last executing test programs: 1m17.301219641s ago: executing program 2 (id=3060): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 1m17.149147242s ago: executing program 2 (id=3062): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000003600070103007c0000100003800c00080000108578d57a5933a84ab91872fb00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003360000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) close(r1) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}, {&(0x7f00000016c0)="071cd289a39a3f01ed2affd0895bd7609db5749c6eeb091e8dc49819bd1cc6dc180463d6c1f4001a76121387fddfcf97887edfbd82f8f0406b131f694209901e95ab186efe41ffd0d0dfa9e30e2c4afde5b05c05c71d5e50b318db7520ff9df567b9fb", 0x63}, {&(0x7f0000001840)="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", 0xe91}], 0x3}, 0xc008) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200)=0x10001, 0x12) 1m16.869408262s ago: executing program 2 (id=3065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0xfffd, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x11, 0x0, 0x11, 0x0, @remote, @loopback}}}}, 0xfdef) r2 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 1m16.549291286s ago: executing program 2 (id=3068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) 1m15.644475007s ago: executing program 3 (id=3072): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0xff, 0x4) getuid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x6bf1c2d5adba8c32}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) gettid() r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, &(0x7f0000000340)) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2e, 0x9, 0x70bf27, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$netlink(r0, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x884c}, 0x20028055) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r8, 0xa}, &(0x7f0000000380)=0x8) sendto(r1, 0x0, 0x0, 0x850, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000004680), &(0x7f0000004700)=0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0xeb, 0x2, 0x5, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0xa4f, 0x9c6}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000480)={@empty, r9}, 0x14) 1m15.633066247s ago: executing program 2 (id=3073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0xc7, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r5, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="f4040900062b2c25fe80040000000000dc8b8543aa00fcb11e2851f4b6d285eb7672caa6fc903b14a354", 0x2a}], 0x1}, 0x20000010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008001300000017e505000500020000000500010006"], 0x54}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r11, 0x89e0, &(0x7f000000b4c0)) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r12 = accept$alg(r10, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r12, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m15.441339115s ago: executing program 4 (id=2973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='2', @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x20000000) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r10, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000fcdbdf252e00000008000200", @ANYRES32=r14, @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x20004849}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r5, @ANYBLOB="200029bd7000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="bc0030801400040068b1fccc9b383ed5b520f5f5194d169c100001800c000500020000000000000024000300a29efed543594e1d26aa6fd0fdfe85c3548abb60a49ea92e5f3593afb993e5391400040064fbc4d8d353a6f8f0db47893090e6d6240003009b38a189c5ce92aa7c3561cb7a472a428d5346ae8a431913018e8c563d8c020f1400040080b0097f932b16a20c527eb920429def2400030018f998514e37e83d5f745ca16f71d63fcb99731755a5971d7af1d23e690794b308000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000300e47e20df4be026920185ab3729428c1915418edd38dafbf217be", @ANYRES32=r14, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x4010011}, 0xc804) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m15.171241594s ago: executing program 2 (id=3076): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, 0x3}, 0x80, 0x0}, 0x0) syz_emit_ethernet(0xdce, &(0x7f00000013c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, 0x0, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmmsg$inet6(r2, &(0x7f0000001240), 0x0, 0x0) 1.22228221s ago: executing program 0 (id=3078): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}, 0x1c) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x78, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x17}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1c}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x6d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xc}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x10800) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) (rerun: 64) 1.221889011s ago: executing program 1 (id=3079): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) socketpair(0x18, 