec1429aa052045e57e117ad2bb5c066e2e637d5f60197e703962ca5811766d1190cc90c02a23a54720eaab138a00e172d880a6e9ec009c012fc757ae37789a4f217019b0f8ec5ecc234637a69b452340e60a2b31fa0867637d648616de6914fdbcd95eb001e3d769fb4f7ba570f0dcb38c7f48eab5aee65e25272fc47ea06784ce002cef860a92fbe38fa8702274487e0299c3ec25e284de6c3e5b334fce25dc49a7cc8ab06516abd4b2431f3d9ebaf4ccecfad44ec535b60a23a3c5fbd593df1ad2f6b2dda62346eeeb0a4992e9e44e6a842bf96613dd0b25cef72ef3c190e91af6045002b4866101a3d7dd63e0d23d71eb8cfba9b7fe333000a8a80711fd1829a9987a8edd62abd65b515d3309202595d17874680d712dc9935d21a4c4ceb3f904b28ac9c1b3a851dc02ca08a0573f9888fba1619e4d7cb172fa1068de634efd81ebd44a18946405c46db6d4cbde7e84432bc2cce3358fcab3bd5c348dafe763e27ed11af0af44df58fd4b7846ee4dfe365b80d66963bf4163174369fa89634b675cd5bf5616d1ce74270f09f3d5babafdd8d497c3c5fb51156bf797db800585dbd2d4bb00c906cafa75904d933e66c40c6fb125d6296fb185f37e79ce12450daa9ed93594927df2bd910ef741e1b34ff8b433fb6684c0e611d6bd68b2416c82e6e96dfada2ca3c0688fcb35ffd51d62b1f4ec3c7ab11918bbaec4b5c5b5a0025d6a0f15fd1e9615a563b336779df4829adcd9563d48c4ea0a45def8c076778324875813e9e2caab1ad35997f76fc2596945f931bb7ca3c82bbc7aee1015a9ceb628a4bdf79900399dde373b2e469e389433bc6d1851a3542b510537a3c3cb92aded31e212c9b4a1448578b93afbde4ae041dfea9860e8a6a9b10ec2e6577f198ff785a37cb084aaed76a1434b6d61e4f25048d65c57469825235f87a443f62bd3aed0c0f58fe84189bb063dba1c6610b10cccdd2263476a501153f96190fb4022bc7195fd4024bf2c2a646e56829fc4559554881bf3b7a5228110ae5ec6b0b37be83a3d8d6268508e81f832b030430645d30f507fb998e11b9cdf9a5bdb1fc52e3ca452532686cb5cdaeb626fb9828cfc31b8d54ab329b9b86b5e88ca57b8c6794cba7f7a8336b0f553d7c7dd0ee1fbaf1dee6bf0f50799a349c61a28e18ab95eb947aeb71d7d47a009205ac04e86945bb1d15bbb2aca00e245e54838477048d10fc19acfc327fea588840e58c9589c0a21553f543f9247fe662a3c88edf4e2fd6b0ba19d41b2c5a974baaf1a26ef0815305824f0f862f6a4fddf80a79a6ae2cfc69b606bc05d0a06dcf82a6622c73957967ab4f685599cffe6ef94eca17f498e8226bd8c67439f689c899ae7ae8f319ba393daf9bc8187d670945ff7b9cd06202b54aa9fedc12ccd318b04841880ae8b4f7ffe0388b47dbb8619d4b2b5b61ed8198e0f1a86839257abe972d9c2a02b35e0627b7bc2d70bbeda53ba75b5c62c2bd6664d67c8a6e64bc763a06a7da6b07bac4720043a694886b3bb8a094a91c7e51d18c89794b570286e7fc5f046433cae4af5c160d03639f664bee5106150e4fe6bc7cf7a51407063957c5de52cc90a25aa65fee394ae324484804584cf4c7c2463353f211febac1a58fd21ac4a475d27f79cc61d410add822362cac5c3f5a630b9ed50bef132ffd5db380ec746d2ff168b33b3b20f14885c0b149bee32b5752688798c7daa269e2277a02a8fcbeb608a6e6dbf1d750eed50775e70f167c81e2921470f8b7d666efe77b3e0cc599dbf576902b101e586e74f2db930477a44545c5c10758debca3d38c2c3d3f119c5682ba5f6b17361f1d3a3aaa44a03d402c3e8a6765fbba08204362249a93c147a1cc27f5e82411f6dc8685c75c1661a302298b6ead5836d8af8ca7fe56cba4c50d69bf56d97823076d00c0709dba10f0b7278539c48e7e69c9213e1c72d9e92ee4d15b7411182a30af9dbc21e46b59df34257df2adf811a44a3851c4b5e5466cbfc9a12ce263429b88ef5e17226033603a5176fa554e49b88aae6a27d23194b5751580214a97a88f21544ba237155378ea40ed7260377da0eb910e01a6c6447cebf967cc8cdcc10f225054cb4281884ade9cb950f0b00cf3ab7610a267897e16fdd4f82453808ed740a6bdef85b7a373c6c85f3ca6e715ef08cc3485820530fb49bead61107fbe788c9242856b074716254ea51628319b600596f2d448cf992069d667b81701b3d275874cb8141620a1a9b47172afd6f024b3bfaf460fadae7c8bc7118b4ed5d37ea467ee3539821716b28f02a04871e05c2cd7bf57ae29d423b4153dace180bbef25a6d669c3ce365bf19237c05a9d9298956c03f6388c35c4e6fef9e002f1aeb62ca5641a655a8e52db01ab2db66baea99e1fd75a7636c4772b1f00c3005251ad47e0fa5878e84692f56bc1fd18efabbf856aac118099e1f42b34f74d60997250c533d91269f3cb1c3f223ccbbe9edb7bc0d7e026e617260e2d5e0685c2d4c0aadbddbc4d5eb3b8c87a0963dd203293aec49e5a4ecbfa14d3652f8b9a77d7d85e74c98d7e446520884db2463638fb12285aa41c553e67b60d1edc358117ff828a451d0ce9e36f3c1b02fbead8b0ced82ab26d028ab4e9affc9720449c82be3f6ea9b68b424a8741e3b2518828e41d82875230842b745b2e7d996cde6db78e80fd96678203f7db79f0523e8ca398ab88dc2287db610d8515d81829982ff46c847f1f2b23600caa3f47ee725d974839ca5e42d493cad61a2f8bbc8a6874a5d9631baa5e90650497378b9eb048d5518ecc1ade860d6d3262072b7450efd31543205b4d419c907cea7926299937a545823dcc9926f89ef7a0507ae5e04f1f2f013a546b2eff12871977606f94586bc40c8d5b5945f59e7ef3793dde0a2abe64c8b1c503104091542f630f1452a1ebc1e578c3ff72db244488e21c81b57ec312f9fa4478bf6f5ed6b6b294a9c83d263124f33e0055cf7463518639effb104e593fa628d1604c8832585d76c4f65cfb73a8ad382ade3c0d477b728ba26fb2a89892961f1994b5ff32cb6153cc4e82f69f52fe9684994bdac390fbd3d6c9e693a55c7e0e637f3fef873e26cf8c899c3806f491482ece61230dbb16cb0f000d9c6d1ba87eb63119dd4cfd30d20acf3aa0f686358fe369a63e9ed8baeb90dc5d3a661d7de1c1a4ffc13b68be08cdac214a60a7dbc5b74137c52ca2af501513893aa6e4486a71fd316df975f32b8c811e057acdaac864327965495b80a28f606758ce25b9d54c439e7e76b5967e99aff7439e1088472faf21c12b36138e341ba0028544464df7d89535180fa5113ebe713d61ee75cb1c68d645660cb4eff2b04dfffb01dfdf0bbc932e382c29f04353d83070fcde6ab73baf1882573bc2964080c4c35c072201b85c707277f3b03de8a5fb93babaf0b325f9e456f8c8702ff1dfaaf621dd33a391732f4a0fac0edfc192a7628d87207b65f9e4d9273acdefd1262ef636534afeba00bbaa4faed91c9738e1b9ff92faaf3a5c8e287b6aca4ee93cf23f8783cbf7756dae1a18d90d2a1d7ff5e5eee9a0799d15fd565130d62265dc15a6f526fae0daa1447f5bea9dd262aac17461328b4f15c8178818f1bfb5e505b3dedde9552704a77dfc70d72f52d845b8e79a40885b49b0c0e08de10acf89730c86ce6bc588bc4f9ebb945c3d277bb0e594b310df64f0778cd5687a9b018dcd904e9c42d0ea0b7b6d6eed6d14744b1c120c886d2915014b1211a159f7fa6e023d0932b1d17af7cd0337f5565015483c42ba3c200694dcdca10954847565bcabb8f59dff33a01284c09b198d72385d2800cfe95fdd897305e680c0499c09f00ffbd708a65890c7fe3c4d26adffb44ccca9d7a37e7e193ac758272cdb4148df3fc184400ebc9f55399f4989cf3718d1dfcc452e1e18653340213f15fcafd710b1155253fd5d1fa98c9d2b8d10bd6fce9de30a483d55b9520dbf0f8626f99dd00f07ed1cdff8bc58e31504b8fb0c7ef095fc4a046dccbecd434646b76c680bb002abc6558c022d4b1afc39ae86beb6f0c3e3b462842316c0816c415ae47150a0b657d9dd2d82dc965e60f2d894071c1f83486df964b7136370b4b8ef9ffc84eba3ea37b65da96cb38fc1d7a81ff397f1b1a04d8179e180acc8e8395b839a6bb55ab196f07a27df2a01f4a0be75c333d6fa0da76b591b9c8667facd5ff98022865d23129fb85b9a2c914e02bab08cffd23080f8b5635d844fd0708378e9444035118005dec5803675bb39c02aed1939eecad38c4f40b1d2894980881209ef28e87cd5fe2251c1a9d8628a30eb14cc6179b81392d98468b3199e55c4564b008e85ed94295d833c0fca0db80eae6f4380d6c1b90770178f2318e71b807f8339e5abe2c573ddd055321c7b5d5f1fc486857bb5e89ab005f5af3338714d6a74b91483067ad8db6d750dc804f0c83be8c6d3fb622ac91c586c9894bdd679f49859ec11d36226474e8bbbcad17d35801ef2c4caa49b74883ea8f32d84605fb8a2ef7d1afe486eb957029dc03b747c9598ab062caaef74a7cfef1856b6e76d2b498741017738a9fa4c431707f3c6e83a647dcb4ea859ab7fb8dd6ce53ea2ef6ca2baeaf21f49b3aa96ee5551431865e9d90e8c8c87dbcc25d56a5d0316c49e54a052c5d5a7b0717b72e0d46759e4aa1584424c50f93cbf4dffeb34bfcef34a7a872ecc71658f2c49321520a145eb8c62560f4d5b3fb537a7dbac66d71234e4d9ffa822c0984609063cb6d46ca820a54fa69c0bc57827e381e63598824daa634bcf9ba73691184c880d25af3bd063fe5e27d477a27610b3062126c71b770486ef258696e3034f47a90504c58ba9b28f74f1174a821e2d768413fd58ff112824a1f81ab2d7767af0f09a6bf41e19be0ed67769d0310eb2baf2dc6dc31f3c8cdf6106e94bcc8474bca22aac8566b7b9c001326596d449d5220ea16fa687ccbcb67826e9597f28d01009192590eca7065b0f504aacaca25ccb3d8c178b1e498c7"}]}]}, {0x15ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x158c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf3}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x14a8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1498, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x124, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "8381dac972a2202aee6b32d4781fb56e94619c45c6047e9387d9668b0113af6e639af2c8f5728739f8bfce6abd78e1867ea25c80ff4b8b827eae4ade75d81051ec331334d31ae585b1e877a46601c608a6d2a7805024cc57afbb40e0aad685eb21c43154cf6cf0deedd65aae51116223029e7c692b6121c948a616eb6b2c69c25660b4b5664e2cc9b68d5a0f88d39781dae176b034a51a90160e560f32f7b8555067f5678ed3e50c5e2791036a608cb7dec17a82997c33d743322dc2aa76b6967751538e6af471014b8ff3eae1590084aac769a029745c6e16b206db55ab44a30884fed0e66f91cb6d4a26ade867d23e6217"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_TO_DATA={0x11e0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "f2ef5acdc86e3de4ececde7fd3ef68609d44edae5dca6af6fa5909597bce4306dd35c4ba029a434e02dc33a78fb9df2caa62a5cc35bdd3667bf0e645d9003e28ff3392443622728f5d046e5e36364f138baccb2f516661532223d2f761a8bead7b435e417b9b288926ae01e41132894aae5e3166cd3ec9eab728f1b7d01e384e3090a5124ad813772480a60faf6fdb91dfbe42d0069b35ef44e78e27dd9e02727b1e8d8b1472aeb7dba04947981c25dd4484e4dbebc71f083b7d1a4c9131613fa4b22936e9d83adc68cfadcefbe8b5f6c14db18f5797a42cc25431b1a440ee90b562a81e61feb9898234337a1af806761aa9ce"}, @NFTA_DATA_VALUE={0x8b, 0x1, "a2f1e5b62cd9a085bd2f7146ab703f6c26c74f265a52ff02003c9128f7d1684ac2779f2bc9e2ece2770e60507ef559622d2e8279313dd768797b8abe802dcb27696834ba3e2843c69d2a9b3ebcf6cc26495aa4beba86bdcb5cb49190c2a5f03da8e3e43647873b479ee19f4a37ec133b9ac738f928b0648023c3ae6648f3d844678eabbb961eaa"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_TO_DATA={0x170, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "c7b4147aae01f0f96a77c87aaaa807cd9832961579933e6e573f101ceeeaed2a00dd508eec06afc06f716456196d41e39b47ae21d28e995904eee0fe0dc52b1fa10f8d457954f2b1576fd4e771577295f66d4979b75cffb651d16dae593f6071ea992dcf2362a907d5515ece2bd20b16fb7bf1b1462529931be1b7388a305bc5ae5ca8112e72791e4feff43ef8dab17c5f2f6d4e464c641cd0aacf87ec3a9c379c2ff7d43627fbc8584d858b9b0eeb721a5d971782104bd04fe51daeeec0d56ff68f648fa8d705f104d34ea74ff23edc17137a98dba5d4e1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}, {0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2830}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 604.966011ms ago: executing program 4 (id=14751): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x8917, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1}, 0x40fd) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) (async) ioctl$SIOCAX25GETINFO(r2, 0x8917, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1}, 0x40fd) (async) 505.087144ms ago: executing program 2 (id=14752): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close(0x4) 491.217284ms ago: executing program 0 (id=14753): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r3, 0x1, 0x1a, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x1ff, @vifc_lcl_ifindex=r7, @loopback}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 474.443005ms ago: executing program 4 (id=14754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000001200000000005f"], 0x0, 0x4f}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) sendfile(r1, r3, 0x0, 0x8) poll(&(0x7f00000000c0)=[{r2, 0x21b0}], 0x1, 0x3) 340.73049ms ago: executing program 2 (id=14755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x280, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x220, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x20c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x83, 0xb, "35d2c32fbfc4d315eee1c69830712ccec7b4643d028c5d3f4cf9cbe35c1fe2589a9867720d2e31d8765b1a28da5fe355181b8c0d6a3efa7e3f60bfde290d4d8c2f83df840e35fbddde1b2b1aeb8bd6c8611facb96f6c010b682f25c219bda745acb0b75553a95c8519e6651904d221ae229bde673f0d40940289c923ab3937"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x0, 0x5}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xb7, 0x8, {0x5, 0x8, "f379482f97f06b02368a031e4106687e44d6d52b1103ee715fe0733cb2656050065e93f7ffec889a4d87d7d5dbe1a33266e22c03c8f92032b3db66b79e985a7e71069fdf61a72633122ac1d6dd10feac7f93b8aa880d8dd5b34e386dbfadea460dc37e64b6867799434506e53a718ccbc955287aba82461a8bdcddd64f9ccd7c911b899c8695d6046de19e69f9e201b566ee514d796a666d8102f9a13d21e522cce1dcd39ce720f971af96"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfffffffd, 0x5, 0x80000001}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x9a, 0x8, {0x9, 0xf09c, "938073d4b1cb0afc2dabb2ef67c26ae33a65fc728e42c9ca96606e91c8bd575a16a0bb9b80ea644ca9df519d09de85ec34d216c2883c9bb4dbdc2128aebb3f04abac7654f99752351423661349b821bd0617925b677fc999e9e4f695529f0af23d6e185bf603ee6eb5e438dd78ad41dc48bd8f33d4b556c338a11c952dd61aac687a2a5937c1bcf9f0d3bd15daea"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x5059}, 0x8000000) 222.919237ms ago: executing program 4 (id=14756): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 211.622522ms ago: executing program 0 (id=14757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xff, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="5bfa4c1800000000000000000000000000000071121d0000ff0000000000000000000057f08ed2fe4e269508fe0556"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r11, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x3c}}, 0xc004) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r12) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x7, 0x9a3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x7800, 0xcf, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x4d, 0x8001, 0x0, @loopback, @mcast1, 0x700, 0x1, 0x7fff, 0x3}}) 153.563293ms ago: executing program 2 (id=14758): syz_emit_ethernet(0x1cd, &(0x7f00000000c0)={@link_local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x11, 0x1bb, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x1f, 0x87, [@private=0xa010100, @rand_addr=0x64010100, @broadcast, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6d, 0x3, [], "091e0a42d8f3929b3ca42e64ad36243d7c12f2f32f5200da5cd2142f8023a68e598ede9c9ad59d4ba767bab117754391c91245a7b82495bf6c82476cf9af52ffce9c2307460de1b8d7f8ad5c692ece59684aeeacbffd4ed45ab888c05216df77dde0f1b1f386b0fd4a958b78af"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "d02eeec64e260ebc889775"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xe534, 0x0], "0eb08ea837e80706a07b0fbd1ed7ead8b1027a60838048d20752fdba54c9ebc3dbe47581e6cad345f8ef1588dd1e231db1d27358dd7c6d2899c2b10711255bdd8993022218894a8141c53cdcf56c2315ad5f013b3298d20b1fc6d417b5b884ff66aac0"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0xf9, 0x0, 0x1, 0x0, 0x1, 0x7}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x0, 0x0, 0x1, 0x1, 0x5, 0x1}, 0x2, {0x101, 0x90, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "69d8c1298d2ebacae6310ebaa1634802b46b566c8ce19679a8f9b0e09b687664fa67523231b2f4461cce6c970cfe4fd9a53c1a1bb73d434eb11237e2c9324953df407c699534f3b161fc1142d50f5d80b3efc93e47eaf224d236a7ace1889ecc040f5eeb"}}}}}}, 0x0) 40.58986ms ago: executing program 2 (id=14759): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="827bff180d70dd34000000000000000000000000000000000000ffff00000000ac1414bb0c0000080000000a00"/64, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000006c00000000000000ac1414aa00000000000000000000000000000000050300"/244], 0x13c}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0xb}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x44000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5218) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080), 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 0s ago: executing program 4 (id=14760): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000000f03000000000000e5000200000000002604fdffff0200007b010000000000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01004000000000f4ff000100040000002c000480050003008005000300016900000500030080ffffff0500030004e300000800020003001800"/66], 0x50}}, 0x0) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.2.12799'. [ 1238.296780][T21153] netlink: 'syz.1.12806': attribute type 1 has an invalid length. [ 1238.307705][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12804'. [ 1238.338208][T21157] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12804'. [ 1238.349991][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12805'. [ 1238.369156][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12804'. [ 1238.454215][T21153] netlink: 'syz.1.12806': attribute type 2 has an invalid length. [ 1238.462393][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12806'. [ 1238.464053][T21172] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12808'. [ 1238.534693][T21172] vlan2: entered allmulticast mode [ 1238.544629][T21172] erspan0: entered allmulticast mode [ 1238.690718][T21177] policy can only be matched on NF_INET_PRE_ROUTING [ 1238.690740][T21177] unable to load match [ 1238.742561][T21181] netlink: 'syz.0.12812': attribute type 1 has an invalid length. [ 1238.750957][T21181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12812'. [ 1238.766567][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1239.104355][T21206] netlink: 'syz.2.12818': attribute type 4 has an invalid length. [ 1239.126071][T21222] netlink: 'syz.4.12823': attribute type 1 has an invalid length. [ 1239.134132][T21222] netlink: 'syz.4.12823': attribute type 1 has an invalid length. [ 1239.284565][T21232] netlink: 'syz.4.12824': attribute type 1 has an invalid length. [ 1239.346170][T21232] netlink: 'syz.4.12824': attribute type 1 has an invalid length. [ 1239.381513][T25695] net_ratelimit: 14 callbacks suppressed [ 1239.381532][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1239.511187][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1239.631674][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1239.708723][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12828'. [ 1239.744432][T21246] netlink: 'syz.1.12828': attribute type 21 has an invalid length. [ 1239.753189][T27033] bond1: (slave bridge1): failed to get link speed/duplex [ 1239.768981][T21246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12828'. [ 1239.800626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.808997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.817372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.825721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.861027][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1239.966272][T21256] netlink: 