last executing test programs: 5.066868337s ago: executing program 2 (id=7172): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 4.004604232s ago: executing program 4 (id=7177): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 3.928647242s ago: executing program 2 (id=7178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)='%+9llu \x00'}, 0x7f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x5, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 3.314982662s ago: executing program 2 (id=7182): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 3.260824527s ago: executing program 0 (id=7183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@loopback, @private=0xa010100, 0x5, 0xe}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 3.189655936s ago: executing program 3 (id=7184): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1412], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.031152644s ago: executing program 4 (id=7185): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.249078031s ago: executing program 3 (id=7186): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r4, 0x21}, 0x80, 0x0}, 0x4) 2.23432791s ago: executing program 1 (id=7187): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0xc, 0x0, 0x9, 0x9, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) 2.11197947s ago: executing program 4 (id=7188): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 2.030842694s ago: executing program 0 (id=7189): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)='%+9llu \x00'}, 0x7f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x5, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 2.013825352s ago: executing program 2 (id=7190): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 1.982995177s ago: executing program 3 (id=7191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfce) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000004fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000000000000400000004000000"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4c392ea2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x97}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9ad}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x68}}, 0xf371cc2a4cc195fb) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x9732) listen(r6, 0xec) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r7, &(0x7f0000000000)="41000200010001", 0x7) 1.69314574s ago: executing program 0 (id=7192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcff", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884) 1.579731067s ago: executing program 3 (id=7193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xca, 0x2, {{'salsa20-generic\x00'}, 0x410, "c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b92856"}}, @lastused={0xc, 0xf, 0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.431090157s ago: executing program 1 (id=7194): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.088761738s ago: executing program 1 (id=7195): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000002202000000000000020000004000880000000ffff000000"], 0x20}}, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$l2tp6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close(r4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100), 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00080028bd7000fbdbdf258400e800dcb1e48f114f737c7a9b596494596d70a0c6667864a635b40d5d1f90eba2b8e93284c90b99036c3202117fac6e59d2aa060c7a9ae28658b6169f3c66a7db5499b6d19429d868054749264a99c3694afbed50b99fb85b734b45ec062861e4094df395c279f8260301e91b9d5fd61bc8c2a9e1f88017b8980170ec5b451ab4ce284921d3c6b2a966bcad903b305b7975781644ac49"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1}, 0x0) 1.08379119s ago: executing program 4 (id=7196): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1418], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 890.820922ms ago: executing program 1 (id=7197): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 809.74482ms ago: executing program 2 (id=7198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcff", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884) 758.034545ms ago: executing program 0 (id=7199): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000002202000000000000020000004000880000000ffff0000000000"], 0x20}}, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$l2tp6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close(r4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100), 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a00080028bd7000fbdbdf258400e800dcb1e48f114f737c7a9b596494596d70a0c6667864a635b40d5d1f90eba2b8e93284c90b99036c3202117fac6e59d2aa060c7a9ae28658b6169f3c66a7db5499b6d19429d868054749264a99c3694afbed50b99fb85b734b45ec062861e4094df395c279f8260301e91b9d5fd61bc8c2a9e1f88017b8980170ec5b451ab4ce284921d3c6b2a966bcad903b305b7975781644ac49"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1}, 0x0) 587.84254ms ago: executing program 0 (id=7200): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 523.661941ms ago: executing program 3 (id=7201): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)='%+9llu \x00'}, 0x7f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x5, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 374.749954ms ago: executing program 4 (id=7202): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 306.852607ms ago: executing program 1 (id=7203): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002c80)={'syztnl1\x00', &(0x7f0000002c00)={'ip6tnl0\x00', 0x0, 0x2f, 0x57, 0x9, 0xc, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x7800, 0x8000, 0x6, 0x1}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002e40)={&(0x7f0000002cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@enum64={0xe, 0x3, 0x0, 0x13, 0x1, 0xb, [{0x6, 0x9, 0xcf}, {0xd, 0x2, 0x1}, {0x4, 0x5, 0x6}]}]}, {0x0, [0x5f, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000002d40)=""/250, 0x4f, 0xfa, 0x1, 0xc28, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002f00)={0xff, 0x0}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000003040)={0xffffffffffffffff, &(0x7f0000002f40)='aegis128-generic\x00', 0x800, &(0x7f0000002f80)={@align=0x4, {0xc7a, 0xa, 0x47e6, 0x2}}, 0x5, &(0x7f0000002fc0), &(0x7f0000003000)=0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003080)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003180)={0x5, 0xd, &(0x7f0000002a80)=@raw=[@generic={0x7, 0x2, 0x7, 0x2, 0xbbfe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xc82}, @call={0x85, 0x0, 0x0, 0xa5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000002b00)='syzkaller\x00', 0xb5, 0x82, &(0x7f0000002b40)=""/130, 0x41100, 0x1, '\x00', r1, @fallback=0x30, r2, 0x8, &(0x7f0000002e80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002ec0)={0x5, 0x4, 0xd4b, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f00000030c0)=[r4, r5, r10], &(0x7f0000003100)=[{0x3, 0x4, 0xe, 0xc}, {0x4, 0x3, 0x6, 0x2}, {0x4, 0x4, 0x8, 0xf}, {0x2, 0x5, 0x6, 0x3}, {0x4, 0x1, 0x1, 0x4}, {0x3, 0x3, 0x0, 0x5}], 0x10, 0x1}, 0x94) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3}, 0x24}}, 0x0) recvmmsg(r11, &(0x7f0000002840)=[{{&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/44, 0x2c}], 0x4, &(0x7f00000004c0)=""/147, 0x93}, 0x10000000}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000000840)=""/76, 0x4c}], 0x4, &(0x7f0000000900)=""/252, 0xfc}, 0x10}, {{&(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/31, 0x1f}, {&(0x7f0000001ac0)=""/163, 0xa3}, {&(0x7f0000001b80)=""/60, 0x3c}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/209, 0xd1}, {&(0x7f0000001d40)=""/204, 0xcc}, {&(0x7f0000001e40)=""/16, 0x10}, {&(0x7f0000001e80)=""/185, 0xb9}, {&(0x7f0000001f40)=""/15, 0xf}], 0xa, &(0x7f0000002040)=""/35, 0x23}, 0x4}, {{&(0x7f0000002080)=@phonet, 0x80, &(0x7f0000002400)=[{&(0x7f0000002100)=""/237, 0xed}, {&(0x7f0000002200)=""/138, 0x8a}, {&(0x7f00000022c0)=""/119, 0x77}, {&(0x7f0000002340)=""/153, 0x99}], 0x4}, 0x6}, {{&(0x7f0000002440)=@rc, 0x80, &(0x7f0000002580)=[{&(0x7f00000024c0)=""/171, 0xab}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/104, 0x68}, {&(0x7f0000002640)=""/55, 0x37}], 0x2, &(0x7f00000026c0)=""/12, 0xc}, 0xb4c}, {{&(0x7f0000002700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)}], 0x2}, 0x802c}], 0x7, 0x0, &(0x7f0000002a00)={0x0, 0x989680}) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) 205.302427ms ago: executing program 1 (id=7204): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 179.786941ms ago: executing program 0 (id=7205): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) 79.96297ms ago: executing program 2 (id=7206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xca, 0x2, {{'salsa20-generic\x00'}, 0x410, "c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b92856"}}, @lastused={0xc, 0xf, 0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080), 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 20.421332ms ago: executing program 4 (id=7207): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 0s ago: executing program 3 (id=7208): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) kernel console output (not intermixed with test programs): ered promiscuous mode [ 887.511149][T30067] syzkaller0: entered allmulticast mode [ 887.628307][ T3347] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 887.689718][T30082] netlink: 'syz.0.6439': attribute type 1 has an invalid length. [ 887.797000][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'. [ 887.811720][T30085] bond51: (slave bridge50): making interface the new active one [ 887.823549][T30085] bond51: (slave bridge50): Enslaving as an active interface with an up link [ 887.838239][T30082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6439'. [ 888.062393][T30099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6442'. [ 888.096059][T30100] netlink: 'syz.4.6443': attribute type 1 has an invalid length. [ 888.219302][T30102] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 888.241909][T30102] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 888.294902][T30100] bond56: (slave bridge47): making interface the new active one [ 888.304450][T30100] bond56: (slave bridge47): Enslaving as an active interface with an up link [ 888.326420][T30100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6443'. [ 888.335991][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6443'. [ 888.614353][T30116] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 889.033268][T30132] netlink: 'syz.4.6451': attribute type 1 has an invalid length. [ 889.150388][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 889.150424][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 889.295539][T30139] bond57: (slave bridge48): making interface the new active one [ 889.319245][T30139] bond57: (slave bridge48): Enslaving as an active interface with an up link [ 889.510765][T30146] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 889.525385][T30147] tipc: Enabling of bearer rejected, already enabled [ 889.631744][T30153] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 889.722585][T30158] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 889.835313][T30162] syzkaller1: entered promiscuous mode [ 889.845181][T30162] syzkaller1: entered allmulticast mode [ 890.043812][T30165] syzkaller0: entered promiscuous mode [ 890.055631][T30165] syzkaller0: entered allmulticast mode [ 890.254512][T30176] __nla_validate_parse: 7 callbacks suppressed [ 890.254531][T30176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6460'. [ 890.801915][T30188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6464'. [ 891.008858][T30193] netlink: 'syz.4.6465': attribute type 1 has an invalid length. [ 891.309094][T30200] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6467'. [ 891.313891][T30196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6465'. [ 891.340930][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6465'. [ 891.395381][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 891.452096][T30193] bond58: (slave bridge49): making interface the new active one [ 891.474726][T30193] bond58: (slave bridge49): Enslaving as an active interface with an up link [ 891.950638][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 891.954150][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 892.000076][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 892.014712][T30225] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6473'. [ 892.199638][T30227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6474'. [ 892.247175][T30233] syzkaller0: entered promiscuous mode [ 892.259166][T30233] syzkaller0: entered allmulticast mode [ 892.700112][T30245] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6478'. [ 892.963737][T30251] netlink: 'syz.3.6480': attribute type 1 has an invalid length. [ 893.220170][T30251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6480'. [ 893.227489][T30259] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 893.241430][T30253] bond59: (slave bridge54): making interface the new active one [ 893.272169][T30253] bond59: (slave bridge54): Enslaving as an active interface with an up link [ 894.177281][T30285] syzkaller0: entered promiscuous mode [ 894.189418][T30285] syzkaller0: entered allmulticast mode [ 894.740130][T30300] netlink: 'syz.2.6494': attribute type 1 has an invalid length. [ 895.058472][T30300] bond54: (slave bridge49): making interface the new active one [ 895.076515][T30300] bond54: (slave bridge49): Enslaving as an active interface with an up link [ 895.343449][T30324] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 895.923753][T30343] syzkaller1: entered promiscuous mode [ 895.942085][T30343] syzkaller1: entered allmulticast mode [ 896.202770][T30350] syzkaller1: entered promiscuous mode [ 896.214525][T30350] syzkaller1: entered allmulticast mode [ 896.484605][T30354] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 896.616402][T30355] __nla_validate_parse: 5 callbacks suppressed [ 896.616421][T30355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6506'. [ 896.729305][T30363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6511'. [ 896.754803][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6508'. [ 896.770011][T30354] bond55: (slave bridge50): making interface the new active one [ 896.779379][T30354] bond55: (slave bridge50): Enslaving as an active interface with an up link [ 897.689543][T30395] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6517'. [ 897.744416][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 897.778037][T30395] syzkaller1: entered promiscuous mode [ 897.821306][T30395] syzkaller1: entered allmulticast mode [ 898.111120][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 898.111152][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 898.278785][T30407] nbd: must specify at least one socket [ 898.642717][T30418] netlink: 'syz.4.6522': attribute type 1 has an invalid length. [ 898.879970][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6522'. [ 898.942882][T30418] bond59: (slave bridge50): making interface the new active one [ 898.961450][T30418] bond59: (slave bridge50): Enslaving as an active interface with an up link [ 899.082433][T30433] tipc: Enabling of bearer rejected, already enabled [ 899.116622][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6525'. [ 899.136254][T30435] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6526'. [ 899.179049][T30436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6525'. [ 899.251743][T30433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6525'. [ 899.608068][T30449] syzkaller1: entered promiscuous mode [ 899.636398][T30449] syzkaller1: entered allmulticast mode [ 900.362339][T30463] syzkaller0: entered promiscuous mode [ 900.367859][T30463] syzkaller0: entered allmulticast mode [ 900.427702][T30470] netlink: 'syz.2.6535': attribute type 1 has an invalid length. [ 900.518963][T30477] nbd: must specify at least one socket [ 900.787048][T30483] bond56: (slave bridge51): making interface the new active one [ 900.841057][T30483] bond56: (slave bridge51): Enslaving as an active interface with an up link [ 901.232522][T30504] bond52: (slave bridge51): Enslaving as an active interface with an up link [ 901.270039][T30501] macvlan4: entered promiscuous mode [ 901.282035][T30501] macvlan4: entered allmulticast mode [ 901.288619][T30501] bond52: entered promiscuous mode [ 