0x4, 0x5, &(0x7f0000000180)) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000000000000"], 0x128}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) (async) recvmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x9e6}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000540)=0x7f, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000d40)={0x29, 0xc, 0x2, 0x98, 0x0, [@private0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x68) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000002c0)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 1.212181493s ago: executing program 0 (id=3080): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x47, 0x3130, 0x14, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000, 0x40, 0xfffffbff, 0x1}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9c, 0x7, 0x401, 0x6d, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x700, 0x8000, 0xfffffff4, 0xa}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 1.21096785s ago: executing program 1 (id=3081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000080)={0x50, r7, 0x1, 0x30bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2002}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48040) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa5ba}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x64}}, 0x4004005) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x4, 0x3dc], [0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="300200001000030000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000800000000", @ANYRES32=r11, @ANYBLOB="05005300010000000800050002000000"], 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xe, [0xfffffffb, 0x80, 0x9cee, 0xf0f5, 0x1, 0xf716, 0xbce6, 0xb615, 0x0, 0x6, 0x3, 0x5, 0x2, 0x5, 0xffff5735, 0x9, 0x10, 0x6, 0x1, 0x7, 0x2, 0x2, 0x2da54ab0, 0x1, 0x200, 0x1, 0x4, 0xe4de, 0x2f0, 0x2, 0x8, 0x1, 0xfffffffd, 0x6, 0x5, 0x8, 0xfffff948, 0x2, 0xe, 0x1000, 0xc0, 0x100, 0x5, 0x7, 0x7fff, 0x8, 0x4, 0xa1, 0xffffffca, 0xffff, 0x6, 0x40, 0xfffffff8, 0x4, 0x80000001, 0xd, 0x5, 0xffff, 0x401, 0x7, 0x6a, 0x3, 0x9, 0x3, 0x8, 0xe, 0x200, 0xf35, 0x1, 0x8, 0x8, 0x8001, 0x0, 0xf5, 0x1, 0x7fff, 0x3, 0xfffffffd, 0x8, 0xee9, 0xfff, 0x7fffffff, 0x2, 0x100, 0x7, 0x1, 0xfffff800, 0x7, 0x2, 0x0, 0xfffffffa, 0x4, 0x6, 0x7, 0x0, 0x5, 0x2, 0x6, 0xfffffff9, 0x65, 0x1000, 0x7fffffff, 0xa3, 0x2, 0x8, 0x80000000, 0x4, 0x6, 0xcfd8, 0x81, 0x8000, 0xc000, 0x7ff, 0xe7, 0x3, 0xc25f, 0x4, 0x3, 0x3, 0xffff7fff, 0xffffffff, 0x100, 0x800, 0x0, 0x4, 0x4, 0x10, 0x10000], "c7ec256dffbf43a389a588b7197da26d383b0af5025c5729d6d3a520931a88c81e95a66746b8bdbb84c521efa2bc1fc539b6aed79c1aa8b77bda1e94ce10cb6e48f46fe4aab5ed56cd22ec2f1d747f9f282b9bb216bd3dfd5a1ee914"}}) 1.210705732s ago: executing program 0 (id=3082): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) 1.21029632s ago: executing program 4 (id=3083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380100001000010000000000fdfffffffe8000000000000000000000000000bbac1e010100000000000000000000000000000000000800040200000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414bb000004d232000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200a300000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 1.208733382s ago: executing program 1 (id=3084): r0 = socket(0x2a, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtclass={0x34, 0x28, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x9, 0xfff1}, {0x5, 0x1}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0xe4, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040004) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x6, r12}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000000)={r12, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f00000000c0)=0x84) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.208434972s ago: executing program 0 (id=3085): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x50, r1, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$can_raw(0x1d, 0x3, 0x1) 1.207866015s ago: executing program 3 (id=3075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000480)=0x7) unshare(0x2a020400) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r4}, 0x50) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1.20732705s ago: executing program 0 (id=3086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="05000000050000000400000000210000000000000000000029fb51e543173fb51adea04150ce00000000"], 0x50) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) unshare(0x22020400) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r9}, &(0x7f0000000600), &(0x7f0000000780)=r11}, 0x20) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12, 0x0, 0x4}, 0x18) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c780)={0x8, [], 0x80, "d21f2fbdbd633f"}) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r1, 0x0, 0x0, 0x0) 1.205233337s ago: executing program 1 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1fd, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000039}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.180172881s