'syz.1.12834': attribute type 3 has an invalid length. [ 1239.978289][T21261] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1240.118511][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1240.300550][ T5866] IPVS: starting estimator thread 0... [ 1240.306408][T21298] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1240.314939][T21295] dummy0: entered promiscuous mode [ 1240.324067][T21300] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1240.334791][T21295] bridge0: port 3(dummy0) entered blocking state [ 1240.344377][T21295] bridge0: port 3(dummy0) entered disabled state [ 1240.364078][T21295] dummy0: entered allmulticast mode [ 1240.433010][T21299] IPVS: using max 33 ests per chain, 79200 per kthread [ 1240.870318][T21338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1242.321980][T21368] veth0_to_bond: entered promiscuous mode [ 1242.413076][T21373] Bluetooth: MGMT ver 1.23 [ 1242.555027][T21389] IPVS: ip_vs_add_dest(): server weight less than zero [ 1242.562237][ T24] IPVS: starting estimator thread 0... [ 1242.566493][T21392] IPVS: ip_vs_add_dest(): server weight less than zero [ 1242.671107][T21390] IPVS: using max 29 ests per chain, 69600 per kthread [ 1242.736283][T21396] pim6reg1: entered promiscuous mode [ 1242.742654][T21396] pim6reg1: entered allmulticast mode [ 1243.305694][T21439] validate_nla: 6 callbacks suppressed [ 1243.305748][T21439] netlink: 'syz.4.12884': attribute type 16 has an invalid length. [ 1243.320993][T21439] netlink: 'syz.4.12884': attribute type 17 has an invalid length. [ 1243.508369][T21446] __nla_validate_parse: 18 callbacks suppressed [ 1243.508389][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12889'. [ 1243.752339][T21466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12898'. [ 1243.875634][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12901'. [ 1243.890686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 1243.890716][ C1] lec:lec_tx_timeout: lec0 [ 1243.903863][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1243.914090][T21476] SET target dimension over the limit! [ 1243.919992][T21476] SET target dimension over the limit! [ 1243.959248][T21473] vlan2: entered allmulticast mode [ 1243.974599][T21473] hsr0: entered allmulticast mode [ 1243.989894][T21473] hsr_slave_0: entered allmulticast mode [ 1244.009705][T21473] hsr_slave_1: entered allmulticast mode [ 1244.043145][T21478] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12902'. [ 1244.343068][T21497] tls_set_device_offload: netdev not found [ 1244.378398][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12909'. [ 1244.490552][T25697] net_ratelimit: 28 callbacks suppressed [ 1244.490570][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1244.557719][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12914'. [ 1244.573770][T21511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1244.593633][T21505] bridge0: port 4(gretap0) entered blocking state [ 1244.603518][T21509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12910'. [ 1244.613005][T21505] bridge0: port 4(gretap0) entered disabled state [ 1244.619848][T21505] gretap0: entered allmulticast mode [ 1244.629741][T21505] gretap0: entered promiscuous mode [ 1244.636965][T21505] bridge0: port 4(gretap0) entered blocking state [ 1244.643554][T21505] bridge0: port 4(gretap0) entered forwarding state [ 1244.670578][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1244.743826][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12916'. [ 1244.783989][T21521] syzkaller0: entered promiscuous mode [ 1244.797663][T21521] syzkaller0: entered allmulticast mode [ 1245.183967][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12923'. [ 1245.193800][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12923'. [ 1245.321916][T27033] bond1: (slave bridge1): failed to get link speed/duplex [ 1245.393012][T21551] bridge0: port 1(ipvlan2) entered blocking state [ 1245.411667][T21551] bridge0: port 1(ipvlan2) entered disabled state [ 1245.418399][T21551] ipvlan2: entered allmulticast mode [ 1245.447988][T20524] block nbd0: Receive control failed (result -107) [ 1245.453277][T21551] bridge0: entered allmulticast mode [ 1245.464277][T21563] netlink: 'syz.0.12931': attribute type 8 has an invalid length. [ 1245.472932][T21559] block nbd0: reconnected socket [ 1245.476783][T21551] ipvlan2: left allmulticast mode [ 1245.483860][T21551] bridge0: left allmulticast mode [ 1245.612254][T27033] bond1: (slave bridge1): failed to get link speed/duplex [ 1245.810772][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1245.950975][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1245.977183][T21589] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1245.993296][T21589] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1246.048936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.057363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.087288][T21589] macvtap2: entered promiscuous mode [ 1246.093982][T21589] macvtap2: entered allmulticast mode [ 1246.100137][T21589] veth1_vlan: entered allmulticast mode [ 1246.158247][T21597] IPVS: set_ctl: invalid protocol: 50 172.20.20.66:20001 [ 1246.184239][T21592] macvtap3: entered promiscuous mode [ 1246.189739][T21592] macvtap3: entered allmulticast mode [ 1246.226024][T21600] netlink: 'syz.1.12941': attribute type 7 has an invalid length. [ 1246.235422][T21600] netlink: 'syz.1.12941': attribute type 8 has an invalid length. [ 1246.238360][T21595] syzkaller0: entered promiscuous mode [ 1246.249295][T21595] syzkaller0: entered allmulticast mode [ 1246.581171][T21626] dvmrp0: entered allmulticast mode [ 1246.709449][T21639] lo speed is unknown, defaulting to 1000 [ 1247.050308][T21659] bond8: entered promiscuous mode [ 1247.057355][T21659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1247.135866][T21659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1247.146196][T21659] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 1247.165723][T21659] bond8: (slave sit1): Error -95 calling set_mac_address [ 1247.258822][T21673] syzkaller0: entered promiscuous mode [ 1247.265378][T21673] syzkaller0: entered allmulticast mode [ 1247.485894][T20524] Bluetooth: hci0: command tx timeout [ 1247.634284][T21687] IPv6: NLM_F_CREATE should be specified when creating new route [ 1247.756732][T21687] netlink: 'syz.4.12965': attribute type 1 has an invalid length. [ 1248.519846][T21712] Cannot find set identified by id 0 to match [ 1248.914454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1248.922510][ C1] lec:lec_tx_timeout: lec0 [ 1249.314828][T21690] __nla_validate_parse: 11 callbacks suppressed [ 1249.314847][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12965'. [ 1249.624305][T21728] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12977'. [ 1249.633623][T17018] net_ratelimit: 18 callbacks suppressed [ 1249.633642][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1249.653840][T21727] syzkaller0: entered promiscuous mode [ 1249.663974][T21727] syzkaller0: entered allmulticast mode [ 1249.741452][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1249.750930][T21733] syzkaller0: entered promiscuous mode [ 1249.762563][T21733] syzkaller0: entered allmulticast mode [ 1249.774205][T21733] 0: reclassify loop, rule prio 0, protocol 800 [ 1249.841259][T21740] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12983'. [ 1249.871036][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1249.905284][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12984'. [ 1249.964095][T21746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12986'. [ 1249.991740][T21746] netlink: 'syz.3.12986': attribute type 2 has an invalid length. [ 1250.010143][T21746] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12986'. [ 1250.011802][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.029833][T21747] netlink: 'syz.3.12986': attribute type 2 has an invalid length. [ 1250.038769][T21747] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12986'. [ 1250.132732][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.231752][T21761] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12989'. [ 1250.251362][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.329016][T21767] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.12991'. [ 1250.340298][T21767] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.12991'. [ 1250.372623][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.448376][T21775] syzkaller0: entered promiscuous mode [ 1250.458284][T21775] syzkaller0: entered allmulticast mode [ 1250.500081][T21779] netlink: 'syz.3.12997': attribute type 1 has an invalid length. [ 1250.511063][T21780] netlink: 'syz.3.12997': attribute type 1 has an invalid length. [ 1250.524030][T25697] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.823722][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1250.985258][T21815] siw: device registration error -23 [ 1251.031819][T21813] syzkaller0: entered promiscuous mode [ 1251.037372][T21813] syzkaller0: entered allmulticast mode [ 1251.291392][T21834] ip6t_srh: unknown srh invflags 4000 [ 1251.295972][T21845] netlink: 'syz.2.13015': attribute type 19 has an invalid length. [ 1251.381933][T21848] netlink: 'syz.1.13016': attribute type 1 has an invalid length. [ 1251.409754][T21850] bond0: entered promiscuous mode [ 1251.442522][T21850] bond0: left promiscuous mode [ 1251.478416][T21856] veth0_to_team: entered promiscuous mode [ 1251.499851][T21856] veth0_to_team: left promiscuous mode [ 1251.751632][T21881] xt_ipcomp: unknown flags 1D [ 1251.763784][T21881] xt_ipcomp: unknown flags 1D [ 1251.786776][T21881] xt_ipcomp: unknown flags 1D [ 1252.324045][T21914] lo: entered promiscuous mode [ 1252.354736][T21910] lo: left promiscuous mode [ 1252.359790][T21916] netlink: 'syz.1.13041': attribute type 29 has an invalid length. [ 1252.778186][T21928] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1253.338332][T21936] netlink: 'syz.0.13047': attribute type 15 has an invalid length. [ 1254.225764][ T7808] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.245791][ T7808] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.278615][ T7808] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.312141][ T7808] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.467399][T21981] netlink: 'syz.4.13060': attribute type 2 has an invalid length. [ 1254.497895][T21986] __nla_validate_parse: 45 callbacks suppressed [ 1254.497913][T21986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13059'. [ 1254.687695][T19818] net_ratelimit: 32 callbacks suppressed [ 1254.687715][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1254.746190][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13064'. [ 1254.814188][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13065'. [ 1254.840815][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1254.962666][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1255.073620][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1255.208019][T22023] pim6reg527: entered allmulticast mode [ 1255.220864][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1255.341551][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1255.401280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.409675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.418033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.426355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.468409][T22035] netlink: 'syz.4.13076': attribute type 30 has an invalid length. [ 1255.480828][T22036] netlink: 'syz.4.13076': attribute type 30 has an invalid length. [ 1255.583699][T22035] bond10: option arp_missed_max: invalid value (0) [ 1255.590786][T22035] bond10: option arp_missed_max: allowed values 1 - 255 [ 1255.608233][T22035] bond10 (unregistering): Released all slaves [ 1255.664459][T22036] bond10: option arp_missed_max: invalid value (0) [ 1255.671342][T22036] bond10: option arp_missed_max: allowed values 1 - 255 [ 1255.682414][T22036] bond10 (unregistering): Released all slaves [ 1255.868616][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13081'. [ 1255.968447][T22068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13084'. [ 1256.157501][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13087'. [ 1256.305959][T22090] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1256.319995][T22092] netlink: 'syz.0.13089': attribute type 64 has an invalid length. [ 1256.522057][T22103] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1256.618192][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13097'. [ 1256.653262][T22110] netlink: 'syz.1.13097': attribute type 3 has an invalid length. [ 1256.671830][T22110] netlink: 666 bytes leftover after parsing attributes in process `syz.1.13097'. [ 1256.718593][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13097'. [ 1256.739948][T22124] tipc: Enabling of bearer rejected, failed to enable media [ 1256.828654][T22131] netlink: 'syz.4.13102': attribute type 3 has an invalid length. [ 1256.937122][T22140] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.13104'. [ 1257.009534][T22142] nbd4: detected capacity change from 0 to 26 [ 1257.048197][T22144] block nbd4: Dead connection, failed to find a fallback [ 1257.062286][T22144] block nbd4: shutting down sockets [ 1257.068274][T22144] blk_print_req_error: 138 callbacks suppressed [ 1257.068291][T22144] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.086780][T22144] buffer_io_error: 138 callbacks suppressed [ 1257.086796][T22144] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1257.102916][T22144] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.115175][T22144] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1257.123535][T22144] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.133278][T22144] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1257.144424][T22144] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.178963][T22154] netlink: 'syz.4.13108': attribute type 1 has an invalid length. [ 1257.231597][T22154] bond10: (slave bridge5): making interface the new active one [ 1257.241854][T22154] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 1257.249477][T22144] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1257.259653][T22144] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.272127][T22144] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1257.279948][T22144] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.290235][T22144] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1257.298510][T22144] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.309242][T22144] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1257.317674][T22144] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.328300][T22160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1257.328793][T22144] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1257.335830][T22144] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.335858][T22144] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1257.335897][T22144] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1257.363434][T22157] netlink: 'syz.3.13109': attribute type 4 has an invalid length. [ 1257.371691][T22144] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1257.388311][T22144] ldm_validate_partition_table(): Disk read failed. [ 1257.396011][T22144] Dev nbd4: unable to read RDB block 0 [ 1257.402515][T22144] nbd4: unable to read partition table [ 1257.408337][T22144] nbd4: partition table beyond EOD, truncated [ 1257.427161][T22144] ldm_validate_partition_table(): Disk read failed. [ 1257.437177][T22144] Dev nbd4: unable to read RDB block 0 [ 1257.443645][T22144] nbd4: unable to read partition table [ 1257.449456][T22144] nbd4: partition table beyond EOD, truncated [ 1257.744517][T22184] tipc: Started in network mode [ 1257.749552][T22184] tipc: Node identity , cluster identity 4711 [ 1257.757117][T22184] tipc: Failed to obtain node identity [ 1257.791550][T22184] tipc: Enabling of bearer rejected, failed to enable media [ 1257.840039][T22186] syzkaller1: entered promiscuous mode [ 1257.853495][T22186] syzkaller1: entered allmulticast mode [ 1257.970857][T22203] IPVS: set_ctl: invalid protocol: 92 172.30.0.4:20000 [ 1258.477567][T22229] lo speed is unknown, defaulting to 1000 [ 1258.645269][T22245] tipc: Failed to remove unknown binding: 66,0,0/0:4024331897/4024331898 [ 1258.668149][T22238] hsr_slave_0: left promiscuous mode [ 1258.679882][T22245] tipc: Failed to remove unknown binding: 66,0,0/0:4024331897/4024331898 [ 1258.690211][T22238] hsr_slave_1: left promiscuous mode [ 1259.096782][T22276] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 1259.535169][T22295] bond0: (slave gre0): Error: Device type is different from other slaves [ 1259.574070][T22304] __nla_validate_parse: 10 callbacks suppressed [ 1259.574090][T22304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13151'. [ 1259.621884][T22296] bond0: (slave gre0): Error: Device type is different from other slaves [ 1259.700495][T17018] net_ratelimit: 35 callbacks suppressed [ 1259.700514][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1259.781682][T22315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13153'. [ 1259.837070][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1259.903603][T22315] bridge0: entered allmulticast mode [ 1259.958283][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.059141][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13159'. [ 