901.294602][T30501] bridge51: entered promiscuous mode [ 901.301749][T30501] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 901.322435][T30501] bond52: left promiscuous mode [ 901.335032][T30501] bridge51: left promiscuous mode [ 901.542943][T30510] syzkaller0: entered promiscuous mode [ 901.577013][T30510] syzkaller0: entered allmulticast mode [ 901.685800][T30516] syzkaller1: entered promiscuous mode [ 901.698677][T30516] syzkaller1: entered allmulticast mode [ 901.790853][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 901.791761][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 901.885913][T30524] netlink: 'syz.3.6547': attribute type 1 has an invalid length. [ 902.076026][T30533] netlink: 'syz.0.6548': attribute type 1 has an invalid length. [ 902.110141][T30524] bond60: (slave bridge55): making interface the new active one [ 902.128360][T30524] bond60: (slave bridge55): Enslaving as an active interface with an up link [ 902.209513][T30532] macvlan6: entered promiscuous mode [ 902.223356][T30532] macvlan6: entered allmulticast mode [ 902.234174][T30532] bond60: entered promiscuous mode [ 902.239942][T30532] bridge55: entered promiscuous mode [ 902.248192][T30532] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 902.257224][T30532] bond60: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 902.274439][T30532] bond60: left promiscuous mode [ 902.279436][T30532] bridge55: left promiscuous mode [ 902.285680][T30537] netlink: 'syz.2.6550': attribute type 1 has an invalid length. [ 902.414284][T30535] bond53: (slave bridge52): making interface the new active one [ 902.445120][T30535] bond53: (slave bridge52): Enslaving as an active interface with an up link [ 902.530692][T30538] macvlan4: entered promiscuous mode [ 902.556019][T30538] macvlan4: entered allmulticast mode [ 902.581282][T30538] bond53: entered promiscuous mode [ 902.602282][T30538] bridge52: entered promiscuous mode [ 902.623161][T30538] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 902.635902][T30538] bond53: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 902.656053][T30538] bond53: left promiscuous mode [ 902.664437][T30538] bridge52: left promiscuous mode [ 902.765512][T30542] bond57: (slave bridge52): making interface the new active one [ 902.783299][T30542] bond57: (slave bridge52): Enslaving as an active interface with an up link [ 902.839899][T30554] __nla_validate_parse: 4 callbacks suppressed [ 902.839917][T30554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6552'. [ 902.866424][T30546] macvlan3: entered promiscuous mode [ 902.891989][T30546] macvlan3: entered allmulticast mode [ 902.915105][T30546] bond57: entered promiscuous mode [ 902.949559][T30546] bridge52: entered promiscuous mode [ 902.961603][T30546] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 902.985547][T30546] bond57: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 903.017315][T30546] bond57: left promiscuous mode [ 903.023473][T30546] bridge52: left promiscuous mode [ 903.036601][T30570] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 903.063764][T30545] syzkaller1: entered promiscuous mode [ 903.077938][T30545] syzkaller1: entered allmulticast mode [ 903.329216][T30575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6556'. [ 903.741445][T30596] netlink: 'syz.1.6563': attribute type 1 has an invalid length. [ 903.828054][T30601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6563'. [ 903.870421][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 903.870779][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 904.072689][T30596] bond54: (slave bridge46): making interface the new active one [ 904.109168][T30596] bond54: (slave bridge46): Enslaving as an active interface with an up link [ 904.165627][T30601] macvlan4: entered promiscuous mode [ 904.180713][T30601] macvlan4: entered allmulticast mode [ 904.204429][T30601] bond54: entered promiscuous mode [ 904.224378][T30601] bridge46: entered promiscuous mode [ 904.248681][T30601] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 904.267567][T30601] bond54: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 904.300902][T30601] bond54: left promiscuous mode [ 904.347552][T30601] bridge46: left promiscuous mode [ 904.698351][T30615] netlink: 'syz.1.6566': attribute type 1 has an invalid length. [ 904.704131][T30616] syzkaller1: entered promiscuous mode [ 904.722026][T30616] syzkaller1: entered allmulticast mode [ 904.966327][T30626] bond55: (slave bridge47): making interface the new active one [ 904.975976][T30626] bond55: (slave bridge47): Enslaving as an active interface with an up link [ 905.075226][T30615] macvlan4: entered promiscuous mode [ 905.111025][T30615] macvlan4: entered allmulticast mode [ 905.127737][T30615] bond55: entered promiscuous mode [ 905.146271][T30615] bridge47: entered promiscuous mode [ 905.169129][T30615] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 905.191976][T30615] bond55: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 905.212559][T30615] bond55: left promiscuous mode [ 905.218270][T30615] bridge47: left promiscuous mode [ 905.310044][T30637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6571'. [ 905.442649][T30641] netlink: 'syz.1.6573': attribute type 1 has an invalid length. [ 905.449001][T30643] tipc: Enabling of bearer rejected, failed to enable media [ 905.462073][T30644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6572'. [ 905.490754][T30643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6574'. [ 905.516448][T30646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6574'. [ 905.525571][T30641] bond56: (slave bridge48): making interface the new active one [ 905.533487][T30641] bond56: (slave bridge48): Enslaving as an active interface with an up link [ 905.593098][T30641] macvlan4: entered promiscuous mode [ 905.610961][T30641] macvlan4: entered allmulticast mode [ 905.619356][T30641] bond56: entered promiscuous mode [ 905.625448][T30643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6574'. [ 905.635660][T30641] bridge48: entered promiscuous mode [ 905.652697][T30641] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 905.666455][T30641] bond56: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 905.684619][T30641] bond56: left promiscuous mode [ 905.689595][T30641] bridge48: left promiscuous mode [ 905.927421][T30654] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 905.972453][T30654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6576'. [ 905.974669][T30658] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 905.981763][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6576'. [ 906.077600][T30661] bond58: (slave bridge53): making interface the new active one [ 906.089695][T30661] bond58: (slave bridge53): Enslaving as an active interface with an up link [ 906.117753][T30662] macvlan3: entered promiscuous mode [ 906.123846][T30662] macvlan3: entered allmulticast mode [ 906.135334][T30662] bond58: entered promiscuous mode [ 906.141094][T30662] bridge53: entered promiscuous mode [ 906.148972][T30662] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 906.171876][T30662] bond58: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 906.219799][T30662] bond58: left promiscuous mode [ 906.226431][T30662] bridge53: left promiscuous mode [ 906.502167][T30674] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 906.860103][T30683] netlink: 'syz.1.6582': attribute type 1 has an invalid length. [ 906.912817][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 906.920576][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 906.933197][T30688] syzkaller1: entered promiscuous mode [ 906.941885][T30688] syzkaller1: entered allmulticast mode [ 907.011747][T30683] bond57: (slave bridge49): making interface the new active one [ 907.035707][T30683] bond57: (slave bridge49): Enslaving as an active interface with an up link [ 907.050854][T30689] syzkaller0: entered promiscuous mode [ 907.056796][T30689] syzkaller0: entered allmulticast mode [ 907.088078][T30693] macvlan4: entered promiscuous mode [ 907.093805][T30693] macvlan4: entered allmulticast mode [ 907.101362][T30693] bond57: entered promiscuous mode [ 907.106668][T30693] bridge49: entered promiscuous mode [ 907.113681][T30693] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 907.123582][T30693] bond57: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 907.140585][T30693] bond57: left promiscuous mode [ 907.145577][T30693] bridge49: left promiscuous mode [ 907.224922][T30692] syzkaller1: entered promiscuous mode [ 907.231732][T30692] syzkaller1: entered allmulticast mode [ 907.733105][T30718] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 907.977649][T30723] __nla_validate_parse: 4 callbacks suppressed [ 907.977668][T30723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6592'. [ 908.800409][T30742] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 908.914004][T30746] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6596'. [ 909.071807][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 909.072253][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 909.346452][T30755] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 909.712897][T30764] netlink: 'syz.4.6602': attribute type 1 has an invalid length. [ 910.032143][T30758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 910.284279][T30785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6607'. [ 910.927909][T30813] netlink: 'syz.2.6613': attribute type 1 has an invalid length. [ 910.981648][T30818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6613'. [ 911.092676][T30813] bond59: (slave bridge54): making interface the new active one [ 911.127316][T30813] bond59: (slave bridge54): Enslaving as an active interface with an up link [ 911.172766][T30821] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 911.187192][T30818] macvlan3: entered promiscuous mode [ 911.213250][T30818] macvlan3: entered allmulticast mode [ 911.227479][T30818] bond59: entered promiscuous mode [ 911.243865][T30818] bridge54: entered promiscuous mode [ 911.261078][T30818] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 911.271583][T30818] bond59: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 911.291180][T30818] bond59: left promiscuous mode [ 911.310346][T30818] bridge54: left promiscuous mode [ 911.596887][T30832] netlink: 'syz.1.6617': attribute type 1 has an invalid length. [ 911.676894][T30843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6617'. [ 911.690995][ T135] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 911.736133][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6617'. [ 911.761613][T30829] syzkaller0: entered promiscuous mode [ 911.772218][T30829] syzkaller0: entered allmulticast mode [ 911.902618][T30832] bond58: (slave bridge50): making interface the new active one [ 911.932816][T30832] bond58: (slave bridge50): Enslaving as an active interface with an up link [ 911.959634][T30843] macvlan4: entered promiscuous mode [ 911.965814][T30843] macvlan4: entered allmulticast mode [ 911.972546][T30843] bond58: entered promiscuous mode [ 911.977794][T30843] bridge50: entered promiscuous mode [ 911.990097][T30843] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 912.015669][T30843] bond58: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 912.045999][T30843] bond58: left promiscuous mode [ 912.056140][T30843] bridge50: left promiscuous mode [ 912.171995][T30852] syzkaller0: entered promiscuous mode [ 912.200393][T30852] syzkaller0: entered allmulticast mode [ 912.708130][T30870] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 912.742434][T30873] syzkaller1: entered promiscuous mode [ 912.752446][T30873] syzkaller1: entered allmulticast mode [ 913.206356][T30883] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 913.715527][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6632'. [ 913.747615][T30899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 913.938093][T30903] tipc: Enabling of bearer rejected, failed to enable media [ 914.101072][T30915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6634'. [ 914.411301][T30924] netlink: 'syz.2.6638': attribute type 1 has an invalid length. [ 914.567755][T30932] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 914.584598][T30924] bond60: (slave bridge55): making interface the new active one [ 914.594204][T30924] bond60: (slave bridge55): Enslaving as an active interface with an up link [ 914.623773][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6638'. [ 914.816304][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6642'. [ 914.911365][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 914.911753][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 915.028719][T30946] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 915.191627][T30953] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 915.543238][T30969] netlink: 'syz.1.6648': attribute type 1 has an invalid length. [ 915.570017][T30973] netlink: 'syz.3.6650': attribute type 1 has an invalid length. [ 915.619309][ T135] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 915.637388][T30977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 915.654003][T30978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 915.678931][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6650'. [ 915.793623][T30964] syzkaller0: entered promiscuous mode [ 915.802394][T30964] syzkaller0: entered allmulticast mode [ 915.856180][T30977] bond59: (slave bridge51): making interface the new active one [ 915.873499][T30977] bond59: (slave bridge51): Enslaving as an active interface with an up link [ 915.909860][T30973] bond61: (slave bridge56): making interface the new active one [ 915.925641][T30973] bond61: (slave bridge56): Enslaving as an active interface with an up link [ 915.983774][T30969] macvlan4: entered promiscuous mode [ 915.989314][T30969] macvlan4: entered allmulticast mode [ 915.996154][T30969] bond59: entered promiscuous mode [ 916.002407][T30969] bridge51: entered promiscuous mode [ 916.008728][T30969] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 916.021027][T30969] bond59: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 916.055011][T30969] bond59: left promiscuous mode [ 916.063191][T30969] bridge51: left promiscuous mode [ 916.111148][T30978] macvlan6: entered promiscuous mode [ 916.116693][T30978] macvlan6: entered allmulticast mode [ 916.122198][T30983] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 916.133375][T30978] bond61: entered promiscuous mode [ 916.140179][T30978] bridge56: entered promiscuous mode [ 916.152279][T30978] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 916.162148][T30978] bond61: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 916.189354][T30978] bond61: left promiscuous mode [ 916.199288][T30978] bridge56: left promiscuous mode [ 916.296538][T30995] netlink: 'syz.0.6655': attribute type 1 has an invalid length. [ 916.341543][T30983] bond61: (slave bridge56): making interface the new active one [ 916.358796][T30983] bond61: (slave bridge56): Enslaving as an active interface with an up link [ 916.406947][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6652'. [ 916.587082][T30997] macvlan4: entered promiscuous mode [ 916.612490][T30997] macvlan4: entered allmulticast mode [ 916.633788][T30997] bond54: entered promiscuous mode [ 916.654020][T30997] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 916.671256][T30997] bond54: left promiscuous mode [ 916.832589][T30999] bond54: (slave bridge53): Enslaving as an active interface with a down link [ 917.012777][T31013] syzkaller1: entered promiscuous mode [ 917.039130][T31013] syzkaller1: entered allmulticast mode [ 917.120569][T31022] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6660'. [ 917.173416][T31024] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 917.382470][T31032] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 917.429166][T31032] tipc: Enabling of bearer rejected, already enabled [ 917.457618][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6662'. [ 917.586527][T31034] syzkaller0: entered promiscuous mode [ 917.610945][T31034] syzkaller0: entered allmulticast mode [ 917.658764][T31042] syzkaller1: entered promiscuous mode [ 917.687732][T31042] syzkaller1: entered allmulticast mode [ 917.768764][T31049] netlink: 'syz.4.6668': attribute type 1 has an invalid length. [ 918.111467][T31062] bond60: (slave bridge51): making interface the