ago: executing program 3 (id=3089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff03, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES8=r0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x8000) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000009500000000f5ff00"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x15, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffcc5}, 0x22) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.179321817s ago: executing program 4 (id=3090): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001040200"/20, @ANYRES32=r1, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000100000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x800) 663.559964ms ago: executing program 4 (id=3091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) r1 = epoll_create(0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000006440)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 625.249292ms ago: executing program 0 (id=3092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012020) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x110c2300fe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x401, 0x5b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x7800, 0x7, 0x6c5}}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@deltfilter={0x44, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x14, 0x9}, {0x7, 0xffe2}}, [@TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_RATE={0x6, 0x5, {0x4, 0xfa}}, @TCA_CHAIN={0x8, 0xb, 0x89e}]}, 0x44}}, 0x20004813) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 573.467685ms ago: executing program 3 (id=3093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f00000064c0)=0x8, r4, 0x0, 0x2000000000000e, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 553.391919ms ago: executing program 4 (id=3094): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 488.528758ms ago: executing program 1 (id=3095): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYBLOB="e0eb4f280496207effc92ec76d6b923342e17fbc89351f2f491a409c82e330bbe388c6b824749e2b65b2b599d8aa6b3a30bbac7b7226b6ef674c31d7fcb830c3c17569b82c1090f7b14d70a23029c0fdb124bb203af312d4ec72ef48ff59b8938866af694cebcc99ca2a0cab2e0cc494c975e5631a3d2c14a3828c11b6c0dba81cdd25f30636593ba081feb18ad087e3737091126ecc753c10ee781a906bdb", @ANYRES64=r0], 0x48}}, 0x8000) 357.314613ms ago: executing program 1 (id=3096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0218000009000000000000000000000005000600000000000a0000000000000000000000000000000002001300080000002dbd7000013500"/72], 0x48}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffc, 0x25dfdbfe, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {0x7, 0x0, 0x0, 0x9, 0xffff}, {0x1, 0x9, 0x80}, 0x5, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x3, 0x5, 0x0, 0x42e6}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x3506, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@multicast1, 0x800000, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3506, 0x4, 0x2, 0x1}]}]}, 0x1bc}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)="b8a501531890f1f7c548b28225cc772f31e7e8c7c988fb", 0x17}], 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r7 = socket(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=r7], 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r9 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, r8, 0x25, 0x11, @val=@iter={&(0x7f0000000000)=@task={r9, r9, r10}, 0x10}}, 0x20) 345.942321ms ago: executing program 3 (id=3097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x27b780, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="aff5", 0x2}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2f, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llu}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x3, 0x0, 0x0, 0x3, 0x1, 0x10, 0x8}, @alu={0x4, 0x1, 0xd, 0x9, 0xb, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf22, 0x0, 0x0, 0x0, 0x172}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xfffffff9, 0x61, &(0x7f0000000080)=""/97, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x9}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x2, 0x3, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x4}, {0x4, 0x3, 0xd, 0x4}, {0x4, 0x4, 0x0, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x4, 0x4, 0x7, 0x4}, {0x4, 0x5, 0x1, 0x9}, {0x3, 0x4, 0x8, 0x2}, {0x0, 0x5, 0x0, 0x9}, {0x4, 0x2, 0xf}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0xb2, 0xc7, &(0x7f00000005c0)="3834ce0b805d4632ee0764710be2cbe31f776a692426e81a38ffb773121b179d19d0f7724d13ebfa9931ff8126f02d52a4b61b870444e4ba753ceae358b2e6e61e809c2aa90c62dac561c934d7111f8587bc9b00844e00a93645c844d234e25b7e95cdd1ab59de3b6f5a733bb7b310aa268e8ab6c4241480f22897e93fc2b34c525c435dd841c5063cfeaf6b84753ff0ffc4332981d48f05dc9270a19178acfb665bd36b7ef10a446deb29dec37fbee68921", &(0x7f0000000680)=""/199, 0x0, 0x0, 0xce, 