1260.071185][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.181296][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.214790][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13163'. [ 1260.291406][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.402384][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.532497][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.561636][T22362] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13172'. [ 1260.575943][T22367] netlink: 'syz.3.13171': attribute type 1 has an invalid length. [ 1260.623234][T22367] netlink: 'syz.3.13171': attribute type 2 has an invalid length. [ 1260.662807][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.772685][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13177'. [ 1260.774240][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1260.862480][T22380] team1: entered promiscuous mode [ 1260.867574][T22380] team1: entered allmulticast mode [ 1261.007003][T22394] netlink: 116 bytes leftover after parsing attributes in process `syz.2.13181'. [ 1261.065354][T22399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13182'. [ 1261.247199][T22409] netlink: 252 bytes leftover after parsing attributes in process `syz.4.13185'. [ 1261.321307][T22356] Bluetooth: hci3: command 0x0406 tx timeout [ 1261.721232][T22430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13193'. [ 1261.972954][T22449] netlink: 'syz.4.13200': attribute type 1 has an invalid length. [ 1262.163102][T16292] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.286652][T16292] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1262.442233][T20524] Bluetooth: hci0: command 0x0c1a tx timeout [ 1262.454234][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1262.722885][T22492] bridge1: port 1(veth3) entered blocking state [ 1262.729650][T22492] bridge1: port 1(veth3) entered disabled state [ 1262.736792][T22492] veth3: entered allmulticast mode [ 1262.745075][T22492] veth3: entered promiscuous mode [ 1264.760890][ C0] net_ratelimit: 39 callbacks suppressed [ 1264.760913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.770871][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1264.774962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.790056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.798319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.900579][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1265.011590][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1265.090819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.109175][T22460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1265.121274][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1265.230774][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1265.296835][T22508] __nla_validate_parse: 5 callbacks suppressed [ 1265.296856][T22508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13220'. [ 1265.317669][T22511] macvtap1: entered promiscuous mode [ 1265.323457][T22511] syz_tun: entered promiscuous mode [ 1265.332548][T22511] syz_tun: left promiscuous mode [ 1265.383243][T22516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13222'. [ 1265.427414][T22516] netlink: 'syz.4.13222': attribute type 1 has an invalid length. [ 1265.437848][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13220'. [ 1265.533077][T22516] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1265.555511][T22532] netlink: 'syz.3.13226': attribute type 10 has an invalid length. [ 1265.575358][T22532] team0: Device ipvlan1 failed to register rx_handler [ 1265.598738][T22516] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13222'. [ 1265.739821][T22542] netlink: 'syz.4.13230': attribute type 3 has an invalid length. [ 1265.858943][T22552] xt_CONNSECMARK: invalid mode: 0 [ 1265.892678][T22557] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.13233'. [ 1265.956674][T22565] No such timeout policy "syz0" [ 1266.007621][T22569] netlink: 'syz.0.13238': attribute type 2 has an invalid length. [ 1266.017676][T22569] netlink: 'syz.0.13238': attribute type 2 has an invalid length. [ 1266.443018][T20524] Bluetooth: hci1: command 0x0405 tx timeout [ 1266.565285][T22613] geneve2: entered promiscuous mode [ 1266.574539][T25696] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 34382 - 0 [ 1266.587946][T25696] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 34382 - 0 [ 1266.593437][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1266.602142][T25696] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 34382 - 0 [ 1266.607464][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1266.621747][T22613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13254'. [ 1266.635357][T22610] netlink: 'syz.2.13253': attribute type 15 has an invalid length. [ 1266.657387][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1266.669651][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13253'. [ 1266.685857][T22610] netlink: 'syz.2.13253': attribute type 15 has an invalid length. [ 1266.808483][T22630] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 1266.816112][ T10] IPVS: starting estimator thread 0... [ 1266.835309][T22622] lo speed is unknown, defaulting to 1000 [ 1266.962693][T22631] IPVS: using max 28 ests per chain, 67200 per kthread [ 1267.272625][T22643] netlink: 'syz.0.13262': attribute type 2 has an invalid length. [ 1267.290279][T22643] netlink: 'syz.0.13262': attribute type 11 has an invalid length. [ 1267.346750][T22652] netlink: 'syz.0.13262': attribute type 1 has an invalid length. [ 1267.403644][T22654] netlink: 'syz.3.13265': attribute type 1 has an invalid length. [ 1267.509081][T22660] Bluetooth: MGMT ver 1.23 [ 1267.896937][T22690] netlink: 'syz.3.13278': attribute type 4 has an invalid length. [ 1268.089061][T22698] lo speed is unknown, defaulting to 1000 [ 1268.342989][T22698] bond0 (unregistering): Released all slaves [ 1270.342866][T22753] __nla_validate_parse: 12 callbacks suppressed [ 1270.342885][T22753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13298'. [ 1270.380627][ T84] net_ratelimit: 26 callbacks suppressed [ 1270.380645][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1270.492876][T22765] IPVS: set_ctl: invalid protocol: 32423 14.41.45.117:45765 [ 1270.535224][T22763] netlink: 766 bytes leftover after parsing attributes in process `syz.1.13301'. [ 1270.575062][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1270.763191][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1270.859344][T22787] validate_nla: 4 callbacks suppressed [ 1270.859361][T22787] netlink: 'syz.1.13310': attribute type 1 has an invalid length. [ 1270.892092][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1270.899508][T22787] netlink: 476 bytes leftover after parsing attributes in process `syz.1.13310'. [ 1270.915429][T22787] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.13310'. [ 1270.929894][T22791] xt_hashlimit: size too large, truncated to 1048576 [ 1271.071921][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1271.128136][T22808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13312'. [ 1271.212117][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1271.295582][T22812] lo speed is unknown, defaulting to 1000 [ 1271.400293][T22824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13317'. [ 1271.475432][T22828] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13318'. [ 1271.597801][T22830] tipc: Started in network mode [ 1271.609783][T22830] tipc: Node identity ae0b6d1fb3ba, cluster identity 4711 [ 1271.635709][T22830] tipc: Enabled bearer , priority 0 [ 1271.673122][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1271.695350][T22832] syzkaller0: entered promiscuous mode [ 1271.719226][T22832] syzkaller0: entered allmulticast mode [ 1271.891930][T22832] tipc: Resetting bearer [ 1271.919464][T22832] tipc: Disabling bearer [ 1271.939361][T22851] syzkaller0: entered promiscuous mode [ 1271.945648][T22851] syzkaller0: entered allmulticast mode [ 1271.976523][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1272.099863][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.151146][T22863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.287011][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1272.352196][T22875] s5: renamed from vlan1 [ 1272.357706][T22874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13330'. [ 1272.380287][T22865] ip_vti0: entered promiscuous mode [ 1272.388696][T22865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13326'. [ 1272.451058][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1272.532735][T22879] syzkaller0: entered promiscuous mode [ 1272.538261][T22879] syzkaller0: entered allmulticast mode [ 1273.099727][T22922] netlink: 'syz.1.13344': attribute type 3 has an invalid length. [ 1273.426834][T22949] syzkaller0: entered promiscuous mode [ 1273.444793][T22949] syzkaller0: entered allmulticast mode [ 1273.506911][T22953] syzkaller0: entered promiscuous mode [ 1273.520464][T22953] syzkaller0: entered allmulticast mode [ 1273.571738][T22956] bond12: (slave vlan0): Enslaving as a backup interface with an up link [ 1273.658974][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13358'. [ 1273.789105][T22973] sctp: [Deprecated]: syz.4.13360 (pid 22973) Use of int in max_burst socket option. [ 1273.789105][T22973] Use struct sctp_assoc_value instead [ 1273.806882][T22970] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1273.831650][T22970] bond1 (unregistering): Released all slaves [ 1273.865829][T22977] bond2: option all_slaves_active: invalid value (222) [ 1273.887581][T22977] bond2 (unregistering): Released all slaves [ 1273.923635][T22978] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1274.114653][T22998] netlink: 'syz.1.13367': attribute type 1 has an invalid length. [ 1274.313514][T23012] netlink: 'syz.1.13371': attribute type 30 has an invalid length. [ 1274.352461][T23015] xt_l2tp: v2 doesn't support IP mode [ 1274.377901][T23016] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 1274.387511][T23016] bond1 (unregistering): Released all slaves [ 1274.404897][T23013] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1274.465033][T23023] netlink: 'syz.0.13373': attribute type 4 has an invalid length. [ 1274.481894][T23021] netlink: 'syz.0.13373': attribute type 4 has an invalid length. [ 1274.538209][T23030] sctp: [Deprecated]: syz.2.13376 (pid 23030) Use of int in max_burst socket option. [ 1274.538209][T23030] Use struct sctp_assoc_value instead [ 1274.753533][T23049] netlink: 'syz.2.13380': attribute type 1 has an invalid length. [ 1274.847268][T23049] bond1: entered promiscuous mode [ 1274.863438][T23049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1274.894165][T23055] bond1: (slave bridge3): making interface the new active one [ 1274.904656][T23055] bridge3: entered promiscuous mode [ 1274.914334][T23055] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1274.957265][T23064] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1274.974433][T23064] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1275.117726][T23077] netlink: 'syz.1.13391': attribute type 1 has an invalid length. [ 1275.129907][T23077] netlink: 'syz.1.13391': attribute type 7 has an invalid length. [ 1275.148941][T23077] netlink: 'syz.1.13391': attribute type 8 has an invalid length. [ 1275.459808][T23101] block nbd0: reconnected socket [ 1275.459829][ T5824] block nbd0: Receive control failed (result -107) [ 1275.682460][T23100] 9: entered promiscuous mode [ 1275.700530][T25696] net_ratelimit: 27 callbacks suppressed [ 1275.700549][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1275.780104][T23112] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1275.826871][T23116] vlan3: entered promiscuous mode [ 1275.846525][T23116] bond13: entered promiscuous mode [ 1275.846742][T23122] xt_bpf: check failed: parse error [ 1275.854009][T23116] vlan3: entered allmulticast mode [ 1275.864441][T23116] bond13: entered allmulticast mode [ 1275.920856][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1275.934237][T23123] __nla_validate_parse: 11 callbacks suppressed [ 1275.934254][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13405'. [ 1275.979578][T23112] bond13: (slave bridge6): making interface the new active one [ 1275.991874][T23112] bridge6: entered promiscuous mode [ 1275.997331][T23112] bridge6: entered allmulticast mode [ 1276.008268][T23112] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 1276.061458][T23123] bond2: entered promiscuous mode [ 1276.071781][T23123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1276.162222][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1276.194117][T23123] syzkaller0: entered promiscuous mode [ 1276.199634][T23123] syzkaller0: entered allmulticast mode [ 1276.335637][T23130] bridge4: entered promiscuous mode [ 1276.342883][T23145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.352151][T23130] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1276.393087][T23123] macvlan2: entered promiscuous mode [ 1276.401380][T23123] macvlan2: entered allmulticast mode [ 1276.407300][T23123] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1276.480611][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1276.591370][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1276.606289][T23156] validate_nla: 2 callbacks suppressed [ 1276.606306][T23156] netlink: 'syz.1.13414': attribute type 3 has an invalid length. [ 1276.630228][T23160] netlink: 516 bytes leftover after parsing attributes in process `syz.0.13415'. [ 1276.681376][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.701712][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1276.741000][T23166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13417'. [ 1276.768975][T23166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.778233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.845446][T23175] netlink: 'syz.4.13418': attribute type 4 has an invalid length. [ 1277.013889][T23180] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1277.031314][T23180] bond3: (slave lo): Enslaving as an active interface with an up link [ 1277.386301][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13425'. [ 1277.401304][T23197] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13425'. [ 1277.420552][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13425'. [ 1277.750271][T23209] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1277.783810][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13429'. [ 1277.859640][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13431'. [ 1278.195589][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13435'. [ 1278.241749][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13435'. [ 1278.299294][T17018] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.317670][T17018] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.356125][T17018] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.623624][T23242] bond0 (unregistering): Released all slaves [ 1278.701030][T23255] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1279.006645][T23264] tap0: tun_chr_ioctl cmd 1074025676 [ 1279.024796][T23264] tap0: owner set to 0 [ 1280.213003][T23340] syzkaller0: entered promiscuous mode [ 1280.240654][T23340] syzkaller0: entered allmulticast mode [ 1280.759908][T25695] net_ratelimit: 62 callbacks suppressed [ 1280.759927][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1280.900902][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1280.963484][T23369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.159109][T23371] syzkaller0: entered promiscuous mode [ 1281.200035][T23371] syzkaller0: entered allmulticast mode [ 1281.329762][T23384] netlink: 'syz.4.13480': attribute type 8 has an invalid length. [ 1283.112921][T23384] netlink: 'syz.4.13480': attribute type 8 has an invalid length. [ 1283.164781][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.284531][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.304233][T23415] __nla_validate_parse: 19 callbacks suppressed [ 1283.304252][T23415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13491'. [ 1283.324985][T23413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1283.325600][T23415] netlink: 'syz.4.13491': attribute type 1 has an invalid length. [ 1283.364212][T23418] netlink: 'syz.2.13488': attribute type 11 has an invalid length. [ 1283.400476][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.420892][T23418] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1283.510908][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.604605][ T5824] Bluetooth: hci5: link tx timeout [ 1283.611220][ T5824] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1283.621542][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.740985][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.844584][T23443] syzkaller0: entered promiscuous mode [ 1283.864629][T23443] syzkaller0: entered allmulticast mode [ 1283.877977][T23458] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13505'. [ 1283.884463][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13499'. [ 1283.901073][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1283.909060][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13505'. [ 1283.925168][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13505'. [ 1283.960139][T23461] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.13506'. [ 1284.200326][T23478] x_tables: duplicate underflow at hook 1 [ 1284.720245][T23499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1285.650750][T20524] Bluetooth: hci5: command 0x0406 tx timeout [ 1285.927230][T23490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13512'. [ 