new active one [ 918.125304][T31062] bond60: (slave bridge51): Enslaving as an active interface with an up link [ 918.305074][T31073] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 918.736929][T31090] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 918.910996][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 918.911034][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 919.152603][T31099] syzkaller1: entered promiscuous mode [ 919.171949][T31099] syzkaller1: entered allmulticast mode [ 919.698306][T31108] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 920.188340][T31117] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 920.535160][T31130] syzkaller1: entered promiscuous mode [ 920.552681][T31130] syzkaller1: entered allmulticast mode [ 920.584110][T31133] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 920.972651][T31140] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 921.167852][T31150] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 921.315246][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 921.321439][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 921.774045][T31170] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 921.817622][T31173] __nla_validate_parse: 2 callbacks suppressed [ 921.817644][T31173] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6699'. [ 922.158725][T31181] syzkaller1: entered promiscuous mode [ 922.199596][T31181] syzkaller1: entered allmulticast mode [ 922.505162][T31187] syzkaller0: entered promiscuous mode [ 922.523489][T31187] syzkaller0: entered allmulticast mode [ 922.683655][T31202] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 923.151877][T31221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6714'. [ 923.227298][T31227] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6716'. [ 923.443335][T31236] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 924.026148][T31242] syzkaller0: entered promiscuous mode [ 924.052663][T31242] syzkaller0: entered allmulticast mode [ 924.141691][T31252] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6722'. [ 924.351019][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 924.357486][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 924.551662][T31268] syzkaller1: entered promiscuous mode [ 924.590753][T31268] syzkaller1: entered allmulticast mode [ 924.812345][T31276] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.177425][T31288] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.385751][T31297] tipc: Enabling of bearer rejected, failed to enable media [ 925.394938][T31297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6735'. [ 925.405968][T31297] netlink: 'syz.2.6735': attribute type 1 has an invalid length. [ 925.482816][T31297] bond62: entered promiscuous mode [ 925.488614][T31297] 8021q: adding VLAN 0 to HW filter on device bond62 [ 925.516924][T31297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6735'. [ 925.526449][T31297] bond62: entered allmulticast mode [ 925.550685][T31297] bond62: (slave bridge57): making interface the new active one [ 925.558681][T31297] bridge57: entered promiscuous mode [ 925.564917][T31297] bridge57: entered allmulticast mode [ 925.573119][T31297] bond62: (slave bridge57): Enslaving as an active interface with an up link [ 925.648395][T31306] tipc: Enabling of bearer rejected, failed to enable media [ 925.686942][T31306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6737'. [ 925.712003][T31306] netlink: 'syz.0.6737': attribute type 1 has an invalid length. [ 925.763216][T31306] bond55: entered promiscuous mode [ 925.768913][T31306] 8021q: adding VLAN 0 to HW filter on device bond55 [ 925.866296][T31306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6737'. [ 925.901193][T31306] bond55: entered allmulticast mode [ 925.948144][T31314] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.975224][T31306] bond55: (slave bridge54): making interface the new active one [ 925.984431][T31306] bridge54: entered promiscuous mode [ 925.989972][T31306] bridge54: entered allmulticast mode [ 925.997669][T31306] bond55: (slave bridge54): Enslaving as an active interface with an up link [ 926.378008][T31328] syzkaller1: entered promiscuous mode [ 926.388019][T31328] syzkaller1: entered allmulticast mode [ 926.519325][T31334] netlink: 'syz.4.6746': attribute type 1 has an invalid length. [ 926.627782][T31334] bond61: (slave bridge52): making interface the new active one [ 926.637331][T31334] bond61: (slave bridge52): Enslaving as an active interface with an up link [ 926.670581][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 926.672956][T31346] macvlan2: entered promiscuous mode [ 926.676734][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 926.683165][T31346] macvlan2: entered allmulticast mode [ 926.705559][T31346] bond61: entered promiscuous mode [ 926.728678][T31346] bridge52: entered promiscuous mode [ 926.755594][T31346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 926.780724][T31346] bond61: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 926.800706][T31346] bond61: left promiscuous mode [ 926.806826][T31346] bridge52: left promiscuous mode [ 926.841413][T31344] syzkaller1: entered promiscuous mode [ 926.847173][T31344] syzkaller1: entered allmulticast mode [ 927.162430][T31354] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6750'. [ 927.180192][T31355] tipc: Enabling of bearer rejected, already enabled [ 927.208027][T31355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6751'. [ 927.239500][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6751'. [ 927.322576][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6751'. [ 927.633823][T31369] syzkaller1: entered promiscuous mode [ 927.655802][T31369] syzkaller1: entered allmulticast mode [ 927.982882][T31374] macvlan4: entered promiscuous mode [ 928.002822][T31374] macvlan4: entered allmulticast mode [ 928.014673][T31374] bond60: entered promiscuous mode [ 928.023451][T31374] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 928.060930][T31374] bond60: left promiscuous mode [ 928.241725][T31376] syzkaller0: entered promiscuous mode [ 928.250356][T31376] syzkaller0: entered allmulticast mode [ 928.292342][T31385] netlink: 'syz.3.6761': attribute type 1 has an invalid length. [ 928.368147][T31379] syzkaller0: entered promiscuous mode [ 928.374595][T31379] syzkaller0: entered allmulticast mode [ 928.467556][T31385] bond62: (slave bridge57): making interface the new active one [ 928.476667][T31385] bond62: (slave bridge57): Enslaving as an active interface with an up link [ 928.516417][T31385] macvlan6: entered promiscuous mode [ 928.524675][T31385] macvlan6: entered allmulticast mode [ 928.531632][T31385] bond62: entered promiscuous mode [ 928.547431][T31385] bridge57: entered promiscuous mode [ 928.566949][T31385] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 928.611945][T31385] bond62: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 928.632384][T31385] bond62: left promiscuous mode [ 928.657688][T31385] bridge57: left promiscuous mode [ 928.807845][T31403] syzkaller1: entered promiscuous mode [ 928.830699][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 928.836895][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 928.848397][T31403] syzkaller1: entered allmulticast mode [ 929.226569][T31413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6768'. [ 929.465019][T31418] syzkaller0: entered promiscuous mode [ 929.483281][T31418] syzkaller0: entered allmulticast mode [ 929.796592][T31424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 930.106091][T31431] netlink: 'syz.1.6773': attribute type 1 has an invalid length. [ 930.214608][T31431] bond61: (slave bridge52): making interface the new active one [ 930.224122][T31431] bond61: (slave bridge52): Enslaving as an active interface with an up link [ 930.234579][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6774'. [ 930.351283][T31431] macvlan4: entered promiscuous mode [ 930.363261][T31431] macvlan4: entered allmulticast mode [ 930.379077][T31431] bond61: entered promiscuous mode [ 930.392208][T31431] bridge52: entered promiscuous mode [ 930.417939][T31431] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 930.448653][T31431] bond61: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 930.481194][T31431] bond61: left promiscuous mode [ 930.495400][T31431] bridge52: left promiscuous mode [ 930.990690][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 930.996793][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 931.741677][T31474] netlink: 'syz.1.6784': attribute type 1 has an invalid length. [ 931.801631][T31477] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 931.819436][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6783'. [ 931.851217][T31481] syzkaller1: entered promiscuous mode [ 931.856901][T31481] syzkaller1: entered allmulticast mode [ 931.866255][T31474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6784'. [ 932.042639][T31474] bond62: (slave bridge53): making interface the new active one [ 932.071991][T31474] bond62: (slave bridge53): Enslaving as an active interface with an up link [ 932.109519][T31484] macvlan4: entered promiscuous mode [ 932.127039][T31484] macvlan4: entered allmulticast mode [ 932.143927][T31484] bond62: entered promiscuous mode [ 932.158027][T31484] bridge53: entered promiscuous mode [ 932.184608][T31484] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 932.223068][T31484] bond62: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 932.278702][T31484] bond62: left promiscuous mode [ 932.290441][T31484] bridge53: left promiscuous mode [ 932.304110][T31500] netlink: 'syz.2.6787': attribute type 1 has an invalid length. [ 932.358105][T31493] tipc: Enabling of bearer rejected, failed to enable media [ 932.392916][T31498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'. [ 932.493135][T31493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6787'. [ 932.540028][T31500] bond63: entered promiscuous mode [ 932.545784][T31500] 8021q: adding VLAN 0 to HW filter on device bond63 [ 932.554464][T31493] bond63: entered allmulticast mode [ 932.588355][T31504] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 932.658329][T31508] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 932.676434][T31493] bond63: (slave bridge58): making interface the new active one [ 932.699630][T31493] bridge58: entered promiscuous mode [ 932.711834][T31493] bridge58: entered allmulticast mode [ 932.726631][T31493] bond63: (slave bridge58): Enslaving as an active interface with an up link [ 933.025446][T31525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6792'. [ 933.097044][T31528] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6793'. [ 933.267994][T31534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6795'. [ 933.309476][T31534] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 933.563390][T31540] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 933.677712][T31541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 933.705608][T31545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6798'. [ 933.722115][T31545] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 933.738771][ T3370] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 933.942770][T31550] tipc: Enabling of bearer rejected, failed to enable media [ 934.074090][T31569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6801'. [ 934.223931][T31573] netlink: 'syz.3.6802': attribute type 1 has an invalid length. [ 934.276632][T31577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6802'. [ 934.373453][T31578] tipc: Enabling of bearer rejected, failed to enable media [ 934.408376][T31582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6803'. [ 934.448256][T31578] netlink: 'syz.2.6803': attribute type 1 has an invalid length. [ 934.488748][T31573] bond63: (slave bridge58): making interface the new active one [ 934.537522][T31573] bond63: (slave bridge58): Enslaving as an active interface with an up link [ 934.624190][T31587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6803'. [ 934.682099][T31590] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 934.715257][T31578] bond64: entered promiscuous mode [ 934.731468][T31578] 8021q: adding VLAN 0 to HW filter on device bond64 [ 934.769038][T31577] macvlan6: entered promiscuous mode [ 934.774666][T31577] macvlan6: entered allmulticast mode [ 934.783487][T31577] bond63: entered promiscuous mode [ 934.788893][T31577] bridge58: entered promiscuous mode [ 934.796163][T31577] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 934.806035][T31577] bond63: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 934.832996][T31577] bond63: left promiscuous mode [ 934.838234][T31577] bridge58: left promiscuous mode [ 934.863851][T31587] bond64: entered allmulticast mode [ 934.924904][T31583] bond64: (slave bridge59): making interface the new active one [ 934.953266][T31583] bridge59: entered promiscuous mode [ 934.972041][T31583] bridge59: entered allmulticast mode [ 935.001116][T31583] bond64: (slave bridge59): Enslaving as an active interface with an up link [ 935.435319][T31615] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 937.922445][T31669] __nla_validate_parse: 4 callbacks suppressed [ 937.922464][T31669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6821'. [ 941.265854][T31659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 941.286377][T31675] tipc: Enabling of bearer rejected, failed to enable media [ 941.482096][T31688] netlink: 'syz.2.6824': attribute type 1 has an invalid length. [ 941.719517][T31688] bond65: (slave bridge60): making interface the new active one [ 941.756449][T31688] bond65: (slave bridge60): Enslaving as an active interface with an up link [ 941.816117][T31705] macvlan3: entered promiscuous mode [ 941.822459][T31705] macvlan3: entered allmulticast mode [ 941.837489][T31705] bond65: entered promiscuous mode [ 941.844090][T31705] bridge60: entered promiscuous mode [ 941.851712][T31705] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 941.869796][T31705] bond65: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 941.906827][T31705] bond65: left promiscuous mode [ 941.926848][T31705] bridge60: left promiscuous mode [ 941.994130][T31709] syzkaller1: entered promiscuous mode [ 942.015461][T31709] syzkaller1: entered allmulticast mode [ 942.233413][T31715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6830'. [ 942.318156][T31717] syzkaller0: entered promiscuous mode [ 942.339943][T31717] syzkaller0: entered allmulticast mode [ 942.533251][T31733] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 942.547266][T31733] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 942.707315][T31737] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 942.732070][T31739] netlink: 'syz.2.6835': attribute type 1 has an invalid length. [ 942.949368][T31745] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6836'. [ 942.965539][T31741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6835'. [ 942.982927][T31739] bond66: (slave bridge61): making interface the new active one [ 943.018381][T31739] bond66: (slave bridge61): Enslaving as an active interface with an up link [ 943.453736][T31764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6840'. [ 943.507395][T31764] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 943.577971][T31770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6837'. [ 943.845204][T31777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6842'. [ 943.856763][T31777] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 944.030356][T27918] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 944.036552][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 944.231817][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6847'. [ 944.291545][T31801] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 944.766689][T31819] syzkaller1: entered promiscuous mode [ 944.780702][T31819] syzkaller1: entered allmulticast mode [ 945.334013][T31824] tipc: Enabling of bearer rejected, failed to enable media [ 945.361310][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6852'. [ 945.409559][T31824] netlink: 'syz.2.6852': attribute type 1 has an invalid length. [ 945.539280][T31831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6852'. [ 945.589673][T31824] bond67: entered promiscuous mode [ 945.623706][T31824] 8021q: adding VLAN 0 to HW filter on device bond67 [ 945.672112][T31831] bond67: entered allmulticast mode [ 945.747546][T31824] bond67: (slave bridge62): making interface the new active one [ 945.766159][T31824] bridge62: entered promiscuous mode [ 945.773151][T31824] bridge62: entered allmulticast mode [ 945.781017][T31824] bond67: (slave bridge62): Enslaving as an active interface with an up link [ 946.036841][T31843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6855'. [ 946.329373][T31852] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6857'. [ 946.715992][T31868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 946.921796][T25107] block nbd73: Receive control failed (result -110) [ 946.925325][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 946.935334][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 948.802962][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6863'. [ 948.812451][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6863'. [ 948.859940][T31901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 951.050831][T31866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6859'. [ 951.351875][T31919] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6868'. [ 951.356687][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6866'. [ 951.393575][T31923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6865'. [ 951.422734][T31910] syzkaller0: entered promiscuous mode [ 951.450342][T31910] syzkaller0: entered allmulticast mode [ 951.469318][T31921] syzkaller1: entered promiscuous mode [ 951.479994][T31921] syzkaller1: entered allmulticast mode [ 951.513880][T31927] syzkaller1: entered promiscuous mode [ 951.519685][T31927] syzkaller1: entered allmulticast mode [ 951.780694][T31933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6867'. [ 951.784729][T31932] tipc: Enabling of bearer rejected, failed to enable media [ 951.833327][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6869'. [ 951.857191][T31932] netlink: 'syz.2.6869': attribute type 1 has an invalid length. [ 951.916163][T31932] bond68: entered promiscuous mode [ 951.921855][T31932] 8021q: adding VLAN 0 to HW filter on device bond68 [ 951.950904][T31932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6869'. [ 951.960577][T31932] bond68: entered allmulticast mode [ 951.992934][T31932] bond68: (slave bridge63): making interface the new active one [ 952.000745][T31932] bridge63: entered promiscuous mode [ 952.006349][T31932] bridge63: entered allmulticast mode [ 952.014084][T31932] bond68: (slave bridge63): Enslaving as an active interface with an up link [ 952.395252][T31960] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 952.833873][T31967] tipc: Enabling of bearer rejected, already enabled [ 952.912617][T31968] netlink: 'syz.3.6876': attribute type 1 has an invalid length. [ 953.649807][T31985] netlink: 'syz.0.6879': attribute type 1 has an invalid length. [ 956.826443][T31968] workqueue: Failed to create a rescuer kthread for wq "bond64": -EINTR [ 956.834731][T31985] workqueue: Failed to create a rescuer kthread for wq "bond56": -EINTR [ 956.978951][T31997] __nla_validate_parse: 2 callbacks suppressed [ 956.978972][T31997] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6881'. [ 957.296026][T32007] tipc: Enabling of bearer rejected, failed to enable media [ 957.315019][T32007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6883'. [ 957.339383][T32007] netlink: 'syz.0.6883': attribute type 1 has an invalid length. [ 957.424657][T32007] bond56: entered promiscuous mode [ 957.430621][T32007] 8021q: adding VLAN 0 to HW filter on device bond56 [ 957.474831][T32007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6883'. [ 957.492360][T32007] bond56: entered allmulticast mode [ 957.526056][T32014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'. [ 957.593066][T32007] bond56: (slave bridge55): making interface the new active one [ 957.595734][T32017] netlink: 'syz.1.6886': attribute type 1 has an invalid length. [ 957.611535][T32007] bridge55: entered promiscuous mode [ 957.622401][T32007] bridge55: entered allmulticast mode [ 957.638083][T32007] bond56: (slave bridge55): Enslaving as an active interface with an up link [ 957.661234][T32012] syzkaller1: entered promiscuous mode [ 957.670528][T32012] syzkaller1: entered allmulticast mode [ 957.756949][T32017] bond63: entered promiscuous mode [ 957.800007][T32017] 8021q: adding VLAN 0 to HW filter on device bond63 [ 958.008609][T32021] bond63: (slave bridge54): making interface the new active one [ 958.022119][T32035] netlink: 'syz.3.6888': attribute type 1 has an invalid length. [ 958.040488][T32021] bridge54: entered promiscuous mode [ 958.054617][T32021] bond63: (slave bridge54): Enslaving as an active interface with an up link [ 958.088215][T32027] tipc: Enabling of bearer rejected, already enabled [ 958.102055][T32038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6888'. [ 958.123239][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6888'. [ 958.204736][T32035] bond64: entered promiscuous mode [ 958.211032][T32035] 8021q: adding VLAN 0 to HW filter on device bond64 [ 958.268301][T32045] netlink: 'syz.1.6891': attribute type 1 has an invalid length. [ 958.297217][T32038] bond64: entered allmulticast mode [ 958.359915][T32027] bond64: (slave bridge59): making interface the new active one [ 958.382130][T32027] bridge59: entered promiscuous mode [ 958.387965][T32027] bridge59: entered allmulticast mode [ 958.395753][T32027] bond64: (slave bridge59): Enslaving as an active interface with an up link [ 958.454324][T32042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6891'. [ 958.454867][T32045] bond64: entered promiscuous mode [ 958.469330][T32045] 8021q: adding VLAN 0 to HW filter on device bond64 [ 958.535207][T32056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6893'. [ 958.547184][T32042] bond64: entered allmulticast mode [ 958.558706][T32056] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 958.767330][T32042] bond64: (slave bridge55): making interface the new active one [ 958.784088][T32042] bridge55: entered promiscuous mode [ 958.801736][T32042] bridge55: entered allmulticast mode [ 958.822344][T32042] bond64: (slave bridge55): Enslaving as an active interface with an up link [ 959.130128][T32070] netlink: 'syz.0.6897': attribute type 1 has an invalid length. [ 959.139483][T32071] netlink: 'syz.1.6895': attribute type 1 has an invalid length. [ 959.221530][T32072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6897'. [ 959.325816][T32074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6895'. [ 959.371458][T32080] netlink: 'syz.2.6898': attribute type 1 has an invalid length. [ 962.516310][T32066] tipc: Enabling of bearer rejected, failed to enable media [ 962.532091][T32070] workqueue: Failed to create a rescuer kthread for wq "bond57": -EINTR [ 962.533538][T32068] __nla_validate_parse: 1 callbacks suppressed [ 962.533559][T32068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6895'. [ 962.534789][T32071] workqueue: Failed to create a rescuer kthread for wq "bond65": -EINTR [ 962.603907][T32080] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR [ 962.667467][T32091] netlink: 'syz.4.6900': attribute type 1 has an invalid length. [ 962.865130][T32100] tipc: Enabling of bearer rejected, failed to enable media [ 962.924676][T32109] netlink: 'syz.2.6903': attribute type 1 has an invalid length. [ 962.952274][T32104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6903'. [ 962.987200][T32093] bond62: (slave bridge53): making interface the new active one [ 963.002228][T32093] bond62: (slave bridge53): Enslaving as an active interface with an up link [ 963.012600][T32101] syzkaller1: entered promiscuous mode [ 963.018819][T32101] syzkaller1: entered allmulticast mode [ 963.036221][T32100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6903'. [ 963.096434][T32109] bond69: entered promiscuous mode [ 963.105544][T32109] 8021q: adding VLAN 0 to HW filter on device bond69 [ 963.119349][T32091] macvlan2: entered promiscuous mode [ 963.137602][T32091] macvlan2: entered allmulticast mode [ 963.151923][T32091] bond62: entered promiscuous mode [ 963.161967][T32091] bridge53: entered promiscuous mode [ 963.173713][T32091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 963.192213][T32091] bond62: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.230713][T32121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6905'. [ 963.250863][T32091] bond62: left promiscuous mode [ 963.255938][T32091] bridge53: left promiscuous mode [ 963.296451][T32100] bond69: entered allmulticast mode [ 963.404752][T32109] bond69: (slave bridge64): making interface the new active one [ 963.422830][T32109] bridge64: entered promiscuous mode [ 963.428464][T32109] bridge64: entered allmulticast mode [ 963.442238][T32109] bond69: (slave bridge64): Enslaving as an active interface with an up link [ 963.655037][T32128] tipc: Enabling of bearer rejected, already enabled [ 963.671368][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6907'. [ 963.692524][T32128] netlink: 'syz.4.6907': attribute type 1 has an invalid length. [ 963.741710][T32128] bond63: entered promiscuous mode [ 963.748357][T32128] 8021q: adding VLAN 0 to HW filter on device bond63 [ 963.794652][T32128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6907'. [ 963.810790][T32128] bond63: entered allmulticast mode [ 963.944206][T32141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6910'. [ 964.044993][T32144] tipc: Enabling of bearer rejected, already enabled [ 964.073333][T32144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6911'. [ 964.104412][T32144] netlink: 'syz.4.6911': attribute type 1 has an invalid length. [ 964.239805][T32147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6911'. [ 964.242681][T32144] bond64: entered promiscuous mode [ 964.254692][T32144] 8021q: adding VLAN 0 to HW filter on device bond64 [ 964.262282][T32149] tipc: Enabling of bearer rejected, already enabled [ 964.271448][T32147] bond64: entered allmulticast mode [ 964.282796][T32149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'. [ 964.320454][T32144] bond64: (slave bridge54): making interface the new active one [ 964.330581][T32152] netlink: 'syz.3.6912': attribute type 1 has an invalid length. [ 964.338425][T32144] bridge54: entered promiscuous mode [ 964.344533][T32144] bridge54: entered allmulticast mode [ 964.353691][T32153] netlink: 'syz.1.6913': attribute type 1 has an invalid length. [ 964.363154][T32144] bond64: (slave bridge54): Enslaving as an active interface with an up link [ 964.482586][T32152] bond65: entered promiscuous mode [ 964.504371][T32152] 8021q: adding VLAN 0 to HW filter on device bond65 [ 964.546636][T32153] bond65: entered promiscuous mode [ 964.552622][T32153] 8021q: adding VLAN 0 to HW filter on device bond65 [ 964.560829][T32151] bond65: entered allmulticast mode [ 964.582658][T32149] bond65: entered allmulticast mode [ 964.589052][T32157] tipc: Enabling of bearer rejected, already enabled [ 964.601306][T32157] netlink: 'syz.4.6914': attribute type 1 has an invalid length. [ 964.656919][T32153] bond65: (slave bridge56): making interface the new active one [ 964.695303][T32153] bridge56: entered promiscuous mode [ 964.715252][T32153] bridge56: entered allmulticast mode [ 964.732072][T32153] bond65: (slave bridge56): Enslaving as an active interface with an up link [ 964.777392][T32157] bond65: entered promiscuous mode [ 964.783470][T32157] 8021q: adding VLAN 0 to HW filter on device bond65 [ 964.824725][T32149] bond65: (slave bridge60): making interface the new active one [ 964.858270][T32149] bridge60: entered promiscuous mode [ 964.888392][T32149] bridge60: entered allmulticast mode [ 964.915727][T32149] bond65: (slave bridge60): Enslaving as an active interface with an up link [ 964.943171][T32161] bond65: entered allmulticast mode [ 964.990856][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 964.997271][T25107] Bluetooth: hci2: command 0x0401 tx timeout [ 965.009629][T32169] tipc: Enabling of bearer rejected, failed to enable media [ 965.112165][T32169] netlink: 'syz.2.6915': attribute type 1 has an invalid length. [ 965.125213][T32174] tipc: Enabling of bearer rejected, already enabled [ 965.164139][T32174] netlink: 'syz.3.6918': attribute type 1 has an invalid length. [ 965.204786][T32169] bond70: entered promiscuous mode [ 965.211943][T32169] 8021q: adding VLAN 0 to HW filter on device bond70 [ 965.253041][T25107] block nbd74: Receive control failed (result -1) [ 965.344810][T32174] bond66: entered promiscuous mode [ 965.368988][T32174] 8021q: adding VLAN 0 to HW filter on device bond66 [ 965.394788][T32176] bond70: entered allmulticast mode [ 965.415471][T32189] bond66: entered allmulticast mode [ 965.471552][T32190] bond70: (slave bridge65): making interface the new active one [ 965.493025][T32190] bridge65: entered promiscuous mode [ 965.510661][T32190] bridge65: entered allmulticast mode [ 965.519599][T32190] bond70: (slave bridge65): Enslaving as an active interface with an up link [ 965.586040][T32174] bond66: (slave bridge61): making interface the new active one [ 965.613589][T32174] bridge61: entered promiscuous mode [ 965.624799][T32174] bridge61: entered allmulticast mode [ 965.653298][T32174] bond66: (slave bridge61): Enslaving as an active interface with an up link [ 966.326500][T32208] netlink: 'syz.1.6925': attribute type 1 has an invalid length. [ 966.379573][T32209] tipc: Enabling of bearer rejected, failed to enable media [ 966.502604][T32209] bond58: entered promiscuous mode [ 966.517656][T32209] 8021q: adding VLAN 0 to HW filter on device bond58 [ 966.578519][T32213] bond58: entered allmulticast mode [ 966.657618][T32215] bond66: (slave bridge57): making interface the new active one [ 966.686155][T32215] bond66: (slave bridge57): Enslaving as an active interface with an up link [ 966.784211][T32221] macvlan4: entered promiscuous mode [ 966.789553][T32221] macvlan4: entered allmulticast mode [ 966.833250][T32221] bond66: entered promiscuous mode [ 966.843856][T32221] bridge57: entered promiscuous mode [ 966.854169][T32221] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 966.871598][T32221] bond66: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 966.888922][T32221] bond66: left promiscuous mode [ 966.894879][T32221] bridge57: left promiscuous mode [ 966.969984][T32213] bond58: (slave bridge57): making interface the new active one [ 966.986927][T32213] bridge57: entered promiscuous mode [ 966.999402][T32213] bridge57: entered allmulticast mode [ 967.011832][T32213] bond58: (slave bridge57): Enslaving as an active interface with an up link [ 967.155291][T32219] bond67: (slave bridge62): making interface the new active one [ 967.165478][T32219] bond67: (slave bridge62): Enslaving as an active interface with an up link [ 967.204283][T32227] macvlan6: entered promiscuous mode [ 967.211909][T32227] macvlan6: entered allmulticast mode [ 967.218709][T32227] bond67: entered promiscuous mode [ 967.233552][T32227] bridge62: entered promiscuous mode [ 967.251442][T32227] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 967.275115][T32227] bond67: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 967.301175][T32227] bond67: left promiscuous mode [ 967.306490][T32227] bridge62: left promiscuous mode [ 967.347660][T32234] tipc: Enabling of bearer rejected, failed to enable media [ 967.420879][T32237] bond71: entered promiscuous mode [ 967.426622][T32237] 8021q: adding VLAN 0 to HW filter on device bond71 [ 967.527861][T32246] bond67: entered promiscuous mode [ 967.542952][T32246] 8021q: adding VLAN 0 to HW filter on device bond67 [ 967.588875][T32255] __nla_validate_parse: 15 callbacks suppressed [ 967.588895][T32255] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6933'. [ 967.625764][T32247] bond71: (slave bridge66): making interface the new active one [ 967.648955][T32247] bridge66: entered promiscuous mode [ 967.666337][T32247] bond71: (slave bridge66): Enslaving as an active interface with an up link [ 967.716520][T32248] bond67: (slave bridge58): making interface the new active one [ 967.724590][T32248] bridge58: entered promiscuous mode [ 967.732142][T32248] bond67: (slave bridge58): Enslaving as an active interface with an up link [ 967.942454][T32259] tipc: Enabling of bearer rejected, failed to enable media [ 967.991441][T32259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6934'. [ 968.017423][T32259] validate_nla: 4 callbacks suppressed [ 968.017443][T32259] netlink: 'syz.2.6934': attribute type 1 has an invalid length. [ 968.185651][T32270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6937'. [ 968.214539][T32263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6934'. [ 968.229932][T32259] bond72: entered promiscuous mode [ 968.246351][T32259] 8021q: adding VLAN 0 to HW filter on device bond72 [ 968.256472][T32266] tipc: Enabling of bearer rejected, already enabled [ 968.265455][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6936'. [ 968.275272][T32263] bond72: entered allmulticast mode [ 968.284766][T32266] netlink: 'syz.4.6936': attribute type 1 has an invalid length. [ 968.324277][T32266] bond66: entered promiscuous mode [ 968.330004][T32266] 8021q: adding VLAN 0 to HW filter on device bond66 [ 968.485152][T32266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6936'. [ 968.540120][T32266] bond66: entered allmulticast mode [ 968.567064][T32290] tipc: Enabling of bearer rejected, failed to enable media [ 968.603806][T32293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6941'. [ 968.643377][T32266] bond66: (slave bridge55): making interface the new active one [ 968.655863][T32290] netlink: 'syz.2.6941': attribute type 1 has an invalid length. [ 968.665753][T32266] bridge55: entered promiscuous mode [ 968.676649][T32266] bridge55: entered allmulticast mode [ 968.690862][T32266] bond66: (slave bridge55): Enslaving as an active interface with an up link [ 968.725150][T32296] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 968.745421][T32293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6941'. [ 968.835137][T32290] bond73: entered promiscuous mode [ 968.854623][T32290] 8021q: adding VLAN 0 to HW filter on device bond73 [ 968.887682][T32293] bond73: entered allmulticast mode [ 968.906018][T32299] tipc: Enabling of bearer rejected, already enabled [ 968.926915][T32301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6943'. [ 968.930898][T32299] netlink: 'syz.4.6943': attribute type 1 has an invalid length. [ 969.027661][T32303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6943'. [ 969.041799][T32302] bond73: (slave bridge67): making interface the new active one [ 969.062713][T32302] bridge67: entered promiscuous mode [ 969.085959][T32302] bridge67: entered allmulticast mode [ 969.107582][T32302] bond73: (slave bridge67): Enslaving as an active interface with an up link [ 969.195636][T32299] bond67: entered promiscuous mode [ 969.201452][T32299] 8021q: adding VLAN 0 to HW filter on device bond67 [ 969.308755][T32303] bond67: entered allmulticast mode [ 969.396389][T32310] bond67: (slave bridge56): making interface the new active one [ 969.420337][T32310] bridge56: entered promiscuous mode [ 969.440520][T32310] bridge56: entered allmulticast mode [ 969.453482][T32310] bond67: (slave bridge56): Enslaving as an active interface with an up link [ 969.482629][T32312] tipc: Enabling of bearer rejected, failed to enable media [ 969.517414][T32318] syzkaller1: entered promiscuous mode [ 969.523490][T32318] syzkaller1: entered allmulticast mode [ 969.530650][T32312] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 969.550105][T32315] tipc: Enabling of bearer rejected, already enabled [ 969.591128][T32315] netlink: 'syz.3.6946': attribute type 1 has an invalid length. [ 969.653186][T32312] bond74: entered promiscuous mode [ 969.659069][T32312] 8021q: adding VLAN 0 to HW filter on device bond74 [ 969.729719][T32315] bond68: entered promiscuous mode [ 969.749206][T32315] 8021q: adding VLAN 0 to HW filter on device bond68 [ 969.775181][T32313] bond74: entered allmulticast mode [ 969.832162][T32319] bond68: entered allmulticast mode [ 969.865889][T32316] bond74: (slave bridge68): making interface the new active one [ 969.875490][T32316] bridge68: entered promiscuous mode [ 969.882716][T32316] bridge68: entered allmulticast mode [ 969.893416][T32316] bond74: (slave bridge68): Enslaving as an active interface with an up link [ 969.905171][T32334] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 970.015347][T32315] bond68: (slave bridge63): making interface the new active one [ 970.070405][T32315] bridge63: entered promiscuous mode [ 970.092251][ T50] block nbd75: Receive control failed (result -1) [ 970.099249][T32315] bridge63: entered allmulticast mode [ 970.106818][T32315] bond68: (slave bridge63): Enslaving as an active interface with an up link [ 970.120718][T32345] netlink: 'syz.2.6951': attribute type 1 has an invalid length. [ 970.383658][T32345] bond75: entered promiscuous mode [ 970.406713][T32345] 8021q: adding VLAN 0 to HW filter on device bond75 [ 970.506427][T32361] bond75: (slave bridge69): making interface the new active one [ 970.515506][T32361] bridge69: entered promiscuous mode [ 970.523191][T32361] bond75: (slave bridge69): Enslaving as an active interface with an up link [ 970.549661][T32340] bond75: entered allmulticast mode [ 970.567284][T32340] bridge69: entered allmulticast mode [ 970.590127][T32368] netlink: 'syz.3.6953': attribute type 1 has an invalid length. [ 970.607644][T32363] tipc: Enabling of bearer rejected, already enabled [ 970.643685][T32371] netlink: 'syz.1.6954': attribute type 1 has an invalid length. [ 970.676182][T32372] netlink: 'syz.4.6955': attribute type 1 has an invalid length. [ 970.730979][T32368] bond69: entered promiscuous mode [ 970.772101][T32368] 8021q: adding VLAN 0 to HW filter on device bond69 [ 970.850924][T32371] bond68: entered promiscuous mode [ 970.862320][T32371] 8021q: adding VLAN 0 to HW filter on device bond68 [ 970.918689][T32372] bond68: entered promiscuous mode [ 970.928111][T32372] 8021q: adding VLAN 0 to HW filter on device bond68 [ 970.936243][T32373] bond68: entered allmulticast mode [ 970.966617][T32375] bond69: (slave bridge64): making interface the new active one [ 970.974702][T32375] bridge64: entered promiscuous mode [ 970.982820][T32375] bond69: (slave bridge64): Enslaving as an active interface with an up link [ 970.992725][T32374] bond68: entered allmulticast mode [ 971.061202][T32383] bond68: (slave bridge59): making interface the new active one [ 971.070664][T32383] bridge59: entered promiscuous mode [ 971.076872][T32383] bridge59: entered allmulticast mode [ 971.084738][T32383] bond68: (slave bridge59): Enslaving as an active interface with an up link [ 971.116762][T32385] bond68: (slave bridge57): making interface the new active one [ 971.124802][T32385] bridge57: entered promiscuous mode [ 971.135146][T32385] bridge57: entered allmulticast mode [ 971.142761][T32385] bond68: (slave bridge57): Enslaving as an active interface with an up link [ 971.159776][T32387] tipc: Enabling of bearer rejected, failed to enable media [ 971.326595][T32391] bond59: entered promiscuous mode [ 971.332404][T32391] 8021q: adding VLAN 0 to HW filter on device bond59 [ 971.386117][T32398] bond69: entered promiscuous mode [ 971.392335][T32398] 8021q: adding VLAN 0 to HW filter on device bond69 [ 971.400085][T32387] bond59: entered allmulticast mode [ 971.406531][T32405] tipc: Enabling of bearer rejected, already enabled [ 971.448736][T32387] bond59: (slave bridge58): making interface the new active one [ 971.456833][T32387] bridge58: entered promiscuous mode [ 971.462865][T32387] bridge58: entered allmulticast mode [ 971.477520][T32387] bond59: (slave bridge58): Enslaving as an active interface with an up link [ 971.500944][T32398] bond69: entered allmulticast mode [ 971.557618][T32405] bond69: entered promiscuous mode [ 971.590877][T32405] 8021q: adding VLAN 0 to HW filter on device bond69 [ 971.681878][T32398] bond69: (slave bridge60): making interface the new active one [ 971.711051][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 971.717098][T32398] bridge60: entered promiscuous mode [ 971.717304][T32398] bridge60: entered allmulticast mode [ 971.722754][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 971.800565][T32398] bond69: (slave bridge60): Enslaving as an active interface with an up link [ 971.828824][T32405] bond69: entered allmulticast mode [ 971.927890][T32405] bond69: (slave bridge58): making interface the new active one [ 971.948846][T32405] bridge58: entered promiscuous mode [ 971.973226][T32405] bridge58: entered allmulticast mode [ 971.992659][T32405] bond69: (slave bridge58): Enslaving as an active interface with an up link [ 972.352945][T32424] tipc: Enabling of bearer rejected, already enabled [ 972.555398][T32424] bond70: entered promiscuous mode [ 972.582333][T32424] 8021q: adding VLAN 0 to HW filter on device bond70 [ 972.629727][T32428] bond70: entered allmulticast mode [ 972.713380][T32426] __nla_validate_parse: 20 callbacks suppressed [ 972.713398][T32426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6965'. [ 972.770779][T32437] bond70: entered promiscuous mode [ 972.776525][T32437] 8021q: adding VLAN 0 to HW filter on device bond70 [ 972.835721][ T50] block nbd76: Receive control failed (result -1) [ 972.847029][T32428] bond70: (slave bridge59): making interface the new active one [ 972.877749][T32428] bridge59: entered promiscuous mode [ 972.905478][T32428] bridge59: entered allmulticast mode [ 972.916856][T32435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6966'. [ 972.953520][T32428] bond70: (slave bridge59): Enslaving as an active interface with an up link [ 972.978764][T32435] bond70: entered allmulticast mode [ 973.037648][T32437] bond70: (slave bridge65): making interface the new active one [ 973.045541][T32437] bridge65: entered promiscuous mode [ 973.051913][T32437] bridge65: entered allmulticast mode [ 973.058766][T32437] bond70: (slave bridge65): Enslaving as an active interface with an up link [ 973.094901][T32442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6967'. [ 973.206705][ T50] block nbd77: Receive control failed (result -1) [ 973.385374][T32453] tipc: Enabling of bearer rejected, already enabled [ 973.424195][T32453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6969'. [ 973.449514][T32453] validate_nla: 5 callbacks suppressed [ 973.449534][T32453] netlink: 'syz.3.6969': attribute type 1 has an invalid length. [ 973.465534][T32455] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 973.509026][T32453] bond71: entered promiscuous mode [ 973.515198][T32453] 8021q: adding VLAN 0 to HW filter on device bond71 [ 973.587470][T32453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6969'. [ 973.630477][T32453] bond71: entered allmulticast mode [ 973.722950][T32453] bond71: (slave bridge66): making interface the new active one [ 973.742216][T32453] bridge66: entered promiscuous mode [ 973.751932][T32453] bridge66: entered allmulticast mode [ 973.773038][T32453] bond71: (slave bridge66): Enslaving as an active interface with an up link [ 973.812507][T32464] tipc: Enabling of bearer rejected, failed to enable media [ 973.832172][T32466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6971'. [ 973.842900][T32468] netlink: 'syz.2.6973': attribute type 1 has an invalid length. [ 973.863669][T32464] netlink: 'syz.0.6971': attribute type 1 has an invalid length. [ 973.974902][T32466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6971'. [ 974.002357][T32464] bond60: entered promiscuous mode [ 974.010833][T32464] 8021q: adding VLAN 0 to HW filter on device bond60 [ 974.066328][T32466] bond60: entered allmulticast mode [ 974.147328][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6975'. [ 974.199765][T32490] netlink: 'syz.4.6976': attribute type 1 has an invalid length. [ 974.217480][T32482] bond76: (slave bridge70): making interface the new active one [ 974.241587][ T50] block nbd78: Receive control failed (result -1) [ 974.273468][T32482] bond76: (slave bridge70): Enslaving as an active interface with an up link [ 974.299407][T32488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6976'. [ 974.334735][T32464] bond60: (slave bridge59): making interface the new active one [ 974.342763][T32464] bridge59: entered promiscuous mode [ 974.349037][T32464] bridge59: entered allmulticast mode [ 974.363880][T32464] bond60: (slave bridge59): Enslaving as an active interface with an up link [ 974.387531][T32468] macvlan3: entered promiscuous mode [ 974.405322][T32468] macvlan3: entered allmulticast mode [ 974.419352][T32468] bond76: entered promiscuous mode [ 974.426124][T32468] bridge70: entered promiscuous mode [ 974.433953][T32468] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 974.444384][T32468] bond76: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 974.461293][T32468] bond76: left promiscuous mode [ 974.466214][T32468] bridge70: left promiscuous mode [ 974.525974][T32490] bond71: entered promiscuous mode [ 974.531982][T32490] 8021q: adding VLAN 0 to HW filter on device bond71 [ 974.541229][T32485] syzkaller1: entered promiscuous mode [ 974.550688][T32485] syzkaller1: entered allmulticast mode [ 974.563937][T32488] bond71: entered allmulticast mode [ 974.601313][T32494] bond71: (slave bridge60): making interface the new active one [ 974.603533][T32502] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6978'. [ 974.631971][T32494] bridge60: entered promiscuous mode [ 974.646553][T32494] bridge60: entered allmulticast mode [ 974.663282][T32494] bond71: (slave bridge60): Enslaving as an active interface with an up link [ 974.807478][T32505] tipc: Enabling of bearer rejected, failed to enable media [ 974.892596][T32505] netlink: 'syz.2.6979': attribute type 1 has an invalid length. [ 975.029930][T32505] bond77: entered promiscuous mode [ 975.041410][T32519] netlink: 'syz.3.6981': attribute type 1 has an invalid length. [ 975.049586][T32518] netlink: 'syz.1.6982': attribute type 1 has an invalid length. [ 975.060783][T32505] 8021q: adding VLAN 0 to HW filter on device bond77 [ 975.080358][T32511] tipc: Enabling of bearer rejected, already enabled [ 975.100590][T32513] bond77: entered allmulticast mode [ 975.112154][T32524] netlink: 'syz.0.6983': attribute type 1 has an invalid length. [ 975.164942][T32524] bond61: entered promiscuous mode [ 975.170763][T32524] 8021q: adding VLAN 0 to HW filter on device bond61 [ 975.214712][T32519] bond72: entered promiscuous mode [ 975.231213][T32519] 8021q: adding VLAN 0 to HW filter on device bond72 [ 975.294781][T32518] bond70: entered promiscuous mode [ 975.300516][T32518] 8021q: adding VLAN 0 to HW filter on device bond70 [ 975.325860][T32505] bond77: (slave bridge71): making interface the new active one [ 975.333698][T32505] bridge71: entered promiscuous mode [ 975.339147][T32505] bridge71: entered allmulticast mode [ 975.346690][T32505] bond77: (slave bridge71): Enslaving as an active interface with an up link [ 975.356265][T32516] bond70: entered allmulticast mode [ 975.364749][T32524] bond61: entered allmulticast mode [ 975.409859][T32519] bond72: (slave bridge67): making interface the new active one [ 975.418118][T32519] bridge67: entered promiscuous mode [ 975.443417][T32519] bond72: (slave bridge67): Enslaving as an active interface with an up link [ 975.505681][T32531] bond70: (slave bridge61): making interface the new active one [ 975.526836][T32531] bridge61: entered promiscuous mode [ 975.537197][T32531] bridge61: entered allmulticast mode [ 975.564354][T32531] bond70: (slave bridge61): Enslaving as an active interface with an up link [ 975.630124][T32532] bond61: (slave bridge60): making interface the new active one [ 975.652501][T32532] bridge60: entered promiscuous mode [ 975.671685][T32543] netlink: 'syz.3.6985': attribute type 1 has an invalid length. [ 975.686638][ T50] block nbd79: Receive control failed (result -1) [ 975.686856][T32532] bridge60: entered allmulticast mode [ 975.739151][T32532] bond61: (slave bridge60): Enslaving as an active interface with an up link [ 975.881578][T32543] bond73: entered promiscuous mode [ 975.883539][T32548] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 975.914233][T32543] 8021q: adding VLAN 0 to HW filter on device bond73 [ 975.949001][T32540] bond73: entered allmulticast mode [ 976.029455][T32551] bond73: (slave bridge68): making interface the new active one [ 976.060107][T32551] bridge68: entered promiscuous mode [ 976.071245][T32554] netlink: 'syz.0.6987': attribute type 1 has an invalid length. [ 976.088069][T32551] bridge68: entered allmulticast mode [ 976.112006][T32551] bond73: (slave bridge68): Enslaving as an active interface with an up link [ 976.151126][T32550] tipc: Enabling of bearer rejected, failed to enable media [ 