0x32, &(0x7f0000000780)="dfce224890b6946a726fa7ca14d6f413ac73ffc694d59b3d724d11c74b1a90eca128a7ea9b4c87ce3a5d7e8f7a0ae36121ff5bb587cb75b3a5e2c27e5a39df2f5d8ea59813845142d99bbf26fac397cbf09c58f051048d8338e8317382fca1393f8d55859f401e81e5afe3da5d21b5039a75943a9203c973a2b8915f7377eb6798728622d673182f6ecbaafde5f080b8f4138f12c7d4800fb68c81a2930f4a479c37abbacaa5ce699091f31083b781235b1fdd7b8a8bd3f1a74ba43fbbb054345b7678756b17d0fd9cf97a16883b", &(0x7f0000000240)="ff2255ac28cd73d8035fdb2948fd7a1284ab171a9ee3dd0cf12d5ac0e5c9b0483a42e095a52955dd843fe16808e1311f6649", 0x1, 0x0, 0x81}, 0x50) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000500"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async) close(0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000100)={0x9, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) 214.998639ms ago: executing program 4 (id=3098): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xc84d9000) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa010101, 0x400000}]}, @ssrr={0x89, 0xf, 0x77, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x86, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200007f00c1292c1300000a00000085000000200000001801895e850000202070253e2e65a814f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f30000008500ad36f8f4bf9c3f578a5537390c2e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) 0s ago: executing program 3 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r0, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100000030000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8800) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.3.1938'. [ 677.072380][T13498] 8021q: VLANs not supported on ip_vti0 [ 677.414100][T13507] tipc: Enabled bearer , priority 0 [ 677.422899][T13507] syzkaller0: entered promiscuous mode [ 677.454582][T13507] syzkaller0: entered allmulticast mode [ 677.485121][T13507] tipc: Resetting bearer [ 677.506276][T13507] syzkaller0: tun_net_xmit 90 [ 677.544283][T13506] tipc: Resetting bearer [ 677.604152][T13506] tipc: Disabling bearer [ 677.635431][T13510] syzkaller0: entered promiscuous mode [ 677.640919][T13510] syzkaller0: entered allmulticast mode [ 678.096595][T13529] ip6tnl0: Caught tx_queue_len zero misconfig [ 678.162631][T13537] tipc: Enabled bearer , priority 0 [ 678.192176][T13537] syzkaller0: entered promiscuous mode [ 678.213977][T13537] syzkaller0: entered allmulticast mode [ 678.304845][T13537] syzkaller0: left promiscuous mode [ 678.317265][T13537] syzkaller0: left allmulticast mode [ 678.537858][T13534] tipc: Resetting bearer [ 678.601031][T13534] tipc: Disabling bearer [ 678.836242][T13570] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 679.082415][T13582] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 679.158651][T13587] gre0: left promiscuous mode [ 679.163712][T13587] gre0: left allmulticast mode [ 679.187343][T13587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.197676][T13587] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.209436][T13587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.010913][T13622] __nla_validate_parse: 8 callbacks suppressed [ 680.010931][T13622] netlink: 684 bytes leftover after parsing attributes in process `syz.3.1972'. [ 680.289488][T13630] xfrm0 speed is unknown, defaulting to 1000 [ 680.450763][T13642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1979'. [ 680.463280][T13642] block nbd0: not configured, cannot reconfigure [ 680.478543][T13636] Cannot find del_set index 0 as target [ 680.501475][T13639] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 680.515478][T13639] bond0: (slave bond_slave_0): Releasing backup interface [ 680.527682][T13639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.535914][T13639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.559743][T13639] bond0: (slave wlan1): Releasing backup interface [ 680.594545][T13639] bond1: (slave geneve2): Releasing active interface [ 680.603088][T13639] geneve2: left promiscuous mode [ 680.618776][T13639] batman_adv: batadv0: Removing interface: macvlan2 [ 680.632306][T13650] netlink: 'syz.0.1978': attribute type 10 has an invalid length. [ 680.641892][T13639] veth3: left allmulticast mode [ 680.667138][T13639] veth3: left promiscuous mode [ 680.682954][T13639] bridge1: port 1(veth3) entered disabled state [ 680.710045][T13643] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 680.718829][T13643] bridge5: entered allmulticast mode [ 680.730484][T13650] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 680.737602][T13650] bond0: (slave wlan1): refused to change device type [ 680.781208][T13649] syzkaller0: entered promiscuous mode [ 680.803427][T13649] syzkaller0: entered allmulticast mode [ 680.831220][T13654] ip6gretap3: entered allmulticast mode [ 680.874676][T13649] tipc: Enabled bearer , priority 0 [ 680.906421][T13645] tipc: Resetting bearer [ 680.962901][T13645] tipc: Disabling bearer [ 680.982571][T13657] syzkaller1: entered promiscuous mode [ 680.993200][T13657] syzkaller1: entered allmulticast mode [ 681.204782][T13671] syzkaller0: entered promiscuous mode [ 681.210282][T13671] syzkaller0: entered allmulticast mode [ 681.634571][T13691] Cannot find add_set index 0 as target [ 681.644166][T13691] netlink: 'syz.1.1991': attribute type 142 has an invalid length. [ 681.695299][T13691] netlink: 'syz.1.1991': attribute type 30 has an invalid length. [ 682.441449][T13720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.584104][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 683.911232][T13754] netlink: 'syz.4.2007': attribute type 21 has an invalid length. [ 683.941189][T13754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2007'. [ 684.204137][T13777] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 684.223491][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'. [ 684.292232][T13783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2013'. [ 684.316135][T13780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2012'. [ 684.427486][T13786] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2014'. [ 684.461277][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 684.881273][T13820] nbd: must specify at least one socket [ 684.901175][T13821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 685.045413][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 685.053207][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 685.071470][T13830] tipc: Enabled bearer , priority 0 [ 685.104169][T13830] syzkaller0: entered promiscuous mode [ 685.109652][T13830] syzkaller0: entered allmulticast mode [ 685.143899][T13830] tipc: Resetting bearer [ 685.159920][T13830] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:e8c2:71ff:fe82:b287 error=-28 [ 685.224631][T13845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 685.248123][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 685.397738][T13850] xfrm0 speed is unknown, defaulting to 1000 [ 685.688575][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.856562][T13826] tipc: Resetting bearer [ 685.863422][T13866] netlink: 'syz.3.2034': attribute type 12 has an invalid length. [ 685.892665][T13826] tipc: Disabling bearer [ 686.140631][T13830] infiniband !yz!: set down [ 686.146784][T13830] infiniband !yz!: added team_slave_0 [ 686.213723][T13830] RDS/IB: !yz!: added [ 686.222698][T13830] smc: adding ib device !yz! with port count 1 [ 686.236791][T13830] smc: ib device !yz! port 1 has no pnetid [ 686.858074][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 686.873680][T13901] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 686.953143][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 686.972742][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 687.003986][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 687.033694][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 687.053423][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 687.268815][T13913] netlink: 'syz.3.2044': attribute type 11 has an invalid length. [ 687.304848][T13913] netlink: 'syz.3.2044': attribute type 11 has an invalid length. [ 687.537660][T13922] bond3: Removing last ns target with arp_interval on [ 687.749509][T13934] netlink: 'syz.2.2049': attribute type 5 has an invalid length. [ 688.350212][T13947] Cannot find add_set index 0 as target [ 688.814612][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 688.978019][T13959] ipvlan3: entered promiscuous mode [ 690.235297][T13981] __nla_validate_parse: 62 callbacks suppressed [ 690.235315][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 691.072178][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 691.095315][T14004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2065'. [ 691.144877][T14004] geneve4: entered promiscuous mode [ 691.158748][T14004] geneve4: entered allmulticast mode [ 691.242388][ T6122] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.264347][ T6122] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.279251][T14004] syzkaller0: entered promiscuous mode [ 691.296984][T14008] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 691.306490][T14004] syzkaller0: entered allmulticast mode [ 691.323026][ T6122] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.384290][ T6122] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.408344][T14011] tipc: Enabling of bearer rejected, already enabled [ 691.509468][T14014] netlink: zone id is out of range [ 691.524240][T14014] netlink: zone id is out of range [ 691.525954][T14016] netlink: 'syz.4.2070': attribute type 1 has an invalid length. [ 691.529470][T14014] netlink: zone id is out of range [ 691.562874][T14014] netlink: zone id is out of range [ 691.598893][T14014] netlink: zone id is out of range [ 691.604382][T14014] netlink: zone id is out of range [ 691.609901][T14014] netlink: zone id is out of range [ 691.618116][T14014] netlink: zone id is out of range [ 691.625904][T14014] netlink: zone id is out of range [ 691.631069][T14014] netlink: zone id is out of range [ 691.649180][T14016] bond2: (slave veth7): Enslaving as an active interface with a down link [ 691.711645][T14016] netlink: 'syz.4.2070': attribute type 39 has