1286.000696][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1286.087216][T23502] syzkaller0: entered promiscuous mode [ 1286.098208][T23502] syzkaller0: entered allmulticast mode [ 1286.108050][T23510] netlink: 'syz.0.13516': attribute type 11 has an invalid length. [ 1286.119963][T23510] netlink: 'syz.0.13516': attribute type 4 has an invalid length. [ 1286.196166][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1286.320605][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1286.374115][T23530] syzkaller1: entered promiscuous mode [ 1286.379644][T23530] syzkaller1: entered allmulticast mode [ 1286.482329][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1286.497497][T23537] syzkaller0: entered promiscuous mode [ 1286.517143][T23537] syzkaller0: entered allmulticast mode [ 1286.684814][T23547] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1286.710925][T23547] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1286.761328][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.779765][T23557] x_tables: duplicate entry at hook 3 [ 1286.807926][T23550] xt_ecn: cannot match TCP bits for non-tcp packets [ 1286.815997][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1286.943754][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1287.042944][T23575] netlink: 'syz.4.13540': attribute type 1 has an invalid length. [ 1287.067007][T23580] syzkaller0: entered promiscuous mode [ 1287.079098][T23580] syzkaller0: entered allmulticast mode [ 1287.098291][T23575] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1287.110654][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1287.152238][T23585] tipc: Started in network mode [ 1287.157299][T23585] tipc: Node identity 4671294bae14, cluster identity 4711 [ 1287.170746][T23585] tipc: Enabled bearer , priority 0 [ 1287.257728][T23585] syzkaller0: entered promiscuous mode [ 1287.265222][T23585] syzkaller0: entered allmulticast mode [ 1287.275993][T23585] tipc: Resetting bearer [ 1287.310829][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1287.326649][T23583] tipc: Resetting bearer [ 1287.338081][T23602] netlink: 'syz.1.13549': attribute type 83 has an invalid length. [ 1287.413774][T23606] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1289.113638][T23583] tipc: Disabling bearer [ 1289.126036][T23607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1289.148594][T23621] __nla_validate_parse: 7 callbacks suppressed [ 1289.148611][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13553'. [ 1289.226923][ T5936] tipc: Node number set to 3898943819 [ 1289.278912][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13555'. [ 1289.439335][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13557'. [ 1289.518561][T23631] macvtap1: entered promiscuous mode [ 1289.524717][T23631] vlan0: entered promiscuous mode [ 1289.530252][T23631] macvtap1: entered allmulticast mode [ 1289.536927][T23631] vlan0: entered allmulticast mode [ 1289.542650][T23631] veth0_vlan: entered allmulticast mode [ 1289.683646][T23658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13564'. [ 1289.715727][T23649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13562'. [ 1289.779051][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13564'. [ 1289.916393][T23676] can: request_module (can-proto-0) failed. [ 1290.327161][T23710] netlink: 284 bytes leftover after parsing attributes in process `syz.1.13580'. [ 1290.359039][T23710] netlink: 284 bytes leftover after parsing attributes in process `syz.1.13580'. [ 1290.422028][T23710] netlink: 284 bytes leftover after parsing attributes in process `syz.1.13580'. [ 1290.537513][T23726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1290.786967][T23742] RDS: rds_bind could not find a transport for b202:b8e:17db:1e6e:6d21:95f7:7c9a:7fb5, load rds_tcp or rds_rdma? [ 1290.822149][T23742] netlink: 'syz.3.13591': attribute type 3 has an invalid length. [ 1290.834542][T23748] netlink: 'syz.0.13589': attribute type 1 has an invalid length. [ 1290.871387][T23754] Cannot find map_set index 65533 as target [ 1290.980179][T23763] netlink: 'syz.2.13596': attribute type 6 has an invalid length. [ 1290.994734][T23765] xt_hashlimit: overflow, try lower: 3/0 [ 1291.014470][T23763] netlink: 'syz.2.13596': attribute type 5 has an invalid length. [ 1291.022668][T17018] net_ratelimit: 20 callbacks suppressed [ 1291.022691][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.140964][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.253139][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.370873][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.483417][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.600532][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.711106][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.820521][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1291.931858][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1292.041013][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1293.785872][T23761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.798226][T23783] netlink: 'syz.3.13600': attribute type 1 has an invalid length. [ 1293.823074][T23783] netlink: 'syz.3.13600': attribute type 1 has an invalid length. [ 1293.944554][T23802] sctp: [Deprecated]: syz.1.13603 (pid 23802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1293.944554][T23802] Use struct sctp_sack_info instead [ 1294.046299][T23806] netlink: 'syz.2.13606': attribute type 1 has an invalid length. [ 1294.112122][T23806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1294.191373][T23823] bond3: option mode: unable to set because the bond device has slaves [ 1294.249324][T23825] __nla_validate_parse: 70 callbacks suppressed [ 1294.249342][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13613'. [ 1294.295419][T23829] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13612'. [ 1294.449567][T23842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13615'. [ 1294.564562][T23848] netlink: 'syz.2.13616': attribute type 2 has an invalid length. [ 1294.599689][T23853] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13619'. [ 1294.658943][T23855] macvtap1: entered allmulticast mode [ 1294.674724][T23855] veth0_macvtap: entered allmulticast mode [ 1294.686922][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13619'. [ 1294.870305][T23868] netlink: 'syz.4.13626': attribute type 1 has an invalid length. [ 1294.882241][T23867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1294.892526][T23867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1294.963907][T23868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.019252][T23867] bond5: option arp_validate: invalid value (134217728) [ 1295.030057][T23867] bond5 (unregistering): Released all slaves [ 1295.066822][T23873] bond0: (slave geneve4): making interface the new active one [ 1295.076878][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13628'. [ 1295.113287][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13628'. [ 1295.140070][T23873] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 1295.149546][T16292] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1295.158727][T16292] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1295.184711][T16292] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1295.204046][T25695] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1295.231528][T23887] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.13630'. [ 1295.362622][T23900] netlink: 'syz.2.13635': attribute type 1 has an invalid length. [ 1295.395977][T23900] bond5: entered promiscuous mode [ 1295.401636][T23900] bond5: entered allmulticast mode [ 1295.408168][T23900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1295.476930][T23905] atomic_op ffff8880a9d89198 conn xmit_atomic 0000000000000000 [ 1295.703495][T23927] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1295.734520][T23927] bond14: (slave ip6erspan0): making interface the new active one [ 1295.745017][T23927] bond14: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1296.033989][T23949] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1296.121997][T19818] net_ratelimit: 33 callbacks suppressed [ 1296.122016][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.270909][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.318870][T23965] validate_nla: 1 callbacks suppressed [ 1296.318883][T23965] netlink: 'syz.0.13653': attribute type 3 has an invalid length. [ 1296.380528][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.501361][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.539528][T23980] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777353 [ 1296.548570][T23980] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777352 [ 1296.557588][T23980] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777351 [ 1296.566677][T23978] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777353 [ 1296.576623][T23978] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777352 [ 1296.585357][T23978] tipc: Failed to remove unknown binding: 66,0,0/0:502777350/502777351 [ 1296.620912][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.649652][T23985] xt_hashlimit: size too large, truncated to 1048576 [ 1296.740758][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1296.901538][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1297.011593][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1297.121073][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1297.242551][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1297.346764][T24022] syzkaller0: entered promiscuous mode [ 1297.359566][T24022] syzkaller0: entered allmulticast mode [ 1297.518959][T24031] netlink: 'syz.3.13674': attribute type 9 has an invalid length. [ 1297.939604][T24052] netlink: 'syz.0.13679': attribute type 6 has an invalid length. [ 1298.007122][T24068] team0: No ports can be present during mode change [ 1298.039209][ T29] audit: type=1107 audit(1773185816.401:12): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tFQrX#X~ _˯|6` W_Fx6df*YCI[h~v+X2=s' [ 1298.470787][T24102] netlink: 'syz.2.13692': attribute type 58 has an invalid length. [ 1300.205159][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1301.221028][T21843] net_ratelimit: 35 callbacks suppressed [ 1301.221050][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1301.341009][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1301.450684][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1301.521189][T24109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.560928][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1301.673695][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1301.710161][T24157] __nla_validate_parse: 11 callbacks suppressed [ 1301.710184][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13710'. [ 1301.742145][T24161] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1301.803178][T24161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13709'. [ 1301.929430][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1302.041418][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1302.065767][T24185] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1302.130109][ T84] bridge0: port 3(team0) entered disabled state [ 1302.212824][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1302.279549][T24212] netlink: 'syz.3.13725': attribute type 1 has an invalid length. [ 1302.290270][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13725'. [ 1302.317264][T24216] lo: MTU too low for tipc bearer [ 1302.329872][T24216] tipc: Enabling of bearer rejected, failed to enable media [ 1302.371020][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1302.373948][T24216] netlink: 'syz.1.13721': attribute type 1 has an invalid length. [ 1302.670131][T24235] FAULT_INJECTION: forcing a failure. [ 1302.670131][T24235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.692538][T24235] CPU: 1 UID: 0 PID: 24235 Comm: syz.3.13727 Not tainted syzkaller #0 PREEMPT(full) [ 1302.692564][T24235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1302.692575][T24235] Call Trace: [ 1302.692584][T24235] [ 1302.692592][T24235] dump_stack_lvl+0xe8/0x150 [ 1302.692625][T24235] should_fail_ex+0x412/0x560 [ 1302.692654][T24235] _copy_from_user+0x2d/0xb0 [ 1302.692698][T24235] __sys_sendto+0x2b0/0x710 [ 1302.692727][T24235] ? __pfx___sys_sendto+0x10/0x10 [ 1302.692750][T24235] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1302.692786][T24235] ? __fget_files+0x3a0/0x420 [ 1302.692822][T24235] ? ksys_write+0x242/0x270 [ 1302.692844][T24235] ? __pfx_ksys_write+0x10/0x10 [ 1302.692869][T24235] __x64_sys_sendto+0xde/0x100 [ 1302.692898][T24235] do_syscall_64+0x14d/0xf80 [ 1302.692915][T24235] ? trace_irq_disable+0x3b/0x150 [ 1302.692940][T24235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.692959][T24235] ? clear_bhb_loop+0x40/0x90 [ 1302.692980][T24235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.692998][T24235] RIP: 0033:0x7f454799c799 [ 1302.693016][T24235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.693032][T24235] RSP: 002b:00007f454880e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1302.693051][T24235] RAX: ffffffffffffffda RBX: 00007f4547c16180 RCX: 00007f454799c799 [ 1302.693064][T24235] RDX: 000000000000000e RSI: 0000200000002400 RDI: 0000000000000007 [ 1302.693076][T24235] RBP: 00007f454880e090 R08: 00002000000001c0 R09: 0000000000000014 [ 1302.693088][T24235] R10: 00000000200000c1 R11: 0000000000000246 R12: 0000000000000001 [ 1302.693099][T24235] R13: 00007f4547c16218 R14: 00007f4547c16180 R15: 00007ffcec2b0a88 [ 1302.693129][T24235] [ 1302.704449][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1302.958350][T24243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13730'. [ 1303.248554][T24269] netlink: 124 bytes leftover after parsing attributes in process `syz.4.13735'. [ 1303.306549][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13737'. [ 1303.352481][T24270] netlink: 'syz.0.13736': attribute type 4 has an invalid length. [ 1303.553919][T24275] syzkaller0: entered promiscuous mode [ 1303.560861][T24275] syzkaller0: entered allmulticast mode [ 1304.166642][T24301] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode [ 1304.175979][T24301] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode [ 1304.486658][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13751'. [ 1304.532540][T24322] team_slave_0: entered promiscuous mode [ 1304.538890][T24322] team_slave_0: entered allmulticast mode [ 1304.717078][T24332] syzkaller0: entered promiscuous mode [ 1304.723447][T24332] syzkaller0: entered allmulticast mode [ 1304.839731][T24339] bridge0: port 4(gretap0) entered disabled state [ 1305.082983][T24359] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13766'. [ 1305.229380][T24374] #: renamed from veth1_virt_wifi (while UP) [ 1305.803839][T24385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13773'. [ 1305.880472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1305.888517][ C1] lec:lec_tx_timeout: lec0 [ 1306.124794][T24411] netlink: 81 bytes leftover after parsing attributes in process `syz.3.13779'. [ 1306.291197][ T84] net_ratelimit: 19 callbacks suppressed [ 1306.291216][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1306.419705][T24430] gretap1: entered promiscuous mode [ 1306.460752][T24430] gretap1: entered allmulticast mode [ 1306.472986][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1306.537898][T24437] : entered promiscuous mode [ 1306.604699][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1306.752336][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1306.772584][T24458] ip6gre1: entered allmulticast mode [ 1306.860590][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1306.877744][T24461] syzkaller0: entered promiscuous mode [ 1306.883431][T24461] syzkaller0: entered allmulticast mode [ 1306.993888][T24467] __nla_validate_parse: 3 callbacks suppressed [ 1306.993908][T24467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13800'. [ 1307.023820][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1307.046505][T24467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13800'. [ 1307.113863][T24477] netlink: 'syz.4.13803': attribute type 24 has an invalid length. [ 1307.131853][T24478] pimreg: entered allmulticast mode [ 1307.141291][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1307.154017][T24467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13800'. [ 1307.185462][T24467] netlink: 'syz.1.13800': attribute type 83 has an invalid length. [ 1307.250832][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1307.361638][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1307.475749][T24505] netlink: 564 bytes leftover after parsing attributes in process `syz.1.13809'. [ 1307.495494][T24505] openvswitch: netlink: Flow key attr not present in new flow. [ 1307.511775][T24507] tipc: Started in network mode [ 1307.516688][T24507] tipc: Node identity 080211000001, cluster identity 4711 [ 1307.524403][T24507] tipc: Enabled bearer , priority 0 [ 1307.599677][T24511] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13813'. [ 1307.744945][T24527] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13815'. [ 1307.947020][T24537] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13819'. [ 1307.994414][T24537] vlan4: entered allmulticast mode [ 1307.999800][ T9431] lec:lec_start_xmit: lec0:No lecd attached [ 1308.007419][T24537] gretap0: entered allmulticast mode [ 1308.167421][T24563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13825'. [ 1308.185023][T24565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13825'. [ 