976.266802][T32554] bond62: entered promiscuous mode [ 976.273219][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 976.279410][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 976.292099][T32554] 8021q: adding VLAN 0 to HW filter on device bond62 [ 976.326414][T32550] bond62: entered allmulticast mode [ 976.417949][T32566] bond62: (slave bridge61): making interface the new active one [ 976.460440][T32566] bridge61: entered promiscuous mode [ 976.472973][T32566] bridge61: entered allmulticast mode [ 976.493601][T32566] bond62: (slave bridge61): Enslaving as an active interface with an up link [ 976.572877][T32574] syzkaller1: entered promiscuous mode [ 976.580374][T32574] syzkaller1: entered allmulticast mode [ 977.035073][T25107] block nbd80: Receive control failed (result -1) [ 977.044802][T32588] bond72: entered promiscuous mode [ 977.050991][T32588] 8021q: adding VLAN 0 to HW filter on device bond72 [ 977.137399][T32589] bond63: entered promiscuous mode [ 977.146915][T32589] 8021q: adding VLAN 0 to HW filter on device bond63 [ 977.161519][T32586] bond72: entered allmulticast mode [ 977.245665][T32586] bond72: (slave bridge61): making interface the new active one [ 977.272441][T32586] bridge61: entered promiscuous mode [ 977.281216][T32586] bridge61: entered allmulticast mode [ 977.288251][T32586] bond72: (slave bridge61): Enslaving as an active interface with an up link [ 977.345695][T32589] bond63: (slave bridge62): making interface the new active one [ 977.373102][T32589] bridge62: entered promiscuous mode [ 977.414018][T32589] bond63: (slave bridge62): Enslaving as an active interface with an up link [ 977.493494][T25107] block nbd81: Receive control failed (result -1) [ 977.497201][T32607] bond71: entered promiscuous mode [ 977.530886][T32607] 8021q: adding VLAN 0 to HW filter on device bond71 [ 977.614518][T32604] bond71: entered allmulticast mode [ 977.747168][T32617] tipc: Enabling of bearer rejected, failed to enable media [ 977.774038][T32621] __nla_validate_parse: 19 callbacks suppressed [ 977.774065][T32621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6999'. [ 977.828256][T32604] bond71: (slave bridge62): making interface the new active one [ 977.850410][T32604] bridge62: entered promiscuous mode [ 977.861081][T32604] bridge62: entered allmulticast mode [ 977.884145][T32604] bond71: (slave bridge62): Enslaving as an active interface with an up link [ 977.907155][T32625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6999'. [ 978.029546][T32617] bond64: entered promiscuous mode [ 978.099744][T32617] 8021q: adding VLAN 0 to HW filter on device bond64 [ 978.144458][T32625] bond64: entered allmulticast mode [ 978.259709][T32630] bond64: (slave bridge63): making interface the new active one [ 978.295783][T32630] bridge63: entered promiscuous mode [ 978.322040][T32630] bridge63: entered allmulticast mode [ 978.346151][T32630] bond64: (slave bridge63): Enslaving as an active interface with an up link [ 978.620630][T32638] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 978.661002][T32638] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 978.704988][T32641] tipc: Enabling of bearer rejected, already enabled [ 978.722530][T32641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7002'. [ 978.739394][T32643] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 978.755630][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 978.762801][T25107] Bluetooth: hci2: command 0x0401 tx timeout [ 978.771640][T32641] validate_nla: 4 callbacks suppressed [ 978.771662][T32641] netlink: 'syz.4.7002': attribute type 1 has an invalid length. [ 978.861674][T32641] bond73: entered promiscuous mode [ 978.878783][T32641] 8021q: adding VLAN 0 to HW filter on device bond73 [ 978.901891][T32648] tipc: Enabling of bearer rejected, failed to enable media [ 978.919381][T32641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7002'. [ 978.931310][T32648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7005'. [ 979.000962][T32641] bond73: entered allmulticast mode [ 979.010952][T32648] netlink: 'syz.0.7005': attribute type 1 has an invalid length. [ 979.076124][T32646] bond73: (slave bridge62): making interface the new active one [ 979.096859][T32652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7005'. [ 979.107795][T32646] bridge62: entered promiscuous mode [ 979.123737][T32646] bridge62: entered allmulticast mode [ 979.141525][T32646] bond73: (slave bridge62): Enslaving as an active interface with an up link [ 979.261168][T32648] bond65: entered promiscuous mode [ 979.288521][T32663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7007'. [ 979.303208][T32648] 8021q: adding VLAN 0 to HW filter on device bond65 [ 979.358857][T32652] bond65: entered allmulticast mode [ 979.441794][T32661] bond65: (slave bridge64): making interface the new active one [ 979.466551][T32661] bridge64: entered promiscuous mode [ 979.475743][T32673] netlink: 'syz.2.7008': attribute type 1 has an invalid length. [ 979.483755][T32661] bridge64: entered allmulticast mode [ 979.492195][T32661] bond65: (slave bridge64): Enslaving as an active interface with an up link [ 979.541090][T32665] tipc: Enabling of bearer rejected, failed to enable media [ 979.583759][T32668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7008'. [ 979.636209][T32665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7008'. [ 979.706243][T32673] bond78: entered promiscuous mode [ 979.715222][T32673] 8021q: adding VLAN 0 to HW filter on device bond78 [ 979.726565][T32665] bond78: entered allmulticast mode [ 979.848564][T32683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7011'. [ 979.864834][T32665] bond78: (slave bridge72): making interface the new active one [ 979.877324][T32688] netlink: 'syz.1.7012': attribute type 1 has an invalid length. [ 979.906966][T32665] bridge72: entered promiscuous mode [ 979.921973][T32665] bridge72: entered allmulticast mode [ 979.952955][T32665] bond78: (slave bridge72): Enslaving as an active interface with an up link [ 980.051519][T32688] bond72: entered promiscuous mode [ 980.057451][T32688] 8021q: adding VLAN 0 to HW filter on device bond72 [ 980.072841][T32685] bond72: entered allmulticast mode [ 980.253372][T32685] bond72: (slave bridge63): making interface the new active one [ 980.261852][T32685] bridge63: entered promiscuous mode [ 980.267668][T32685] bridge63: entered allmulticast mode [ 980.277797][T32685] bond72: (slave bridge63): Enslaving as an active interface with an up link [ 980.287307][T32695] tipc: Enabling of bearer rejected, failed to enable media [ 980.305588][T32695] netlink: 'syz.2.7013': attribute type 1 has an invalid length. [ 980.339555][T32695] bond79: entered promiscuous mode [ 980.346210][T32695] 8021q: adding VLAN 0 to HW filter on device bond79 [ 980.460279][T32695] bond79: entered allmulticast mode [ 980.558901][T32695] bond79: (slave bridge73): making interface the new active one [ 980.580577][T32695] bridge73: entered promiscuous mode [ 980.612213][T32695] bridge73: entered allmulticast mode [ 980.646321][T32695] bond79: (slave bridge73): Enslaving as an active interface with an up link [ 980.725845][T32712] tipc: Enabling of bearer rejected, already enabled [ 980.749469][T32712] netlink: 'syz.4.7019': attribute type 1 has an invalid length. [ 980.812346][T32714] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 980.922668][T32712] bond74: entered promiscuous mode [ 980.939878][T32712] 8021q: adding VLAN 0 to HW filter on device bond74 [ 980.962107][T32717] bond74: entered allmulticast mode [ 981.066339][T32712] bond74: (slave bridge63): making interface the new active one [ 981.088843][T32712] bridge63: entered promiscuous mode [ 981.109264][T32712] bridge63: entered allmulticast mode [ 981.119325][T32712] bond74: (slave bridge63): Enslaving as an active interface with an up link [ 981.336180][T32733] tipc: Enabling of bearer rejected, already enabled [ 981.375526][T32733] netlink: 'syz.4.7023': attribute type 1 has an invalid length. [ 981.570126][T32733] bond75: entered promiscuous mode [ 981.581039][T32733] 8021q: adding VLAN 0 to HW filter on device bond75 [ 981.593792][T32738] bond75: entered allmulticast mode [ 981.685399][T32733] bond75: (slave bridge64): making interface the new active one [ 981.707032][T32733] bridge64: entered promiscuous mode [ 981.720612][T32733] bridge64: entered allmulticast mode [ 981.734847][T32733] bond75: (slave bridge64): Enslaving as an active interface with an up link [ 982.083837][T32759] syzkaller1: entered promiscuous mode [ 982.089928][T32759] syzkaller1: entered allmulticast mode [ 982.103985][T32763] netlink: 'syz.2.7029': attribute type 1 has an invalid length. [ 982.136049][T25107] block nbd83: Receive control failed (result -1) [ 982.259083][T32763] bond80: entered promiscuous mode [ 982.269553][T32763] 8021q: adding VLAN 0 to HW filter on device bond80 [ 982.386854][T32756] bond80: entered allmulticast mode [ 982.438992][T32756] bond80: (slave bridge74): making interface the new active one [ 982.450050][T32756] bridge74: entered promiscuous mode [ 982.457896][T32756] bridge74: entered allmulticast mode [ 982.466799][T32756] bond80: (slave bridge74): Enslaving as an active interface with an up link [ 982.598063][ T309] tipc: Enabling of bearer rejected, failed to enable media [ 982.609117][ T309] netlink: 'syz.2.7033': attribute type 1 has an invalid length. [ 982.645193][ T309] bond81: entered promiscuous mode [ 982.651226][ T309] 8021q: adding VLAN 0 to HW filter on device bond81 [ 982.685636][ T309] bond81: entered allmulticast mode [ 982.774303][ T309] bond81: (slave bridge75): making interface the new active one [ 982.802768][ T309] bridge75: entered promiscuous mode [ 982.826157][ T309] bridge75: entered allmulticast mode [ 982.845518][ T314] __nla_validate_parse: 16 callbacks suppressed [ 982.845538][ T314] netlink: 280 bytes leftover after parsing attributes in process `syz.3.7036'. [ 982.878724][ T309] bond81: (slave bridge75): Enslaving as an active interface with an up link [ 982.938686][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7036'. [ 983.016005][ T321] netlink: 'syz.4.7037': attribute type 1 has an invalid length. [ 983.040878][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7035'. [ 983.134445][T27918] block nbd84: Receive control failed (result -1) [ 983.228162][ T321] bond76: entered promiscuous mode [ 983.248450][ T337] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7039'. [ 983.251027][ T319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7037'. [ 983.281466][ T321] 8021q: adding VLAN 0 to HW filter on device bond76 [ 983.291790][ T319] bond76: entered allmulticast mode [ 983.414574][ T329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7038'. [ 983.453936][ T334] syzkaller0: entered promiscuous mode [ 983.474627][ T334] syzkaller0: entered allmulticast mode [ 983.506408][T27918] block nbd85: Receive control failed (result -1) [ 983.556905][ T319] bond76: (slave bridge65): making interface the new active one [ 983.589857][ T319] bridge65: entered promiscuous mode [ 983.613030][ T319] bridge65: entered allmulticast mode [ 983.638763][ T319] bond76: (slave bridge65): Enslaving as an active interface with an up link [ 984.016258][ T354] syzkaller1: entered promiscuous mode [ 984.035876][ T354] syzkaller1: entered allmulticast mode [ 984.129994][ T358] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 984.256626][ T362] tipc: Enabling of bearer rejected, failed to enable media [ 984.270980][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 984.277099][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 984.295343][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7042'. [ 984.357018][ T362] netlink: 'syz.0.7042': attribute type 1 has an invalid length. [ 984.447965][ T362] bond66: entered promiscuous mode [ 984.456078][ T362] 8021q: adding VLAN 0 to HW filter on device bond66 [ 984.493211][ T368] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 984.602170][ T362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7042'. [ 984.749125][ T362] bond66: (slave bridge65): making interface the new active one [ 984.784054][ T362] bridge65: entered promiscuous mode [ 984.799252][ T362] bond66: (slave bridge65): Enslaving as an active interface with an up link [ 984.959354][ T380] tipc: Enabling of bearer rejected, failed to enable media [ 984.993323][ T380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7048'. [ 985.043478][ T380] netlink: 'syz.1.7048': attribute type 1 has an invalid length. [ 985.097830][ T380] bond73: entered promiscuous mode [ 985.098000][ T386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 985.103927][ T380] 8021q: adding VLAN 0 to HW filter on device bond73 [ 985.176412][ T380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7048'. [ 985.205946][ T380] bond73: entered allmulticast mode [ 985.298460][ T380] bond73: (slave bridge64): making interface the new active one [ 985.340596][ T380] bridge64: entered promiscuous mode [ 985.353366][ T380] bridge64: entered allmulticast mode [ 985.377276][ T380] bond73: (slave bridge64): Enslaving as an active interface with an up link [ 985.599540][ T397] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 985.617770][ T399] tipc: Enabling of bearer rejected, failed to enable media [ 985.647511][ T399] netlink: 'syz.1.7053': attribute type 1 has an invalid length. [ 985.702710][ T399] bond74: entered promiscuous mode [ 985.712825][ T399] 8021q: adding VLAN 0 to HW filter on device bond74 [ 985.859421][ T399] bond74: (slave bridge65): making interface the new active one [ 985.878719][ T399] bridge65: entered promiscuous mode [ 985.892341][ T399] bond74: (slave bridge65): Enslaving as an active interface with an up link [ 985.947015][T25107] block nbd86: Receive control failed (result -1) [ 986.129657][ T414] syzkaller1: entered promiscuous mode [ 986.154372][ T414] syzkaller1: entered allmulticast mode [ 986.268063][T27918] block nbd87: Receive control failed (result -1) [ 987.046540][T27918] block nbd88: Receive control failed (result -1) [ 987.063048][ T451] netlink: 'syz.2.7061': attribute type 1 has an invalid length. [ 987.205628][ T451] bond82: entered promiscuous mode [ 987.219486][ T451] 8021q: adding VLAN 0 to HW filter on device bond82 [ 987.230067][ T454] tipc: Enabling of bearer rejected, already enabled [ 987.270550][ T458] netlink: 'syz.4.7060': attribute type 1 has an invalid length. [ 987.307067][ T450] bond82: (slave bridge76): making interface the new active one [ 987.323384][ T450] bridge76: entered promiscuous mode [ 987.343046][ T450] bond82: (slave bridge76): Enslaving as an active interface with an up link [ 987.462183][ T458] bond77: entered promiscuous mode [ 987.481050][ T458] 8021q: adding VLAN 0 to HW filter on device bond77 [ 987.506506][ T465] tipc: Enabling of bearer rejected, failed to enable media [ 987.539170][ T465] netlink: 'syz.1.7063': attribute type 1 has an invalid length. [ 987.657841][ T467] bond77: (slave bridge66): making interface the new active one [ 987.673467][ T470] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 987.693534][ T467] bridge66: entered promiscuous mode [ 987.716227][ T467] bond77: (slave bridge66): Enslaving as an active interface with an up link [ 987.878861][ T465] bond75: entered promiscuous mode [ 987.899783][ T465] 8021q: adding VLAN 0 to HW filter on device bond75 [ 987.937092][ T483] __nla_validate_parse: 12 callbacks suppressed [ 987.937111][ T483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7066'. [ 987.995828][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7065'. [ 988.026594][ T489] netlink: 'syz.3.7067': attribute type 1 has an invalid length. [ 988.051917][ T466] bond75: entered allmulticast mode [ 988.110824][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 988.117278][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 988.176579][ T494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7067'. [ 988.190063][ T489] bond74: entered promiscuous mode [ 988.195918][ T489] 8021q: adding VLAN 0 to HW filter on device bond74 [ 988.197398][T25107] block nbd89: Receive control failed (result -1) [ 988.246210][ T472] bond75: (slave bridge66): making interface the new active one [ 988.254046][ T472] bridge66: entered promiscuous mode [ 988.259564][ T472] bridge66: entered allmulticast mode [ 988.267422][ T472] bond75: (slave bridge66): Enslaving as an active interface with an up link [ 988.392388][ T486] bond74: (slave bridge69): making interface the new active one [ 988.432491][ T486] bridge69: entered promiscuous mode [ 988.441302][ T486] bond74: (slave bridge69): Enslaving as an active interface with an up link [ 988.795773][ T512] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 988.822968][ T511] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 988.882398][ T516] tipc: Enabling of bearer rejected, already enabled [ 988.910359][ T516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7072'. [ 988.967168][ T518] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 989.102608][ T518] bond78: entered promiscuous mode [ 989.108242][ T518] 8021q: adding VLAN 0 to HW filter on device bond78 [ 989.209264][ T516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7072'. [ 989.320109][ T516] bond78: (slave bridge67): making interface the new active one [ 989.357438][ T516] bridge67: entered promiscuous mode [ 989.373515][ T516] bond78: (slave bridge67): Enslaving as an active interface with an up link [ 989.403164][ T528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7074'. [ 989.538087][T25107] block nbd90: Receive control failed (result -1) [ 989.585482][ T547] netlink: 'syz.2.7077': attribute type 1 has an invalid length. [ 989.810448][ T547] bond83: entered promiscuous mode [ 989.831156][ T547] 8021q: adding VLAN 0 to HW filter on device bond83 [ 989.859058][ T557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7077'. [ 989.860123][ T555] tipc: Enabling of bearer rejected, already enabled [ 989.891588][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7078'. [ 989.926884][ T555] netlink: 'syz.4.7078': attribute type 1 has an invalid length. [ 990.011250][ T555] bond79: entered promiscuous mode [ 990.034690][ T555] 8021q: adding VLAN 0 to HW filter on device bond79 [ 990.056991][ T558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7078'. [ 990.082053][ T558] bond79: entered allmulticast mode [ 990.113331][ T557] bond83: (slave bridge77): making interface the new active one [ 990.121406][ T557] bridge77: entered promiscuous mode [ 990.128513][ T557] bond83: (slave bridge77): Enslaving as an active interface with an up link [ 990.186191][ T555] bond79: (slave bridge68): making interface the new active one [ 990.204815][ T555] bridge68: entered promiscuous mode [ 990.220887][ T555] bridge68: entered allmulticast mode [ 990.257989][ T555] bond79: (slave bridge68): Enslaving as an active interface with an up link [ 990.411769][ T563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7079'. [ 990.472506][ T565] tipc: Enabling of bearer rejected, already enabled [ 990.514240][ T565] netlink: 'syz.3.7081': attribute type 1 has an invalid length. [ 990.597825][ T565] bond75: entered promiscuous mode [ 990.603932][ T565] 8021q: adding VLAN 0 to HW filter on device bond75 [ 990.613439][ T570] tipc: Enabling of bearer rejected, already enabled [ 990.657199][ T570] netlink: 'syz.4.7083': attribute type 1 has an invalid length. [ 990.780626][ T570] bond80: entered promiscuous mode [ 990.811894][ T570] 8021q: adding VLAN 0 to HW filter on device bond80 [ 990.919790][ T583] bond75: (slave bridge70): making interface the new active one [ 990.958811][ T583] bridge70: entered promiscuous mode [ 990.990029][ T583] bond75: (slave bridge70): Enslaving as an active interface with an up link [ 991.036596][T25107] block nbd91: Receive control failed (result -1) [ 991.060565][ T570] bond80: (slave bridge69): making interface the new active one [ 991.076420][ T570] bridge69: entered promiscuous mode [ 991.106737][ T570] bond80: (slave bridge69): Enslaving as an active interface with an up link [ 991.298095][ T592] syzkaller1: entered promiscuous mode [ 991.320596][ T592] syzkaller1: entered allmulticast mode [ 991.404257][ T594] syzkaller0: entered promiscuous mode [ 991.420019][ T594] syzkaller0: entered allmulticast mode [ 991.475221][ T601] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 991.726333][ T610] tipc: Enabling of bearer rejected, already enabled [ 991.783707][ T612] tipc: Enabling of bearer rejected, failed to enable media [ 991.808970][ T614] netlink: 'syz.0.7090': attribute type 1 has an invalid length. [ 991.812712][ T612] netlink: 'syz.2.7089': attribute type 1 has an invalid length. [ 991.832387][ T610] netlink: 'syz.3.7088': attribute type 1 has an invalid length. [ 991.978279][ T612] bond84: entered promiscuous mode [ 992.006460][ T612] 8021q: adding VLAN 0 to HW filter on device bond84 [ 992.154115][ T610] bond76: entered promiscuous mode [ 992.173482][ T610] 8021q: adding VLAN 0 to HW filter on device bond76 [ 992.223963][ T617] bond84: entered allmulticast mode [ 992.231312][ T619] bond76: entered allmulticast mode [ 992.308929][ T622] bond67: (slave bridge66): making interface the new active one [ 992.334000][ T622] bond67: (slave bridge66): Enslaving as an active interface with an up link [ 992.378565][ T623] bond76: (slave bridge71): making interface the new active one [ 992.386560][ T623] bridge71: entered promiscuous mode [ 992.392663][ T623] bridge71: entered allmulticast mode [ 992.399793][ T623] bond76: (slave bridge71): Enslaving as an active interface with an up link [ 992.466312][ T624] bond84: (slave bridge78): making interface the new active one [ 992.486052][ T624] bridge78: entered promiscuous mode [ 992.495511][ T624] bridge78: entered allmulticast mode [ 992.523825][ T624] bond84: (slave bridge78): Enslaving as an active interface with an up link [ 992.609000][ T626] macvlan4: entered promiscuous mode [ 992.625117][ T626] macvlan4: entered allmulticast mode [ 992.651025][ T626] bond67: entered promiscuous mode [ 992.657036][ T626] bridge66: entered promiscuous mode [ 992.668106][ T640] netlink: 'syz.3.7093': attribute type 1 has an invalid length. [ 992.671780][ T626] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 992.705301][ T626] bond67: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 992.739972][ T626] bond67: left promiscuous mode [ 992.747494][ T626] bridge66: left promiscuous mode [ 992.757216][T25107] block nbd92: Receive control failed (result -1) [ 992.919304][ T640] bond77: entered promiscuous mode [ 992.926340][ T640] 8021q: adding VLAN 0 to HW filter on device bond77 [ 992.935120][ T641] bond77: entered allmulticast mode [ 993.044577][ T651] bond77: (slave bridge72): making interface the new active one [ 993.060850][ T651] bridge72: entered promiscuous mode [ 993.069152][ T651] bridge72: entered allmulticast mode [ 993.083969][ T651] bond77: (slave bridge72): Enslaving as an active interface with an up link [ 993.099208][ T657] tipc: Enabling of bearer rejected, failed to enable media [ 993.113734][ T659] __nla_validate_parse: 17 callbacks suppressed [ 993.113754][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 993.161413][ T657] netlink: 'syz.0.7096': attribute type 1 has an invalid length. [ 993.347448][ T668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7097'. [ 993.370761][ T659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7096'. [ 993.422958][ T657] bond68: entered promiscuous mode [ 993.447013][ T657] 8021q: adding VLAN 0 to HW filter on device bond68 [ 993.563268][ T659] bond68: (slave bridge67): making interface the new active one [ 993.590761][ T659] bridge67: entered promiscuous mode [ 993.609572][ T659] bond68: (slave bridge67): Enslaving as an active interface with an up link [ 993.688422][ T673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7098'. [ 993.726239][ T673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7098'. [ 993.748915][ T674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7098'. [ 993.775753][ T673] syzkaller1: entered promiscuous mode [ 993.794350][ T673] syzkaller1: entered allmulticast mode [ 993.934352][ T677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 993.944751][ T684] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7101'. [ 994.236799][ T682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7099'. [ 994.307852][ T695] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 994.398086][T25107] block nbd93: Receive control failed (result -1) [ 994.652621][ T706] tipc: Enabling of bearer rejected, failed to enable media [ 994.663220][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7104'. [ 994.677207][ T706] netlink: 'syz.0.7104': attribute type 1 has an invalid length. [ 994.872022][ T710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7104'. [ 994.917545][ T706] bond69: entered promiscuous mode [ 994.934129][ T706] 8021q: adding VLAN 0 to HW filter on device bond69 [ 994.936451][ T721] netlink: 'syz.4.7107': attribute type 1 has an invalid length. [ 995.059436][T25107] block nbd94: Receive control failed (result -1) [ 995.089210][ T721] bond81: entered promiscuous mode [ 995.137754][ T721] 8021q: adding VLAN 0 to HW filter on device bond81 [ 995.225645][ T710] bond69: (slave bridge68): making interface the new active one [ 995.260361][ T710] bridge68: entered promiscuous mode [ 995.275417][ T710] bond69: (slave bridge68): Enslaving as an active interface with an up link [ 995.359813][ T717] bond81: entered allmulticast mode [ 995.406118][ T727] bond81: (slave bridge70): making interface the new active one [ 995.416063][ T733] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 995.440723][ T727] bridge70: entered promiscuous mode [ 995.447228][ T727] bridge70: entered allmulticast mode [ 995.455917][ T727] bond81: (slave bridge70): Enslaving as an active interface with an up link [ 995.479473][ T735] tipc: Enabling of bearer rejected, failed to enable media [ 995.523748][ T735] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 995.739393][ T735] bond70: entered promiscuous mode [ 995.758775][ T735] 8021q: adding VLAN 0 to HW filter on device bond70 [ 995.770450][ T736] bond70: entered allmulticast mode [ 995.948020][ T735] bond70: (slave bridge69): making interface the new active one [ 995.978683][ T735] bridge69: entered promiscuous mode [ 995.993684][T25107] block nbd95: Receive control failed (result -1) [ 996.023748][ T735] bridge69: entered allmulticast mode [ 996.034204][ T735] bond70: (slave bridge69): Enslaving as an active interface with an up link [ 996.118185][ T758] syzkaller1: entered promiscuous mode [ 996.138620][ T758] syzkaller1: entered allmulticast mode [ 996.667041][T25107] block nbd96: Receive control failed (result -1) [ 996.918730][ T789] tipc: Enabling of bearer rejected, already enabled [ 996.948681][ T789] netlink: 'syz.3.7119': attribute type 1 has an invalid length. [ 997.081962][ T789] bond78: entered promiscuous mode [ 997.099439][ T789] 8021q: adding VLAN 0 to HW filter on device bond78 [ 997.141433][ T791] bond78: entered allmulticast mode [ 997.220502][ T789] bond78: (slave bridge73): making interface the new active one [ 997.262348][ T789] bridge73: entered promiscuous mode [ 997.281455][ T789] bridge73: entered allmulticast mode [ 997.311304][ T789] bond78: (slave bridge73): Enslaving as an active interface with an up link [ 997.537272][ T803] tipc: Enabling of bearer rejected, already enabled [ 997.571097][ T803] netlink: 'syz.3.7122': attribute type 1 has an invalid length. [ 997.688359][ T803] bond79: entered promiscuous mode [ 997.695899][ T803] 8021q: adding VLAN 0 to HW filter on device bond79 [ 997.743061][ T803] bond79: entered allmulticast mode [ 997.773874][ T813] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 997.809942][ T803] bond79: (slave bridge74): making interface the new active one [ 997.842158][ T803] bridge74: entered promiscuous mode [ 997.860708][ T803] bridge74: entered allmulticast mode [ 997.868494][ T803] bond79: (slave bridge74): Enslaving as an active interface with an up link [ 998.137123][ T824] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 998.213496][ T829] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 998.580426][ T842] __nla_validate_parse: 17 callbacks suppressed [ 998.580446][ T842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7129'. [ 998.987007][ T857] tipc: Enabling of bearer rejected, failed to enable media [ 999.006940][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7133'. [ 999.023000][ T856] tipc: Enabling of bearer rejected, failed to enable media [ 999.056441][ T858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7132'. [ 999.071423][ T857] netlink: 'syz.1.7133': attribute type 1 has an invalid length. [ 999.104940][ T856] netlink: 'syz.2.7132': attribute type 1 has an invalid length. [ 999.110731][ T857] bond76: entered promiscuous mode [ 999.118395][ T857] 8021q: adding VLAN 0 to HW filter on device bond76 [ 999.148938][ T857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7133'. [ 999.149165][ T861] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7134'. [ 999.211489][ T858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7132'. [ 999.248878][ T856] bond85: entered promiscuous mode [ 999.254942][ T856] 8021q: adding VLAN 0 to HW filter on device bond85 [ 999.263268][ T857] bond76: entered allmulticast mode [ 999.270101][ T864] tipc: Enabling of bearer rejected, failed to enable media [ 999.289884][ T866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7135'. [ 999.300105][ T858] bond85: entered allmulticast mode [ 999.326000][ T864] netlink: 'syz.0.7135': attribute type 1 has an invalid length. [ 999.365348][ T867] bond76: (slave bridge67): making interface the new active one [ 999.381016][ T867] bridge67: entered promiscuous mode [ 999.386861][ T867] bridge67: entered allmulticast mode [ 999.395357][ T867] bond76: (slave bridge67): Enslaving as an active interface with an up link [ 999.428042][ T870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7135'. [ 999.468424][ T856] bond85: (slave bridge79): making interface the new active one [ 999.491226][ T856] bridge79: entered promiscuous mode [ 999.500555][ T856] bridge79: entered allmulticast mode [ 999.522303][ T856] bond85: (slave bridge79): Enslaving as an active interface with an up link [ 999.715761][ T864] bond71: entered promiscuous mode [ 999.730019][ T864] 8021q: adding VLAN 0 to HW filter on device bond71 [ 999.735706][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7138'. [ 999.783245][ T870] bond71: entered allmulticast mode [ 999.838772][T25107] block nbd97: Receive control failed (result -1) [ 999.856489][ T875] bond71: (slave bridge70): making interface the new active one [ 999.909165][ T875] bridge70: entered promiscuous mode [ 999.944397][ T875] bridge70: entered allmulticast mode [ 999.962968][ T875] bond71: (slave bridge70): Enslaving as an active interface with an up link [ 1000.003106][ T894] tipc: Enabling of bearer rejected, already enabled [ 1000.038346][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7143'. [ 1000.088587][ T894] netlink: 'syz.3.7143': attribute type 1 has an invalid length. [ 1000.266159][ T894] bond80: entered promiscuous mode [ 1000.278473][ T894] 8021q: adding VLAN 0 to HW filter on device bond80 [ 1000.317964][ T907] bond80: entered allmulticast mode [ 1000.428622][ T894] bond80: (slave bridge75): making interface the new active one [ 1000.428641][T25107] block nbd98: Receive control failed (result -1) [ 1000.444318][ T894] bridge75: entered promiscuous mode [ 1000.454597][ T894] bridge75: entered allmulticast mode [ 1000.491324][ T894] bond80: (slave bridge75): Enslaving as an active interface with an up link [ 1001.061335][T25107] block nbd99: Receive control failed (result -1) [ 1001.597751][ T953] tipc: Enabling of bearer rejected, already enabled [ 1001.616174][ T953] netlink: 'syz.4.7149': attribute type 1 has an invalid length. [ 1001.770139][ T953] bond82: entered promiscuous mode [ 1001.807649][ T953] 8021q: adding VLAN 0 to HW filter on device bond82 [ 1001.844492][ T961] bond82: entered allmulticast mode [ 1001.965742][ T953] bond82: (slave bridge71): making interface the new active one [ 1001.988400][ T953] bridge71: entered promiscuous mode [ 1001.999369][ T953] bridge71: entered allmulticast mode [ 1002.019745][ T953] bond82: (slave bridge71): Enslaving as an active interface with an up link [ 1002.425195][ T979] tipc: Enabling of bearer rejected, failed to enable media [ 1002.467086][ T979] netlink: 'syz.0.7154': attribute type 1 has an invalid length. [ 1002.508989][ T983] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 1002.556648][ T989] netlink: 'syz.3.7155': attribute type 1 has an invalid length. [ 1002.592707][ T979] bond72: entered promiscuous mode [ 