1308.368243][T24575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13831'. [ 1308.490761][T24581] gretap0: entered promiscuous mode [ 1308.570088][T24583] bond6 (unregistering): Released all slaves [ 1308.704139][ T24] tipc: Node number set to 134418688 [ 1309.494829][T24668] 0: renamed from hsr_slave_1 (while UP) [ 1309.510288][T24668] 0: entered allmulticast mode [ 1309.759642][T24714] netlink: 'syz.2.13864': attribute type 1 has an invalid length. [ 1309.869534][T24714] bond6: entered promiscuous mode [ 1309.878060][T24714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1309.917599][T24741] ipvlan2: entered allmulticast mode [ 1309.925930][T24741] bond6: entered allmulticast mode [ 1310.369644][T24819] bond2: entered promiscuous mode [ 1310.375929][T24819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1310.462986][T24831] bridge5: entered promiscuous mode [ 1310.494691][T24831] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 1310.531449][T24829] syzkaller1: entered promiscuous mode [ 1310.590122][T24829] syzkaller1: entered allmulticast mode [ 1310.681309][T24696] workqueue: Failed to create a rescuer kthread for wq "nfc43_nci_rx_wq": -EINTR [ 1310.765545][T24864] veth7: entered promiscuous mode [ 1311.193170][T24878] macsec0: entered promiscuous mode [ 1311.217185][T24878] macsec0: entered allmulticast mode [ 1311.238792][T24884] veth1_macvtap: entered allmulticast mode [ 1311.263662][T24884] macsec0: left promiscuous mode [ 1311.272536][T24884] macsec0: left allmulticast mode [ 1311.304872][T24884] veth1_macvtap: left allmulticast mode [ 1311.375987][T25696] net_ratelimit: 37 callbacks suppressed [ 1311.376006][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1311.521711][T24903] netlink: 'syz.4.13884': attribute type 16 has an invalid length. [ 1311.551846][T24903] netlink: 'syz.4.13884': attribute type 3 has an invalid length. [ 1311.641515][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1311.699342][T24906] syzkaller1: entered promiscuous mode [ 1311.738076][T24906] syzkaller1: entered allmulticast mode [ 1311.812376][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.022584][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.170971][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.283864][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.315704][T24958] __nla_validate_parse: 14 callbacks suppressed [ 1312.315720][T24958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13898'. [ 1312.403153][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.476398][T24963] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13899'. [ 1312.502748][T24963] sch_fq: defrate 0 ignored. [ 1312.514442][T24968] netlink: 'syz.1.13902': attribute type 15 has an invalid length. [ 1312.525589][T24968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13902'. [ 1312.538031][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13899'. [ 1312.547481][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13899'. [ 1312.557498][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.570486][T24963] netlink: 'syz.2.13899': attribute type 12 has an invalid length. [ 1312.588045][T24963] netlink: 'syz.2.13899': attribute type 11 has an invalid length. [ 1312.669632][T24982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1312.690490][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.807487][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1312.809865][T24991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13907'. [ 1312.904849][T24990] tipc: Started in network mode [ 1312.909774][T24990] tipc: Node identity 660a3efbc1e5, cluster identity 4711 [ 1312.920021][T24990] tipc: Enabled bearer , priority 0 [ 1313.010714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1313.018774][ C1] lec:lec_tx_timeout: lec0 [ 1313.094573][T24990] syzkaller0: entered promiscuous mode [ 1313.108595][T24990] syzkaller0: entered allmulticast mode [ 1313.134889][T24990] tipc: Resetting bearer [ 1313.264967][T24989] tipc: Resetting bearer [ 1315.513051][T24989] tipc: Disabling bearer [ 1315.548919][ T5936] tipc: Node number set to 2817474299 [ 1315.718709][T25045] batadv_slave_1: entered promiscuous mode [ 1315.733724][T25043] batadv_slave_1: left promiscuous mode [ 1315.808911][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13923'. [ 1315.818844][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13923'. [ 1315.961321][T25067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13926'. [ 1316.108587][T25080] syzkaller0: entered promiscuous mode [ 1316.114879][T25080] syzkaller0: entered allmulticast mode [ 1316.414327][T25696] net_ratelimit: 7 callbacks suppressed [ 1316.414348][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1316.513162][T25107] netlink: 'syz.4.13939': attribute type 1 has an invalid length. [ 1316.540704][T25107] netlink: 'syz.4.13939': attribute type 1 has an invalid length. [ 1316.546698][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1316.553604][T25107] netlink: 'syz.4.13939': attribute type 2 has an invalid length. [ 1316.680798][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1316.772732][T25125] syzkaller0: entered promiscuous mode [ 1316.778279][T25125] syzkaller0: entered allmulticast mode [ 1316.845513][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1316.962600][T25131] netlink: 'syz.3.13948': attribute type 1 has an invalid length. [ 1316.971459][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.096303][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.240750][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.350746][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.373541][T25158] syzkaller1: entered promiscuous mode [ 1317.379094][T25158] syzkaller1: entered allmulticast mode [ 1317.542736][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.649090][T25186] __nla_validate_parse: 6 callbacks suppressed [ 1317.649108][T25186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13962'. [ 1317.657391][T25188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13963'. [ 1317.687279][T25190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13962'. [ 1317.696785][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13963'. [ 1317.700582][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1317.834367][T25196] sctp: [Deprecated]: syz.4.13965 (pid 25196) Use of int in max_burst socket option. [ 1317.834367][T25196] Use struct sctp_assoc_value instead [ 1317.861043][T25200] delete_channel: no stack [ 1317.925745][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13966'. [ 1317.937724][T25204] hsr_slave_0: left promiscuous mode [ 1317.941473][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13970'. [ 1317.953208][T25204] hsr_slave_1: left promiscuous mode [ 1317.973077][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13971'. [ 1318.244107][T25228] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1318.253813][T25228] tipc: Started in network mode [ 1318.258709][T25228] tipc: Node identity a69477a007da, cluster identity 4711 [ 1318.271049][T25228] tipc: Enabled bearer , priority 0 [ 1318.279894][T25228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13976'. [ 1318.294499][T25228] tipc: Resetting bearer [ 1318.321308][T25228] tipc: Enabling of bearer rejected, failed to enable media [ 1318.415594][T25227] tipc: Disabling bearer [ 1318.557308][T25254] netlink: 'syz.1.13986': attribute type 11 has an invalid length. [ 1318.601359][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13986'. [ 1318.634013][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13985'. [ 1318.821575][T25275] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1318.888529][T25275] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1318.902035][T25275] gretap2: entered promiscuous mode [ 1318.908404][T25275] gretap2: entered allmulticast mode [ 1318.983617][T25285] tipc: New replicast peer: 255.255.255.255 [ 1318.990260][T25285] tipc: Enabled bearer , priority 10 [ 1319.105510][T25289] netlink: 'syz.2.13994': attribute type 30 has an invalid length. [ 1319.283559][T25309] pimreg: left allmulticast mode [ 1319.305332][T25306] Can't find ip_set type GPL [ 1319.425157][T25307] netem: unknown loss type 0 [ 1319.439258][T25307] netem: change failed [ 1319.454284][T25307] mac80211_hwsim hwsim125 syzkaller0: left promiscuous mode [ 1319.461695][T25307] mac80211_hwsim hwsim125 syzkaller0: left allmulticast mode [ 1319.625976][T25324] netlink: 'syz.0.14004': attribute type 11 has an invalid length. [ 1319.666362][T25323] erspan1: entered allmulticast mode [ 1320.241278][T13808] tipc: Node number set to 2706274208 [ 1320.284881][T25353] syzkaller0: entered promiscuous mode [ 1320.294025][T25353] syzkaller0: entered allmulticast mode [ 1320.336403][T25356] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1321.161802][T25384] C: renamed from lo (while UP) [ 1321.222096][T25411] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode [ 1321.238707][T25411] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode [ 1321.463657][T25696] net_ratelimit: 24 callbacks suppressed [ 1321.463677][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1321.631370][T17018] bond1: (slave bridge1): failed to get link speed/duplex [ 1321.793907][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1321.920702][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1322.041230][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1322.059067][T25466] syzkaller0: entered promiscuous mode [ 1322.071570][T25466] syzkaller0: entered allmulticast mode [ 1322.266679][T25472] syzkaller1: entered promiscuous mode [ 1322.275619][T25472] syzkaller1: entered allmulticast mode [ 1322.401680][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1322.463940][T25497] xt_hashlimit: invalid rate [ 1322.532871][T25501] syzkaller0: entered promiscuous mode [ 1322.545595][T25501] syzkaller0: entered allmulticast mode [ 1322.567786][T25508] netlink: 'syz.3.14054': attribute type 1 has an invalid length. [ 1322.580294][T25501] 0: reclassify loop, rule prio 0, protocol 800 [ 1322.580661][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1323.031619][T25519] syzkaller0: entered promiscuous mode [ 1323.037251][T25519] syzkaller0: entered allmulticast mode [ 1323.071057][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1325.201402][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1325.262496][T25577] IPVS: Unknown mcast interface: pim6reg [ 1325.268809][T25578] IPVS: Unknown mcast interface: pim6reg [ 1325.592528][T25602] bond7: option mode: invalid value (133) [ 1325.615389][T25609] __nla_validate_parse: 22 callbacks suppressed [ 1325.615408][T25609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14076'. [ 1325.638052][T25602] bond7 (unregistering): Released all slaves [ 1325.644610][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14079'. [ 1325.644639][T25613] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1325.781111][T25620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14081'. [ 1325.787950][T25623] IPv6: NLM_F_CREATE should be specified when creating new route [ 1326.199085][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14090'. [ 1326.247195][ T5824] block nbd0: Receive control failed (result -107) [ 1326.260901][T25656] block nbd0: reconnected socket [ 1326.313698][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14093'. [ 1326.323685][T25658] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14093'. [ 1326.325331][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14091'. [ 1326.422008][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14096'. [ 1326.570515][T25696] net_ratelimit: 9 callbacks suppressed [ 1326.570534][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1326.670976][T25685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14100'. [ 1326.699331][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14100'. [ 1326.704771][T25687] Cannot find add_set index 2 as target [ 1326.723125][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1326.850517][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1326.961155][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1327.070506][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1327.180567][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1327.245439][T25713] tap0: tun_chr_ioctl cmd 2148553947 [ 1327.290665][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1329.572138][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1329.691232][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1329.823703][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1330.044599][T25748] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1330.076058][T25750] netlink: 'syz.2.14118': attribute type 1 has an invalid length. [ 1330.331829][T25763] syzkaller0: entered promiscuous mode [ 1330.337454][T25763] syzkaller0: entered allmulticast mode [ 1330.427106][T25774] tipc: Enabling of bearer rejected, already enabled [ 1330.534868][T25765] IPVS: length: 8 != 1152 [ 1330.767574][T25805] x_tables: unsorted underflow at hook 3 [ 1330.839192][T25813] __nla_validate_parse: 8 callbacks suppressed [ 1330.839209][T25813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14133'. [ 1330.876068][T25816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14131'. [ 1331.052833][T25771] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1331.193301][T25832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14137'. [ 1331.418562][T25850] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14140'. [ 1331.443609][T25845] lo speed is unknown, defaulting to 1000 [ 1331.457310][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14143'. [ 1331.467812][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14143'. [ 1331.594267][T25863] bridge5: entered promiscuous mode [ 1331.599790][T25863] bridge5: entered allmulticast mode [ 1331.752080][T25695] net_ratelimit: 14 callbacks suppressed [ 1331.752094][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1331.946262][T25888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14154'. [ 1331.979809][ T29] audit: type=1107 audit(1773185850.341:13): pid=25890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='29XXOE{t띦dS=EJ2t]i+ԹrCbg' [ 1332.013561][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.029306][T25883] tc_dump_action: action bad kind [ 1332.094887][T25898] IPVS: persistence engine module ip_vs_pe_ not found [ 1332.187343][T25908] netlink: 'syz.1.14157': attribute type 11 has an invalid length. [ 1332.201470][T25908] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.14157'. [ 1332.270632][T25695] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.396481][T25908] netlink: 'syz.1.14157': attribute type 10 has an invalid length. [ 1332.405523][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.416652][T25924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14161'. [ 1332.478889][T25928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14163'. [ 1332.524282][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.671379][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.820628][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.941113][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1332.949793][T25957] openvswitch: netlink: IP tunnel dst address not specified [ 1333.000870][T20524] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.050517][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1335.931907][T25996] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20004 [ 1336.036944][T26002] nbd: must specify at least one socket [ 1336.099672][T26002] __nla_validate_parse: 3 callbacks suppressed [ 1336.099690][T26002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14178'. [ 1336.119255][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14180'. [ 1336.129840][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14180'. [ 1336.287161][T26024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14183'. [ 1336.497221][T26048] netlink: 'syz.1.14190': attribute type 1 has an invalid length. [ 1336.510707][T26047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1336.522068][T26047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1336.562186][T26047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1336.576912][T26047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1336.674435][T26059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14192'. [ 1336.703838][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14192'. [ 1336.748568][T26067] netlink: 'syz.1.14196': attribute type 16 has an invalid length. [ 1336.774323][T26067] netlink: 'syz.1.14196': attribute type 17 has an invalid length. [ 1336.863608][T26067] net_ratelimit: 13 callbacks suppressed [ 1336.863620][T26067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1336.891968][T26074] batadv_slave_1: entered allmulticast mode [ 1336.901203][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1336.961325][T26080] netlink: 'syz.4.14200': attribute type 1 has an invalid length. [ 1337.070772][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.128118][T26086] netlink: 'syz.1.14201': attribute type 10 has an invalid length. [ 1337.180867][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.290852][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.322951][T26096] syzkaller0: entered promiscuous mode [ 1337.337556][T26096] syzkaller0: entered allmulticast mode [ 1337.521384][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.650679][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.818315][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1337.855167][T26132] netlink: 'syz.0.14216': attribute type 1 has an invalid length. [ 1337.880958][T26132] netlink: 'syz.0.14216': attribute type 2 has an invalid length. [ 1337.928034][T26140] netlink: 'syz.3.14219': attribute type 1 has an invalid length. [ 1337.936890][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1338.022142][T26148] mac80211_hwsim hwsim125 syzkaller0: Caught tx_queue_len zero misconfig [ 1338.081988][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1338.576401][T26198] x_tables: duplicate underflow at hook 2 [ 1338.928942][T26217] netlink: 'syz.0.14241': attribute type 1 has an invalid length. [ 1338.937054][T26217] netlink: 'syz.0.14241': attribute type 1 has an invalid length. [ 1338.968767][T26218] IPv6: NLM_F_CREATE should be specified when creating new route [ 1339.312319][T26250] syzkaller0: entered promiscuous mode [ 1339.314140][T26232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1339.318725][T26250] syzkaller0: entered allmulticast mode [ 1339.904707][T26302] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1340.001666][T26306] team0: No ports can be present during mode change [ 1340.453045][T26348] macvtap2: entered promiscuous mode [ 1340.474524][T26348] syz_tun: entered promiscuous mode [ 1340.496683][T26348] syz_tun: left promiscuous mode [ 1341.036831][T26389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1341.127467][T26399] __nla_validate_parse: 56 callbacks suppressed [ 1341.127480][T26399] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.14295'. [ 1341.146283][T26400] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20000 [ 1341.292809][T26411] delete_channel: no stack [ 1341.318188][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14301'. [ 1341.379483][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14301'. [ 1341.483939][T26425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14303'. [ 1341.817854][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14306'. [ 1341.840144][T26440] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1341.860331][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14306'. [ 1341.874229][T26440] bond7 (unregistering): Released all slaves [ 1341.934954][T21843] net_ratelimit: 27 callbacks suppressed [ 1341.934974][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1341.991569][T26452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14312'. [ 1342.040011][T26452] batadv2: entered allmulticast mode [ 1342.062803][T26452] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1342.091135][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1342.198171][T26467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14319'. [ 1342.207573][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1342.321902][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1342.362997][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14323'. [ 1342.454628][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1342.493063][T26495] x_tables: unsorted entry at hook 3 [ 1342.578817][T26495] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.14326'. [ 1344.415666][T26506] mac80211_hwsim hwsim121 wlan0: entered promiscuous mode [ 1344.480865][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1344.619285][T26538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.648886][T26541] validate_nla: 8 callbacks suppressed [ 1344.648904][T26541] netlink: 'syz.1.14338': attribute type 1 has an invalid length. [ 1344.667678][T26541] netlink: 'syz.1.14338': attribute type 2 has an invalid length. [ 1344.677270][T26541] netlink: 'syz.1.14338': attribute type 1 has an invalid length. [ 1344.684364][T26542] tc_dump_action: action bad kind [ 1344.688276][T26541] netlink: 'syz.1.14338': attribute type 3 has an invalid length. [ 1345.078922][T26540] netlink: 'syz.4.14339': attribute type 2 has an invalid length. [ 1345.164628][T26545] bond15: entered promiscuous mode [ 1345.179714][T26545] bond15: entered allmulticast mode [ 1345.187331][T26545] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1345.303263][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1345.449420][T26583] syzkaller0: entered promiscuous mode [ 1345.458885][T26583] syzkaller0: entered allmulticast mode [ 1345.585341][T26588] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1345.604433][T26588] bond16 (unregistering): Released all slaves [ 1345.636570][T26601] netlink: 'syz.3.14354': attribute type 3 has an invalid length. [ 1345.751176][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1345.846739][T26613] tipc: New replicast peer: 255.255.255.255 [ 1345.867333][T26613] tipc: Enabled bearer , priority 10 [ 1345.910920][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1345.996146][T26623] lo speed is unknown, defaulting to 1000 [ 1346.020531][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1346.209116][T26648] __nla_validate_parse: 6 callbacks suppressed [ 1346.209135][T26648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14367'. [ 1346.334299][T26653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1346.372319][T26654] netlink: 'syz.0.14367': attribute type 3 has an invalid length. [ 1346.381950][T26654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14367'. [ 1346.707442][T26678] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14375'. [ 1346.867066][T26690] netlink: 'syz.3.14378': attribute type 1 has an invalid length. [ 1346.883114][T26690] netlink: 228 bytes leftover after parsing attributes in process `syz.3.14378'. [ 1347.034374][T26701] net_ratelimit: 6 callbacks suppressed [ 1347.034391][T26701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.049258][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.077430][T26705] syzkaller0: entered promiscuous mode [ 1347.084006][T26705] syzkaller0: entered allmulticast mode [ 1347.235672][T26716] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14391'. [ 1347.275220][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.390857][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.501028][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.550082][T26745] bridge0: port 5(veth3) entered blocking state [ 1347.575817][T26745] bridge0: port 5(veth3) entered disabled state [ 1347.583556][T26745] veth3: entered allmulticast mode [ 1347.611418][T26745] veth3: entered promiscuous mode [ 1347.632286][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.726337][T26759] netlink: 15 bytes leftover after parsing attributes in process `syz.0.14403'. [ 1347.741085][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.764870][T26754] syzkaller0: entered promiscuous mode [ 1347.774777][T26754] syzkaller0: entered allmulticast mode [ 1347.845233][T26763] tipc: Enabling of bearer rejected, failed to enable media [ 1347.881531][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1347.891068][T26771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1347.936908][T26771] veth0_macvtap: left promiscuous mode [ 1348.015879][T26783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14409'. [ 1348.026291][T26776] tipc: Enabled bearer , priority 0 [ 1348.050137][T26763] netlink: 'syz.4.14405': attribute type 1 has an invalid length. [ 1348.105783][T26783] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1348.180342][T26787] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1348.188572][T26787] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1348.208293][T26787] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1348.233565][T26769] tipc: Disabling bearer [ 1348.244815][T26792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1348.251572][T16292] bond1: (slave bridge1): failed to get link speed/duplex [ 1348.371379][T19818] bond1: (slave bridge1): failed to get link speed/duplex [ 1348.429717][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14416'. [ 1348.492481][T26810] netlink: 'syz.3.14413': attribute type 178 has an invalid length. [ 1348.568463][T26816] syzkaller0: entered promiscuous mode [ 1348.585308][T26816] syzkaller0: entered allmulticast mode [ 1348.979400][T26850] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 1349.041015][T26850] pimreg3: entered allmulticast mode [ 1349.148769][T26854] syzkaller0: entered promiscuous mode [ 1349.168640][T26854] syzkaller0: entered allmulticast mode [ 1349.192129][T26854] syzkaller0: left promiscuous mode [ 1349.197389][T26854] syzkaller0: left allmulticast mode [ 1349.212912][T26854] syzkaller0: create flow: hash 3200172885 index 2 [ 1349.321848][T26842] xt_TCPMSS: Only works on TCP SYN packets [ 1349.495836][T26853] syzkaller0: delete flow: hash 3200172885 index 2 [ 1349.823285][T20524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1349.842196][T20524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1349.852171][T20524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1349.860021][T20524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1349.868057][T20524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1350.001744][T26882] can: request_module (can-proto-0) failed. [ 1350.069418][T26882] can: request_module (can-proto-0) failed. [ 1350.147144][T26882] can: request_module (can-proto-0) failed. [ 1350.228870][T26882] can: request_module (can-proto-0) failed. [ 1350.267854][T16242] syz_tun (unregistering): left allmulticast mode [ 1350.297832][T26882] can: request_module (can-proto-0) failed. [ 1350.347062][T26879] lo speed is unknown, defaulting to 1000 [ 1350.354178][T26882] can: request_module (can-proto-0) failed. [ 1350.453522][T26882] can: request_module (can-proto-0) failed. [ 1350.536024][T26882] can: request_module (can-proto-0) failed. [ 1350.545705][T26912] netlink: 'syz.1.14444': attribute type 2 has an invalid length. [ 1350.589566][T26912] 9: entered promiscuous mode [ 1350.647584][T26882] can: request_module (can-proto-0) failed. [ 1350.686411][T26882] can: request_module (can-proto-0) failed. [ 1350.845206][T26928] netlink: 'syz.3.14447': attribute type 30 has an invalid length. [ 1350.865965][T26879] chnl_net:caif_netlink_parms(): no params data found [ 1350.897592][T26934] netlink: 'syz.3.14447': attribute type 30 has an invalid length. [ 1351.399302][T26960] netlink: 'syz.1.14452': attribute type 1 has an invalid length. [ 1351.427983][T26879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.428030][T26960] __nla_validate_parse: 8 callbacks suppressed [ 1351.428041][T26960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14452'. [ 1351.446277][T26879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.454578][T26960] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14452'. [ 1351.471226][T26960] netlink: 658 bytes leftover after parsing attributes in process `syz.1.14452'. [ 1351.482929][T26879] bridge_slave_0: entered allmulticast mode [ 1351.493304][T26879] bridge_slave_0: entered promiscuous mode [ 1351.520323][T26966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14455'. [ 1351.531170][T26879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.538504][T26879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.547080][T26879] bridge_slave_1: entered allmulticast mode [ 1351.556056][T26879] bridge_slave_1: entered promiscuous mode [ 1351.605299][T26879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.618398][T26879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.690831][T26972] netlink: 'syz.0.14457': attribute type 4 has an invalid length. [ 1351.698935][T26972] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14457'. [ 1351.752511][T26879] team0: Port device team_slave_0 added [ 1351.774892][T26879] team0: Port device team_slave_1 added [ 1351.787290][T26978] netlink: 'syz.3.14459': attribute type 64 has an invalid length. [ 1351.837643][T26978] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14459'. [ 1351.858297][T26879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.876272][T26879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.913921][T26879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.939667][T26986] xt_hashlimit: size too large, truncated to 1048576 [ 1351.961671][T20524] Bluetooth: hci2: command tx timeout [ 1352.004524][T26879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.012055][T26992] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14464'. [ 1352.022266][T26879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.077511][T26879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.124732][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14464'. [ 1352.255094][T26879] hsr_slave_0: entered promiscuous mode [ 1352.262566][T26879] hsr_slave_1: entered promiscuous mode [ 1352.269022][T26879] debugfs: 'hsr0' already exists in 'hsr' [ 1352.275978][T26879] Cannot create hsr debugfs directory [ 1352.381164][T27007] veth0: entered promiscuous mode [ 1352.398977][T27009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14468'. [ 1352.409484][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14467'. [ 1352.429312][T27010] net_ratelimit: 18 callbacks suppressed [ 1352.429328][T27010] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1352.444655][T27012] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1352.501145][ T7808] bond1: (slave bridge1): failed to get link speed/duplex [ 1352.670692][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1352.850727][T27037] delete_channel: no stack [ 1352.904286][T26879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.918324][T26879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.932800][T26879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60607 - 0 [ 1352.947552][T26879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1353.031322][T27057] netlink: 'syz.0.14480': attribute type 21 has an invalid length. [ 1353.033187][T27042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.169334][T26879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.184948][T26879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.199692][T26879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60607 - 0 [ 1353.211076][T26879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1353.288270][T27042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.345911][T26879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.362729][T26879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.374990][T26879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60607 - 0 [ 1353.388702][T26879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1353.409987][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1353.430250][T27042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.449487][T27083] netlink: 'syz.2.14488': attribute type 11 has an invalid length. [ 1353.473247][T26879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.484422][T26879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.495666][T26879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60607 - 0 [ 1353.507356][T26879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1353.524487][T27083] netem: invalid attributes len -24 [ 1353.529757][T27083] netem: change failed [ 1353.547474][T27042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.588556][ T84] bond1: (slave bridge1): failed to get link speed/duplex [ 1353.681551][T27074] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.698036][T27074] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.733493][ T84] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.758630][T21842] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1353.803986][T26879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.819020][T26879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.844793][T26879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1353.866921][T26879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1353.875696][T27094] xt_hashlimit: size too large, truncated to 1048576 [ 1353.901074][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1353.926877][T27103] netlink: 'syz.3.14491': attribute type 1 has an invalid length. [ 1353.972137][T27102] syzkaller0: entered promiscuous mode [ 1353.982752][T27102] syzkaller0: entered allmulticast mode [ 1354.010151][T27103] bond4: (slave bridge6): Enslaving as a backup interface with an up link [ 1354.041527][T20524] Bluetooth: hci2: command tx timeout [ 1354.063342][T27103] bond4: (slave bridge7): Enslaving as a backup interface with a down link [ 1354.123138][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1354.160076][T27108] xt_CONNSECMARK: invalid mode: 0 [ 1354.178801][T26879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.245072][T26879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.268537][T27111] xt_hashlimit: size too large, truncated to 1048576 [ 1354.286333][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1354.304819][T21843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.305355][T27114] netlink: 'syz.0.14495': attribute type 1 has an invalid length. [ 1354.311993][T21843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.479722][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1354.576571][T27122] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1354.603361][T27122] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 1354.642792][T27124] hsr_slave_0 (unregistering): left promiscuous mode [ 1354.662088][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.669287][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.716550][T27126] bond2: (slave bridge6): Enslaving as an active interface with a down link [ 1354.774489][T27122] bond2: (slave gretap3): making interface the new active one [ 1354.808876][T27122] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 1354.847463][T27140] netlink: 'syz.2.14502': attribute type 1 has an invalid length. [ 