1002.602091][ T979] 8021q: adding VLAN 0 to HW filter on device bond72 [ 1002.645746][T25107] block nbd100: Receive control failed (result -1) [ 1002.987078][ T979] bond72: entered allmulticast mode [ 1003.097015][ T999] bond72: (slave bridge71): making interface the new active one [ 1003.116147][ T999] bridge71: entered promiscuous mode [ 1003.128299][ T999] bridge71: entered allmulticast mode [ 1003.145123][ T999] bond72: (slave bridge71): Enslaving as an active interface with an up link [ 1003.200968][ T998] bond77: (slave bridge68): making interface the new active one [ 1003.233611][ T998] bond77: (slave bridge68): Enslaving as an active interface with an up link [ 1003.308832][ T1001] bond81: (slave bridge76): making interface the new active one [ 1003.328628][ T1001] bond81: (slave bridge76): Enslaving as an active interface with an up link [ 1003.368090][ T1002] macvlan4: entered promiscuous mode [ 1003.390044][ T1002] macvlan4: entered allmulticast mode [ 1003.417008][ T1002] bond77: entered promiscuous mode [ 1003.447820][ T1002] bridge68: entered promiscuous mode [ 1003.485454][ T1002] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1003.504235][T25107] block nbd101: Receive control failed (result -1) [ 1003.533251][ T1002] bond77: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1003.594457][ T1002] bond77: left promiscuous mode [ 1003.624366][ T1002] bridge68: left promiscuous mode [ 1003.698179][ T989] macvlan6: entered promiscuous mode [ 1003.718826][ T1017] __nla_validate_parse: 15 callbacks suppressed [ 1003.718845][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7159'. [ 1003.723496][ T989] macvlan6: entered allmulticast mode [ 1003.743552][ T1027] netlink: 'syz.2.7160': attribute type 1 has an invalid length. [ 1003.781115][T25107] block nbd102: Receive control failed (result -1) [ 1003.787529][ T989] bond81: entered promiscuous mode [ 1003.819982][ T989] bridge76: entered promiscuous mode [ 1003.848396][ T989] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1003.883064][ T989] bond81: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1003.903430][ T1024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1003.925146][ T989] bond81: left promiscuous mode [ 1003.930657][ T989] bridge76: left promiscuous mode [ 1004.036530][ T1027] bond86: entered promiscuous mode [ 1004.042163][ T1027] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1004.219816][ T1039] tipc: Enabling of bearer rejected, failed to enable media [ 1004.265543][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7162'. [ 1004.327473][ T1039] netlink: 'syz.1.7162': attribute type 1 has an invalid length. [ 1004.387642][ T1039] bond78: entered promiscuous mode [ 1004.393568][ T1039] 8021q: adding VLAN 0 to HW filter on device bond78 [ 1004.455650][ T1039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7162'. [ 1004.465441][ T1039] bond78: entered allmulticast mode [ 1004.477746][ T1042] syzkaller0: entered promiscuous mode [ 1004.502512][ T1042] syzkaller0: entered allmulticast mode [ 1004.579533][ T1039] bond78: (slave bridge69): making interface the new active one [ 1004.600554][ T1039] bridge69: entered promiscuous mode [ 1004.611005][ T1039] bridge69: entered allmulticast mode [ 1004.626595][ T1039] bond78: (slave bridge69): Enslaving as an active interface with an up link [ 1004.729788][ T1050] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1004.872749][ T1057] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7166'. [ 1004.932141][ T1060] syzkaller1: entered promiscuous mode [ 1004.948538][ T1060] syzkaller1: entered allmulticast mode [ 1005.001218][ T1056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7165'. [ 1005.185509][T27918] block nbd103: Receive control failed (result -1) [ 1005.400417][ T1084] tipc: Enabling of bearer rejected, failed to enable media [ 1005.421088][ T1084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1005.446995][ T1084] netlink: 'syz.0.7168': attribute type 1 has an invalid length. [ 1005.585677][ T1092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1005.642323][ T1087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1005.654821][ T1084] bond73: entered promiscuous mode [ 1005.671707][ T1084] 8021q: adding VLAN 0 to HW filter on device bond73 [ 1005.693633][ T1092] bond73: entered allmulticast mode [ 1005.778414][T27918] block nbd104: Receive control failed (result -1) [ 1005.845384][ T1084] bond73: (slave bridge72): making interface the new active one [ 1005.866928][ T1084] bridge72: entered promiscuous mode [ 1005.881431][ T1084] bridge72: entered allmulticast mode [ 1005.946307][ T1084] bond73: (slave bridge72): Enslaving as an active interface with an up link [ 1006.268392][ T1117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7173'. [ 1006.439001][T27918] block nbd105: Receive control failed (result -1) [ 1006.775713][T27918] block nbd106: Receive control failed (result -1) [ 1007.151029][T27918] Bluetooth: hci2: command 0x0401 tx timeout [ 1007.157137][T25107] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1007.354660][ T1143] syzkaller0: entered promiscuous mode [ 1007.367900][ T1143] syzkaller0: entered allmulticast mode [ 1007.411496][T25107] block nbd107: Receive control failed (result -1) [ 1007.662638][ T1150] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 1007.907616][ T1162] netlink: 'syz.3.7184': attribute type 1 has an invalid length. [ 1007.981885][ T1150] bond79: (slave bridge70): making interface the new active one [ 1007.993358][ T1150] bond79: (slave bridge70): Enslaving as an active interface with an up link [ 1008.165659][ T1162] bond82: entered promiscuous mode [ 1008.192132][T25107] block nbd108: Receive control failed (result -1) [ 1008.223744][ T1162] 8021q: adding VLAN 0 to HW filter on device bond82 [ 1008.346240][ T1176] bond82: (slave bridge77): making interface the new active one [ 1008.400509][ T1176] bridge77: entered promiscuous mode [ 1008.409930][ T1176] bond82: (slave bridge77): Enslaving as an active interface with an up link [ 1008.436732][ T1168] bond82: entered allmulticast mode [ 1008.450737][ T1168] bridge77: entered allmulticast mode [ 1008.476812][ T1155] macvlan4: entered promiscuous mode [ 1008.494539][ T1155] macvlan4: entered allmulticast mode [ 1008.517423][ T1155] bond79: entered promiscuous mode [ 1008.529267][ T1155] bridge70: entered promiscuous mode [ 1008.544443][ T1155] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1008.559973][ T1155] bond79: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1008.580654][ T1155] bond79: left promiscuous mode [ 1008.585723][ T1155] bridge70: left promiscuous mode [ 1008.827948][ T1183] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1008.898011][ T1185] syzkaller0: left promiscuous mode [ 1008.911544][ T1185] syzkaller0: left allmulticast mode [ 1009.074660][ T1187] __nla_validate_parse: 9 callbacks suppressed [ 1009.074678][ T1187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7188'. [ 1009.135113][ T1199] syzkaller1: entered promiscuous mode [ 1009.150357][ T1199] syzkaller1: entered allmulticast mode [ 1009.315821][T27918] block nbd109: Receive control failed (result -1) [ 1009.390619][ T1210] netlink: 'syz.0.7192': attribute type 1 has an invalid length. [ 1009.461538][ T1213] netlink: 280 bytes leftover after parsing attributes in process `syz.3.7193'. [ 1009.562265][ T1219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7192'. [ 1009.758707][ T1210] bond74: (slave bridge73): making interface the new active one [ 1009.814149][ T1210] bond74: (slave bridge73): Enslaving as an active interface with an up link [ 1009.923147][ T1219] macvlan4: entered promiscuous mode [ 1009.941223][ T1219] macvlan4: entered allmulticast mode [ 1009.957226][ T1219] bond74: entered promiscuous mode [ 1009.971642][ T1219] bridge73: entered promiscuous mode [ 1009.991698][ T1219] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1010.012341][ T1219] bond74: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1010.031508][ T1219] bond74: left promiscuous mode [ 1010.036548][ T1219] bridge73: left promiscuous mode [ 1010.094456][ T1233] tipc: Enabling of bearer rejected, already enabled [ 1010.106294][ T1233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1010.129482][ T1233] netlink: 'syz.4.7196': attribute type 1 has an invalid length. [ 1010.141464][ T1235] tipc: Enabling of bearer rejected, failed to enable media [ 1010.162083][ T1235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1010.216333][ T1238] netlink: 'syz.1.7197': attribute type 1 has an invalid length. [ 1010.245882][ T1237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1010.269351][ T1233] bond83: entered promiscuous mode [ 1010.293470][ T1233] 8021q: adding VLAN 0 to HW filter on device bond83 [ 1010.317629][ T1243] netlink: 'syz.2.7198': attribute type 1 has an invalid length. [ 1010.351735][ T1235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1010.357181][ T1238] bond80: entered promiscuous mode [ 1010.366533][ T1238] 8021q: adding VLAN 0 to HW filter on device bond80 [ 1010.375999][ T1237] bond83: entered allmulticast mode [ 1010.447965][ T1248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1010.496193][ T1237] bond83: (slave bridge72): making interface the new active one [ 1010.505084][ T1237] bridge72: entered promiscuous mode [ 1010.511355][ T1237] bridge72: entered allmulticast mode [ 1010.519883][ T1237] bond83: (slave bridge72): Enslaving as an active interface with an up link [ 1010.529483][ T1247] tipc: Enabling of bearer rejected, failed to enable media [ 1010.545749][ T1252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1010.560618][ T1247] netlink: 'syz.0.7200': attribute type 1 has an invalid length. [ 1010.598111][ T1245] macvlan3: entered promiscuous mode [ 1010.620463][ T1245] macvlan3: entered allmulticast mode [ 1010.625936][ T1247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1010.646991][ T1245] bond87: entered promiscuous mode [ 1010.653584][ T1245] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1010.666783][ T1245] bond87: left promiscuous mode [ 1010.717330][ T1243] bond87: (slave bridge81): Enslaving as an active interface with a down link [ 1010.727578][ T1257] tipc: Enabling of bearer rejected, already enabled [ 1010.747041][ T1250] syzkaller0: entered promiscuous mode [ 1010.748015][ T1257] netlink: 'syz.4.7202': attribute type 1 has an invalid length. [ 1010.766570][ T1250] syzkaller0: entered allmulticast mode [ 1011.078025][T27918] block nbd110: Receive control failed (result -1) [ 1011.174028][ T6099] ------------[ cut here ]------------ [ 1011.182126][ T6099] err >= 0 [ 1011.182157][ T6099] WARNING: net/tls/tls_sw.c:73 at tls_err_abort+0x5d/0x80, CPU#0: kworker/0:11/6099 [ 1011.194798][ T6099] Modules linked in: [ 1011.201491][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 1011.211040][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.221157][ T6099] Workqueue: pencrypt_serial padata_serial_worker [ 1011.227649][ T6099] RIP: 0010:tls_err_abort+0x5d/0x80 [ 1011.232925][ T6099] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 1b 89 ab 9c 01 00 00 48 89 df 5b 5d e9 c9 a2 32 ff e8 a4 60 8a f7 90 <0f> 0b 90 eb c3 89 f9 80 e1 07 80 c1 03 38 c1 7c d9 e8 1d 9f f5 f7 [ 1011.252585][ T6099] RSP: 0018:ffffc900069379e0 EFLAGS: 00010293 [ 1011.258678][ T6099] RAX: ffffffff8a3adf8c RBX: ffff88807d1e0d80 RCX: ffff888058bfdd00 [ 1011.269082][ T6099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1011.277155][ T6099] RBP: 0000000000000000 R08: ffffe8ffffc513e3 R09: 1ffffd1ffff8a27c [ 1011.285211][ T6099] R10: dffffc0000000000 R11: ffffffff8a3c4d70 R12: ffff888028eaf400 [ 1011.293344][ T6099] R13: ffff88804441030c R14: dffffc0000000000 R15: ffff888028eaf460 [ 1011.301487][ T6099] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 1011.310484][ T6099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1011.317185][ T6099] CR2: 00007f521f503ff8 CR3: 0000000086fc2000 CR4: 00000000003526f0 [ 1011.325251][ T6099] Call Trace: [ 1011.328548][ T6099] [ 1011.331561][ T6099] tls_encrypt_done+0x223/0x480 [ 1011.336535][ T6099] padata_serial_worker+0x2b9/0x430 [ 1011.341819][ T6099] ? padata_serial_worker+0xbb/0x430 [ 1011.347132][ T6099] ? __pfx_padata_serial_worker+0x10/0x10 [ 1011.352942][ T6099] ? rcu_is_watching+0x15/0xb0 [ 1011.357777][ T6099] ? process_scheduled_works+0xa20/0x14e0 [ 1011.363619][ T6099] process_scheduled_works+0xa8e/0x14e0 [ 1011.369279][ T6099] ? __pfx_process_scheduled_works+0x10/0x10 [ 1011.375349][ T6099] ? assign_work+0x3cf/0x5d0 [ 1011.379969][ T6099] worker_thread+0xa47/0xfb0 [ 1011.384681][ T6099] kthread+0x389/0x470 [ 1011.388791][ T6099] ? __pfx_worker_thread+0x10/0x10 [ 1011.393972][ T6099] ? __pfx_kthread+0x10/0x10 [ 1011.398610][ T6099] ret_from_fork+0x514/0xb70 [ 1011.403338][ T6099] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.408475][ T6099] ? __switch_to+0xc89/0x1420 [ 1011.413665][ T6099] ? __pfx_kthread+0x10/0x10 [ 1011.418318][ T6099] ret_from_fork_asm+0x1a/0x30 [ 1011.423176][ T6099] [ 1011.426240][ T6099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1011.433533][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 1011.442984][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.453118][ T6099] Workqueue: pencrypt_serial padata_serial_worker [ 1011.459532][ T6099] Call Trace: [ 1011.462796][ T6099] [ 1011.465714][ T6099] vpanic+0x56c/0xa60 [ 1011.469716][ T6099] ? __pfx__printk+0x10/0x10 [ 1011.474299][ T6099] ? __pfx_vpanic+0x10/0x10 [ 1011.478787][ T6099] ? is_bpf_text_address+0x292/0x2b0 [ 1011.484060][ T6099] ? is_bpf_text_address+0x26/0x2b0 [ 1011.489254][ T6099] panic+0xc5/0xd0 [ 1011.492966][ T6099] ? __pfx_panic+0x10/0x10 [ 1011.497377][ T6099] ? ret_from_fork_asm+0x1a/0x30 [ 1011.502309][ T6099] __warn+0x315/0x4c0 [ 1011.506276][ T6099] ? tls_err_abort+0x5d/0x80 [ 1011.510947][ T6099] ? tls_err_abort+0x5d/0x80 [ 1011.515529][ T6099] __report_bug+0x28e/0x530 [ 1011.520100][ T6099] ? tls_err_abort+0x5d/0x80 [ 1011.524679][ T6099] ? __pfx___report_bug+0x10/0x10 [ 1011.529697][ T6099] ? __lock_acquire+0x683/0x2cd0 [ 1011.534646][ T6099] ? __lock_acquire+0x683/0x2cd0 [ 1011.539588][ T6099] ? tls_err_abort+0x5d/0x80 [ 1011.544173][ T6099] report_bug+0x16a/0x220 [ 1011.548581][ T6099] ? tls_err_abort+0x5d/0x80 [ 1011.553163][ T6099] ? tls_err_abort+0x5f/0x80 [ 1011.557744][ T6099] handle_bug+0x9c/0x200 [ 1011.561992][ T6099] exc_invalid_op+0x1a/0x50 [ 1011.566571][ T6099] asm_exc_invalid_op+0x1a/0x20 [ 1011.571425][ T6099] RIP: 0010:tls_err_abort+0x5d/0x80 [ 1011.576615][ T6099] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 1b 89 ab 9c 01 00 00 48 89 df 5b 5d e9 c9 a2 32 ff e8 a4 60 8a f7 90 <0f> 0b 90 eb c3 89 f9 80 e1 07 80 c1 03 38 c1 7c d9 e8 1d 9f f5 f7 [ 1011.596209][ T6099] RSP: 0018:ffffc900069379e0 EFLAGS: 00010293 [ 1011.602314][ T6099] RAX: ffffffff8a3adf8c RBX: ffff88807d1e0d80 RCX: ffff888058bfdd00 [ 1011.610361][ T6099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1011.618362][ T6099] RBP: 0000000000000000 R08: ffffe8ffffc513e3 R09: 1ffffd1ffff8a27c [ 1011.626426][ T6099] R10: dffffc0000000000 R11: ffffffff8a3c4d70 R12: ffff888028eaf400 [ 1011.634403][ T6099] R13: ffff88804441030c R14: dffffc0000000000 R15: ffff888028eaf460 [ 1011.642381][ T6099] ? __pfx_tls_encrypt_done+0x10/0x10 [ 1011.647756][ T6099] ? tls_err_abort+0x5c/0x80 [ 1011.652348][ T6099] tls_encrypt_done+0x223/0x480 [ 1011.657195][ T6099] padata_serial_worker+0x2b9/0x430 [ 1011.662380][ T6099] ? padata_serial_worker+0xbb/0x430 [ 1011.667743][ T6099] ? __pfx_padata_serial_worker+0x10/0x10 [ 1011.673541][ T6099] ? rcu_is_watching+0x15/0xb0 [ 1011.678315][ T6099] ? process_scheduled_works+0xa20/0x14e0 [ 1011.684109][ T6099] process_scheduled_works+0xa8e/0x14e0 [ 1011.689667][ T6099] ? __pfx_process_scheduled_works+0x10/0x10 [ 1011.695643][ T6099] ? assign_work+0x3cf/0x5d0 [ 1011.700235][ T6099] worker_thread+0xa47/0xfb0 [ 1011.704847][ T6099] kthread+0x389/0x470 [ 1011.708911][ T6099] ? __pfx_worker_thread+0x10/0x10 [ 1011.714010][ T6099] ? __pfx_kthread+0x10/0x10 [ 1011.718593][ T6099] ret_from_fork+0x514/0xb70 [ 1011.723175][ T6099] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.728305][ T6099] ? __switch_to+0xc89/0x1420 [ 1011.732990][ T6099] ? __pfx_kthread+0x10/0x10 [ 1011.737599][ T6099] ret_from_fork_asm+0x1a/0x30 [ 1011.742373][ T6099] [ 1011.745696][ T6099] Kernel Offset: disabled [ 1011.750099][ T6099] Rebooting in 86400 seconds..