1354.984062][T27144] syzkaller0: entered promiscuous mode [ 1354.989575][T27144] syzkaller0: entered allmulticast mode [ 1355.005265][T27147] : renamed from hsr0 (while UP) [ 1355.274715][T27156] syzkaller0: entered promiscuous mode [ 1355.280204][T27156] syzkaller0: entered allmulticast mode [ 1356.125381][T20524] Bluetooth: hci2: command tx timeout [ 1357.023128][T27164] __nla_validate_parse: 13 callbacks suppressed [ 1357.023148][T27164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14508'. [ 1357.053776][T26879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.064480][T27177] validate_nla: 2 callbacks suppressed [ 1357.064499][T27177] netlink: 'syz.0.14512': attribute type 2 has an invalid length. [ 1357.368548][T27198] netlink: 'syz.1.14518': attribute type 1 has an invalid length. [ 1357.390654][T27198] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14518'. [ 1357.410270][T27198] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14518'. [ 1357.452523][T27198] netlink: 658 bytes leftover after parsing attributes in process `syz.1.14518'. [ 1357.473157][T21843] net_ratelimit: 5 callbacks suppressed [ 1357.473176][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1357.597559][T26879] veth0_vlan: entered promiscuous mode [ 1357.636998][T26879] veth1_vlan: entered promiscuous mode [ 1357.705062][T26879] veth0_macvtap: entered promiscuous mode [ 1357.730478][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1357.764882][T26879] veth1_macvtap: entered promiscuous mode [ 1357.820334][T26879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.838907][T27232] siw: device registration error -23 [ 1357.843721][T26879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.889143][T27234] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14528'. [ 1357.899246][T21840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.931142][T21840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.939971][T21840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.984887][T21840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.007460][T27242] netlink: 'syz.3.14529': attribute type 3 has an invalid length. [ 1358.026100][T27242] netlink: 666 bytes leftover after parsing attributes in process `syz.3.14529'. [ 1358.042584][T27241] netlink: 'syz.3.14529': attribute type 3 has an invalid length. [ 1358.071227][T27241] netlink: 666 bytes leftover after parsing attributes in process `syz.3.14529'. [ 1358.152112][T27244] netlink: 'syz.2.14531': attribute type 13 has an invalid length. [ 1358.160964][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1358.201751][T20524] Bluetooth: hci2: command tx timeout [ 1358.371175][T21843] bond1: (slave bridge1): failed to get link speed/duplex [ 1358.476643][T27271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14538'. [ 1358.499562][T27272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14538'. [ 1358.500030][T27274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1358.605838][T27278] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14539'. [ 1358.614583][T21843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.631384][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1358.636776][T21843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.732242][T21843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.742358][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1358.756181][T21843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.887839][T27290] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1358.940579][T21840] bond1: (slave bridge1): failed to get link speed/duplex [ 1359.068429][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1359.094072][T27309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.126273][T27309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.500690][T21840] bond1: (slave bridge1): failed to get link speed/duplex [ 1359.610792][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1359.685210][T27351] : renamed from team_slave_1 (while UP) [ 1359.785791][T27356] tipc: Enabled bearer , priority 0 [ 1359.850084][T27356] syzkaller0: entered promiscuous mode [ 1359.858941][T27356] syzkaller0: entered allmulticast mode [ 1359.873031][T27356] tipc: Resetting bearer [ 1359.902100][T27346] tipc: Resetting bearer [ 1361.653780][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1361.831157][T27346] tipc: Disabling bearer [ 1362.052268][T27403] team0: Caught tx_queue_len zero misconfig [ 1362.071542][T27403] ip6tnl0: Caught tx_queue_len zero misconfig [ 1362.176247][T27412] netlink: 'syz.4.14574': attribute type 142 has an invalid length. [ 1362.194154][T27416] xt_socket: unknown flags 0x50 [ 1362.214800][T27412] __nla_validate_parse: 15 callbacks suppressed [ 1362.214816][T27412] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14574'. [ 1362.223273][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14575'. [ 1362.283091][T27424] ipt_REJECT: ECHOREPLY no longer supported. [ 1362.301301][T27422] veth0_macvtap: left promiscuous mode [ 1362.411304][ T5936] IPVS: starting estimator thread 0... [ 1362.453121][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14579'. [ 1362.481424][T27430] bridge: RTM_NEWNEIGH with invalid ether address [ 1362.514355][T27435] IPVS: using max 37 ests per chain, 88800 per kthread [ 1362.560998][T21842] net_ratelimit: 7 callbacks suppressed [ 1362.561017][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1362.851192][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1362.939992][T27464] netlink: 'syz.1.14587': attribute type 1 has an invalid length. [ 1362.989176][T27467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14588'. [ 1363.000665][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.124721][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.141902][T27472] netlink: 'syz.0.14590': attribute type 33 has an invalid length. [ 1363.226914][T27472] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1363.262552][T27472] bond3 (unregistering): Released all slaves [ 1363.394662][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.482305][T27497] netlink: 'syz.1.14595': attribute type 64 has an invalid length. [ 1363.506691][T27497] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14595'. [ 1363.515966][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.621912][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.730525][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.751833][T27516] veth0_to_team: Caught tx_queue_len zero misconfig [ 1363.756972][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14605'. [ 1363.765434][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14604'. [ 1363.778791][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14602'. [ 1363.861013][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1363.898789][T27528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14607'. [ 1363.931666][T27528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14607'. [ 1363.945521][T27532] tipc: Enabling of bearer rejected, failed to enable media [ 1363.981565][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1364.298282][T27561] bridge0: port 1(ipvlan2) entered blocking state [ 1364.305334][T27561] bridge0: port 1(ipvlan2) entered disabled state [ 1364.312545][T27561] ipvlan2: entered allmulticast mode [ 1364.317925][T27561] bridge0: entered allmulticast mode [ 1364.327104][T27561] ipvlan2: left allmulticast mode [ 1364.332893][T27561] bridge0: left allmulticast mode [ 1364.477580][T27574] Unknown options in mask b7f2 [ 1364.483776][T27575] netlink: 'syz.1.14620': attribute type 32 has an invalid length. [ 1364.557088][T27577] netlink: 'syz.2.14621': attribute type 1 has an invalid length. [ 1364.600339][T27584] netlink: 'syz.4.14623': attribute type 1 has an invalid length. [ 1364.624088][T27584] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1364.640991][T27584] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1364.824807][T27597] netlink: 'syz.1.14627': attribute type 1 has an invalid length. [ 1365.054125][T27618] x_tables: unsorted entry at hook 2 [ 1365.154994][T27629] IPv6: NLM_F_CREATE should be specified when creating new route [ 1365.335121][T27634] netlink: 'syz.4.14638': attribute type 1 has an invalid length. [ 1365.581526][T27654] syzkaller0: entered promiscuous mode [ 1365.587079][T27654] syzkaller0: entered allmulticast mode [ 1365.674032][T27663] tipc: Enabling of bearer rejected, already enabled [ 1366.185130][T27691] netlink: 'syz.4.14652': attribute type 1 has an invalid length. [ 1366.309956][T27692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1366.349159][T27700] veth0: entered promiscuous mode [ 1366.394002][T27699] veth0: left promiscuous mode [ 1366.840477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.848569][ C1] lec:lec_tx_timeout: lec0 [ 1367.437418][T27775] __nla_validate_parse: 15 callbacks suppressed [ 1367.437438][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14676'. [ 1367.478876][T22356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1367.490021][T22356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1367.499821][T22356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1367.511054][T22356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1367.518946][T22356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1367.572932][T27776] lo speed is unknown, defaulting to 1000 [ 1367.661073][T27035] net_ratelimit: 30 callbacks suppressed [ 1367.661094][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1367.810208][T27784] netlink: 'syz.0.14679': attribute type 3 has an invalid length. [ 1367.831157][T27792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14682'. [ 1368.005082][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14683'. [ 1368.030969][T27799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14684'. [ 1368.071564][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1368.085754][T27799] IPVS: Error connecting to the multicast addr [ 1368.102858][T27776] chnl_net:caif_netlink_parms(): no params data found [ 1368.167994][T27035] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.194882][T27035] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.276490][T27814] syzkaller0: entered promiscuous mode [ 1368.283179][T27814] syzkaller0: entered allmulticast mode [ 1368.352349][T27035] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.364200][T27035] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.458329][T27825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14689'. [ 1368.504292][T27035] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.515388][T27035] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.570846][T27833] netlink: 'syz.4.14692': attribute type 21 has an invalid length. [ 1368.584593][T27776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.594530][T27776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.604575][T27776] bridge_slave_0: entered allmulticast mode [ 1368.612270][T27776] bridge_slave_0: entered promiscuous mode [ 1368.619561][T27833] netlink: 'syz.4.14692': attribute type 1 has an invalid length. [ 1368.632926][T27035] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.644430][T27035] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.664471][T27776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.686320][T27776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.701586][T27776] bridge_slave_1: entered allmulticast mode [ 1368.709824][T27776] bridge_slave_1: entered promiscuous mode [ 1368.721814][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1368.784934][T27776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.815593][T27776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.854808][T21842] bond1: (slave bridge1): failed to get link speed/duplex [ 1368.924002][T27776] team0: Port device team_slave_0 added [ 1368.924184][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14696'. [ 1368.936640][T27776] team0: Port device team_slave_1 added [ 1368.947189][T21842] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.055712][T25696] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.068803][T27776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.078940][T27776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.108152][T27776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.140012][T25696] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.168038][T27859] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14698'. [ 1369.170897][T25696] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.240983][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1369.249498][T27776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.275236][T27776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.318412][T27776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.562319][T22356] Bluetooth: hci3: command tx timeout [ 1369.581875][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14701'. [ 1370.318235][T27035] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1370.356315][T27035] dvmrp0 (unregistering): left allmulticast mode [ 1370.565281][T27035] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1370.665122][T27035] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1370.674827][T27035] bond0 (unregistering): Released all slaves [ 1370.685538][T27035] bond1 (unregistering): Released all slaves [ 1370.698336][T27035] bond2 (unregistering): Released all slaves [ 1370.712633][T27035] bond3 (unregistering): Released all slaves [ 1370.727318][T27035] bond4 (unregistering): Released all slaves [ 1370.740254][T27035] bond5 (unregistering): Released all slaves [ 1370.757119][T27035] bond6 (unregistering): Released all slaves [ 1370.773540][T27035] bond7 (unregistering): Released all slaves [ 1370.789737][T27035] bond8 (unregistering): Released all slaves [ 1370.806428][T27035] bond9 (unregistering): Released all slaves [ 1370.819258][T27035] bond10 (unregistering): Released all slaves [ 1370.880494][T21840] bond1: (slave bridge1): failed to get link speed/duplex [ 1370.995208][T27920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14708'. [ 1370.998929][T21840] bond1: (slave bridge1): failed to get link speed/duplex [ 1371.016396][T27921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14708'. [ 1371.035793][T27035] 9: left promiscuous mode [ 1371.099059][T27776] hsr_slave_0: entered promiscuous mode [ 1371.115632][T27776] hsr_slave_1: entered promiscuous mode [ 1371.128551][T27776] debugfs: 'hsr0' already exists in 'hsr' [ 1371.134980][T27776] Cannot create hsr debugfs directory [ 1371.162062][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1371.190278][T27035] tipc: Left network mode [ 1371.572070][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1371.640769][T22356] Bluetooth: hci3: command tx timeout [ 1371.760213][T27074] bond1: (slave bridge1): failed to get link speed/duplex [ 1372.102946][T27776] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.508938][T27973] __nla_validate_parse: 7 callbacks suppressed [ 1372.508956][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14717'. [ 1372.539083][T27960] ip6tnl5: entered allmulticast mode [ 1372.558195][T27776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.591497][T27970] netlink: 'syz.3.14717': attribute type 12 has an invalid length. [ 1372.600287][T27970] netlink: 'syz.3.14717': attribute type 29 has an invalid length. [ 1372.614120][T27970] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14717'. [ 1372.631705][T27970] netlink: 59 bytes leftover after parsing attributes in process `syz.3.14717'. [ 1372.688189][T27977] net_ratelimit: 3 callbacks suppressed [ 1372.688209][T27977] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1372.719441][T27776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.752928][T27035] hsr_slave_0: left promiscuous mode [ 1372.767925][T27035] 0: left promiscuous mode [ 1372.775794][ T9431] lec:lec_start_xmit: lec0:No lecd attached [ 1372.796238][T27035] vlan0: left allmulticast mode [ 1372.803037][T27035] veth0_vlan: left allmulticast mode [ 1372.808340][T27035] vlan0: left promiscuous mode [ 1372.813939][T27035] veth1_macvtap: left promiscuous mode [ 1372.819403][T27035] veth0_macvtap: left promiscuous mode [ 1372.825279][T27035] veth1_vlan: left promiscuous mode [ 1372.830583][T27035] veth0_vlan: left promiscuous mode [ 1372.946965][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14719'. [ 1373.655556][T27776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.679407][T27980] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1373.739704][T22356] Bluetooth: hci3: command tx timeout [ 1373.781498][T25698] bond1: (slave bridge1): failed to get link speed/duplex [ 1373.892278][T25698] bond1: (slave bridge1): failed to get link speed/duplex [ 1373.938241][T27999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14721'. [ 1374.001359][T25698] bond1: (slave bridge1): failed to get link speed/duplex [ 1374.122541][T25698] bond1: (slave bridge1): failed to get link speed/duplex [ 1374.185893][T27776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1374.297778][T27776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1374.340077][T28020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14728'. [ 1374.420523][T27776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1374.437294][T27035] IPVS: stop unused estimator thread 0... [ 1374.466409][T27776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1374.597630][T28035] netlink: 'syz.2.14729': attribute type 12 has an invalid length. [ 1374.607067][T28035] netlink: 'syz.2.14729': attribute type 29 has an invalid length. [ 1374.615711][T28035] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14729'. [ 1374.632993][T28035] netlink: 'syz.2.14729': attribute type 2 has an invalid length. [ 1374.648946][T28035] netlink: 'syz.2.14729': attribute type 3 has an invalid length. [ 1374.669093][T28035] netlink: 11 bytes leftover after parsing attributes in process `syz.2.14729'. [ 1374.696234][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1374.821295][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1374.894189][T28059] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1374.970548][T25696] bond1: (slave bridge1): failed to get link speed/duplex [ 1374.995539][T27776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.101338][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1375.142266][T27776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.159245][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14737'. [ 1375.168314][T27035] bond1: (slave bridge1): failed to get link speed/duplex [ 1375.179390][T21840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.186565][T21840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.208980][T28085] FAULT_INJECTION: forcing a failure. [ 1375.208980][T28085] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.231454][T28085] CPU: 0 UID: 0 PID: 28085 Comm: syz.0.14737 Not tainted syzkaller #0 PREEMPT(full) [ 1375.231478][T28085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1375.231490][T28085] Call Trace: [ 1375.231497][T28085] [ 1375.231505][T28085] dump_stack_lvl+0xe8/0x150 [ 1375.231534][T28085] should_fail_ex+0x412/0x560 [ 1375.231579][T28085] should_failslab+0xa8/0x100 [ 1375.231602][T28085] ? skb_clone+0x212/0x3a0 [ 1375.231625][T28085] kmem_cache_alloc_noprof+0x87/0x650 [ 1375.231653][T28085] skb_clone+0x212/0x3a0 [ 1375.231675][T28085] __netlink_deliver_tap+0x404/0x850 [ 1375.231716][T28085] ? netlink_deliver_tap+0x2e/0x1b0 [ 1375.231741][T28085] netlink_deliver_tap+0x19c/0x1b0 [ 1375.231766][T28085] netlink_sendskb+0x68/0x140 [ 1375.231790][T28085] netlink_unicast+0x3a3/0x9b0 [ 1375.231820][T28085] ? __pfx_netlink_unicast+0x10/0x10 [ 1375.231850][T28085] netlink_rcv_skb+0x2b6/0x4b0 [ 1375.231874][T28085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1375.232001][T28085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1375.232044][T28085] ? netlink_deliver_tap+0x2e/0x1b0 [ 1375.232075][T28085] netlink_unicast+0x80f/0x9b0 [ 1375.232104][T28085] ? __pfx_netlink_unicast+0x10/0x10 [ 1375.232128][T28085] ? netlink_sendmsg+0x650/0xb40 [ 1375.232150][T28085] ? skb_put+0x11b/0x210 [ 1375.232185][T28085] netlink_sendmsg+0x813/0xb40 [ 1375.232217][T28085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.232245][T28085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1375.232272][T28085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1375.232296][T28085] ____sys_sendmsg+0x972/0x9f0 [ 1375.232323][T28085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1375.232351][T28085] ? import_iovec+0x73/0xa0 [ 1375.232387][T28085] ___sys_sendmsg+0x2a5/0x360 [ 1375.232412][T28085] ? __pfx____sys_sendmsg+0x10/0x10 [ 1375.232471][T28085] ? __fget_files+0x2a/0x420 [ 1375.232495][T28085] ? __fget_files+0x3a0/0x420 [ 1375.232529][T28085] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1375.232550][T28085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1375.232578][T28085] ? __pfx_ksys_write+0x10/0x10 [ 1375.232609][T28085] do_syscall_64+0x14d/0xf80 [ 1375.232626][T28085] ? trace_irq_disable+0x3b/0x150 [ 1375.232650][T28085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.232669][T28085] ? clear_bhb_loop+0x40/0x90 [ 1375.232689][T28085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.232707][T28085] RIP: 0033:0x7fc0f1d9c799 [ 1375.232725][T28085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.232740][T28085] RSP: 002b:00007fc0efff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1375.232759][T28085] RAX: ffffffffffffffda RBX: 00007fc0f2016090 RCX: 00007fc0f1d9c799 [ 1375.232772][T28085] RDX: 0000000004000850 RSI: 0000200000000800 RDI: 0000000000000003 [ 1375.232784][T28085] RBP: 00007fc0efff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.232795][T28085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.232806][T28085] R13: 00007fc0f2016128 R14: 00007fc0f2016090 R15: 00007ffe86840ce8 [ 1375.232836][T28085] [ 1375.237069][T27035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.320124][T28093] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1375.321207][T27035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.777945][T28108] netlink: 'syz.0.14741': attribute type 8 has an invalid length. [ 1375.803497][T22356] Bluetooth: hci3: command tx timeout [ 1375.894947][T27776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.959984][T28120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1376.058572][T27776] veth0_vlan: entered promiscuous mode [ 1376.089654][T28125] netlink: 'syz.0.14745': attribute type 1 has an invalid length. [ 1376.107087][T28073] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1376.263354][T27776] veth1_vlan: entered promiscuous mode [ 1376.363805][T27776] veth0_macvtap: entered promiscuous mode [ 1376.392460][T27776] veth1_macvtap: entered promiscuous mode [ 1376.445651][T27776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.499280][T27776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.547728][T27074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.621388][T27074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.630255][T27074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.659052][T27074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.839981][T25698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.865905][T25698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.953968][T27074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.975439][T27074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.001329][ C1] ------------[ cut here ]------------ [ 1377.007389][ C1] ODEBUG: free active (active state 0) object: ffff8880b39b0c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1377.020406][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: dhcpcd-run-hook/28172 [ 1377.031685][ C1] Modules linked in: [ 1377.036046][ C1] CPU: 1 UID: 0 PID: 28172 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 1377.045925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1377.056045][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1377.062443][ C1] Code: 89 44 24 20 e8 c7 34 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 b8 27 8c 48 c7 c2 40 be 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1377.082101][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 1377.088187][ C1] RAX: ffffffff8a95d450 RBX: ffffffff9a4bb998 RCX: 0000000000000000 [ 1377.096223][ C1] RDX: ffffffff8c27be40 RSI: ffffffff8c27b8c0 RDI: ffffffff901c58c0 [ 1377.104228][ C1] RBP: ffffffff8bcf3ca0 R08: ffff8880b39b0c90 R09: ffffffff8bcf4fc0 [ 1377.112265][ C1] R10: dffffc0000000000 R11: ffffffff81b1e270 R12: ffff8880b39b0e00 [ 1377.120252][ C1] R13: ffffffff901c58c0 R14: ffff8880b39b0000 R15: ffff8880b39b0c90 [ 1377.128272][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1377.137253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.143879][ C1] CR2: 00007f0cb7b8a7d0 CR3: 0000000066acc000 CR4: 00000000003526f0 [ 1377.151906][ C1] Call Trace: [ 1377.155197][ C1] [ 1377.158052][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1377.163757][ C1] kfree+0x13a/0x630 [ 1377.167673][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1377.172841][ C1] rose_timer_expiry+0x4cb/0x600 [ 1377.177805][ C1] call_timer_fn+0x192/0x640 [ 1377.182482][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1377.187953][ C1] ? call_timer_fn+0xd4/0x640 [ 1377.192706][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1377.197849][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.203133][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1377.208612][ C1] __run_timer_base+0x652/0x8b0 [ 1377.213538][ C1] ? ktime_get+0x45/0x200 [ 1377.217893][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1377.223347][ C1] ? sched_clock_cpu+0x74/0x440 [ 1377.228226][ C1] run_timer_softirq+0xb7/0x170 [ 1377.233161][ C1] handle_softirqs+0x22a/0x870 [ 1377.237952][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1377.242778][ C1] __irq_exit_rcu+0x5f/0x150 [ 1377.247384][ C1] irq_exit_rcu+0x9/0x30 [ 1377.251685][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1377.257343][ C1] [ 1377.260282][ C1] [ 1377.263264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1377.269258][ C1] RIP: 0010:page_table_check_clear+0x25a/0x5f0 [ 1377.275481][ C1] Code: 4c 89 ef e8 08 ef ff ff 48 85 c0 0f 84 d9 01 00 00 48 89 c5 41 bd 01 00 00 00 48 c7 c0 e0 a0 2e 9a 48 c1 e8 03 48 89 44 24 08 <4c> 8b 3d 3f 55 50 0c 49 01 ef 48 83 7c 24 10 00 75 75 4c 89 ff be [ 1377.295148][ C1] RSP: 0018:ffffc90005a3f590 EFLAGS: 00000a02 [ 1377.301278][ C1] RAX: 1ffffffff345d41c RBX: 0000000000000001 RCX: ffff8880530f5b80 [ 1377.309267][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.317349][ C1] RBP: ffff88801e5a5450 R08: ffffffff823c1444 R09: ffffffff8e7602e0 [ 1377.325359][ C1] R10: dffffc0000000000 R11: fffff940003ea209 R12: 000000000007d441 [ 1377.333399][ C1] R13: 0000000000000001 R14: ffffea0001f51048 R15: ffffea0001f51058 [ 1377.341432][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1377.347018][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1377.352643][ C1] unmap_page_range+0x33b3/0x48f0 [ 1377.357742][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1377.363198][ C1] ? mas_find+0xb0e/0xd30 [ 1377.367647][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1377.372204][ C1] unmap_vmas+0x48f/0x6a0 [ 1377.376560][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1377.381506][ C1] exit_mmap+0x280/0xa10 [ 1377.385769][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1377.390615][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1377.395332][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1377.400606][ C1] __mmput+0x118/0x430 [ 1377.404705][ C1] exit_mm+0x168/0x220 [ 1377.408797][ C1] do_exit+0x6a2/0x23c0 [ 1377.413026][ C1] ? __pfx_do_exit+0x10/0x10 [ 1377.417633][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1377.422732][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.427956][ C1] do_group_exit+0x21b/0x2d0 [ 1377.432610][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1377.437650][ C1] x64_sys_call+0x221a/0x2240 [ 1377.442355][ C1] do_syscall_64+0x14d/0xf80 [ 1377.446956][ C1] ? trace_irq_disable+0x3b/0x150 [ 1377.452004][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.458084][ C1] ? clear_bhb_loop+0x40/0x90 [ 1377.462786][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.468688][ C1] RIP: 0033:0x7f0cb7a886c5 [ 1377.473142][ C1] Code: Unable to access opcode bytes at 0x7f0cb7a8869b. [ 1377.480161][ C1] RSP: 002b:00007fff55d86ee8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1377.488594][ C1] RAX: ffffffffffffffda RBX: 00007fff55d87204 RCX: 00007f0cb7a886c5 [ 1377.496608][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1377.504625][ C1] RBP: 0000000000000003 R08: 00007fff55d86fe0 R09: 0000000000000002 [ 1377.512634][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1377.520650][ C1] R13: 00007fff55d87220 R14: 00007f0cb7c98000 R15: 000055ee0dfd5d98 [ 1377.528650][ C1] [ 1377.531735][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1377.539015][ C1] CPU: 1 UID: 0 PID: 28172 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 1377.548810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1377.558871][ C1] Call Trace: [ 1377.562139][ C1] [ 1377.564970][ C1] vpanic+0x56c/0xa60 [ 1377.568944][ C1] ? __pfx__printk+0x10/0x10 [ 1377.573517][ C1] ? __pfx_vpanic+0x10/0x10 [ 1377.578117][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1377.583388][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1377.588580][ C1] panic+0xc5/0xd0 [ 1377.592301][ C1] ? __pfx_panic+0x10/0x10 [ 1377.596745][ C1] __warn+0x315/0x4f0 [ 1377.600720][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1377.606430][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1377.612135][ C1] __report_bug+0x29a/0x540 [ 1377.616772][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1377.622500][ C1] ? __pfx___report_bug+0x10/0x10 [ 1377.627546][ C1] report_bug_entry+0x19a/0x290 [ 1377.632415][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1377.638136][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1377.643851][ C1] handle_bug+0xce/0x200 [ 1377.648113][ C1] exc_invalid_op+0x1a/0x50 [ 1377.652612][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1377.657452][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1377.663775][ C1] Code: 89 44 24 20 e8 c7 34 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 b8 27 8c 48 c7 c2 40 be 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1377.683374][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 1377.689436][ C1] RAX: ffffffff8a95d450 RBX: ffffffff9a4bb998 RCX: 0000000000000000 [ 1377.697401][ C1] RDX: ffffffff8c27be40 RSI: ffffffff8c27b8c0 RDI: ffffffff901c58c0 [ 1377.705369][ C1] RBP: ffffffff8bcf3ca0 R08: ffff8880b39b0c90 R09: ffffffff8bcf4fc0 [ 1377.713348][ C1] R10: dffffc0000000000 R11: ffffffff81b1e270 R12: ffff8880b39b0e00 [ 1377.721309][ C1] R13: ffffffff901c58c0 R14: ffff8880b39b0000 R15: ffff8880b39b0c90 [ 1377.729304][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1377.734692][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1377.740334][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1377.745983][ C1] kfree+0x13a/0x630 [ 1377.749874][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1377.754983][ C1] rose_timer_expiry+0x4cb/0x600 [ 1377.759917][ C1] call_timer_fn+0x192/0x640 [ 1377.764516][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1377.769964][ C1] ? call_timer_fn+0xd4/0x640 [ 1377.774636][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1377.779754][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.784948][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1377.790399][ C1] __run_timer_base+0x652/0x8b0 [ 1377.795337][ C1] ? ktime_get+0x45/0x200 [ 1377.799669][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1377.805036][ C1] ? sched_clock_cpu+0x74/0x440 [ 1377.809884][ C1] run_timer_softirq+0xb7/0x170 [ 1377.814728][ C1] handle_softirqs+0x22a/0x870 [ 1377.819490][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1377.824253][ C1] __irq_exit_rcu+0x5f/0x150 [ 1377.828850][ C1] irq_exit_rcu+0x9/0x30 [ 1377.833104][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1377.838742][ C1] [ 1377.841663][ C1] [ 1377.844590][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1377.850564][ C1] RIP: 0010:page_table_check_clear+0x25a/0x5f0 [ 1377.856716][ C1] Code: 4c 89 ef e8 08 ef ff ff 48 85 c0 0f 84 d9 01 00 00 48 89 c5 41 bd 01 00 00 00 48 c7 c0 e0 a0 2e 9a 48 c1 e8 03 48 89 44 24 08 <4c> 8b 3d 3f 55 50 0c 49 01 ef 48 83 7c 24 10 00 75 75 4c 89 ff be [ 1377.876319][ C1] RSP: 0018:ffffc90005a3f590 EFLAGS: 00000a02 [ 1377.882387][ C1] RAX: 1ffffffff345d41c RBX: 0000000000000001 RCX: ffff8880530f5b80 [ 1377.890350][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.898321][ C1] RBP: ffff88801e5a5450 R08: ffffffff823c1444 R09: ffffffff8e7602e0 [ 1377.906293][ C1] R10: dffffc0000000000 R11: fffff940003ea209 R12: 000000000007d441 [ 1377.914253][ C1] R13: 0000000000000001 R14: ffffea0001f51048 R15: ffffea0001f51058 [ 1377.922222][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1377.927771][ C1] ? page_table_check_clear+0x144/0x5f0 [ 1377.933313][ C1] unmap_page_range+0x33b3/0x48f0 [ 1377.938382][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1377.943766][ C1] ? mas_find+0xb0e/0xd30 [ 1377.948099][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1377.952599][ C1] unmap_vmas+0x48f/0x6a0 [ 1377.956935][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1377.961798][ C1] exit_mmap+0x280/0xa10 [ 1377.966041][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1377.970814][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1377.975508][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1377.980731][ C1] __mmput+0x118/0x430 [ 1377.984797][ C1] exit_mm+0x168/0x220 [ 1377.988857][ C1] do_exit+0x6a2/0x23c0 [ 1377.993011][ C1] ? __pfx_do_exit+0x10/0x10 [ 1377.997597][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1378.002621][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.007821][ C1] do_group_exit+0x21b/0x2d0 [ 1378.012407][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1378.017425][ C1] x64_sys_call+0x221a/0x2240 [ 1378.022798][ C1] do_syscall_64+0x14d/0xf80 [ 1378.027378][ C1] ? trace_irq_disable+0x3b/0x150 [ 1378.032400][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.038475][ C1] ? clear_bhb_loop+0x40/0x90 [ 1378.043147][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.049033][ C1] RIP: 0033:0x7f0cb7a886c5 [ 1378.053438][ C1] Code: Unable to access opcode bytes at 0x7f0cb7a8869b. [ 1378.060439][ C1] RSP: 002b:00007fff55d86ee8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1378.068843][ C1] RAX: ffffffffffffffda RBX: 00007fff55d87204 RCX: 00007f0cb7a886c5 [ 1378.076806][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1378.084766][ C1] RBP: 0000000000000003 R08: 00007fff55d86fe0 R09: 0000000000000002 [ 1378.092729][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1378.100689][ C1] R13: 00007fff55d87220 R14: 00007f0cb7c98000 R15: 000055ee0dfd5d98 [ 1378.108669][ C1] [ 1378.111933][ C1] Kernel Offset: disabled [ 1378.116248][ C1] Rebooting in 86400 seconds..