an invalid length. [ 691.720691][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 691.748345][T14026] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2072'. [ 691.758428][T14016] bond2 (unregistering): (slave veth7): Releasing active interface [ 691.776999][T14016] bond2 (unregistering): Released all slaves [ 691.794057][T14026] ksmbd: Unknown IPC event: 1, ignore. [ 691.813099][T14035] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 691.972769][T14046] netlink: 'syz.1.2078': attribute type 12 has an invalid length. [ 691.981336][T14045] netlink: 'syz.1.2078': attribute type 12 has an invalid length. [ 691.992533][T14045] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 693.038738][T14048] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2076'. [ 693.164982][T14054] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2080'. [ 693.321101][T14056] xfrm0 speed is unknown, defaulting to 1000 [ 693.550908][T14069] sctp: [Deprecated]: syz.2.2085 (pid 14069) Use of int in maxseg socket option. [ 693.550908][T14069] Use struct sctp_assoc_value instead [ 693.855016][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 694.022502][T14085] netlink: 'syz.3.2086': attribute type 11 has an invalid length. [ 694.030862][T14085] netlink: 'syz.3.2086': attribute type 11 has an invalid length. [ 694.038832][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2086'. [ 694.159491][T14091] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2093'. [ 694.461051][T14098] xfrm0 speed is unknown, defaulting to 1000 [ 694.731052][T14113] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 694.794427][T14113] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 694.962683][T14127] netlink: 'syz.3.2106': attribute type 9 has an invalid length. [ 695.307446][T14143] __nla_validate_parse: 3 callbacks suppressed [ 695.307463][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 695.370127][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 695.568448][T14153] dvmrp0: entered allmulticast mode [ 695.862362][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 695.994095][T14160] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 696.039454][T14160] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 696.361948][T14173] team0: Caught tx_queue_len zero misconfig [ 696.618863][T14181] xfrm0 speed is unknown, defaulting to 1000 [ 697.016726][T14192] ieee802154 phy0 wpan0: encryption failed: -22 [ 697.120265][T14180] xfrm0 speed is unknown, defaulting to 1000 [ 697.195819][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2122'. [ 697.265246][T14205] xt_connbytes: Forcing CT accounting to be enabled [ 697.272302][T14205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 697.322460][T14183] xfrm0 speed is unknown, defaulting to 1000 [ 697.438956][T14210] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 697.551868][T14212] xt_CT: No such helper "snmp_trap" [ 697.562064][T14212] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2125'. [ 698.210761][ T5820] cgroup: fork rejected by pids controller in /syz1 [ 698.488206][T13087] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.622253][T13087] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.710411][T13087] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.813885][T13087] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.000484][T11347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.010823][T11347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.018747][T11347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.027158][T11347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.041404][T11347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.380176][T13087] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 699.418190][T13087] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 699.517120][ T12] smc: removing ib device syz1 [ 700.482711][T13087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.503966][T13087] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 700.513625][T13087] bond0 (unregistering): Released all slaves [ 700.662272][T13087] bond1 (unregistering): left promiscuous mode [ 700.670216][T13087] team0: Port device bond1 removed [ 700.677927][T13087] bond1 (unregistering): Released all slaves [ 700.846874][T13087] bond2 (unregistering): Released all slaves [ 700.965236][T13087] bond3 (unregistering): Released all slaves [ 701.065368][T13087] bond4 (unregistering): Released all slaves [ 701.126959][ T5839] Bluetooth: hci2: command tx timeout [ 701.150132][T13087] bond5 (unregistering): Released all slaves [ 701.167035][T13087] bond6 (unregistering): Released all slaves [ 701.247941][T13087] bond7 (unregistering): Released all slaves [ 701.260610][T13087] bond8 (unregistering): (slave veth5): Releasing backup interface [ 701.270108][T13087] bond8 (unregistering): Released all slaves [ 701.376264][T13087] tipc: Left network mode [ 701.795922][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2132'. [ 701.949625][T14243] net_ratelimit: 7 callbacks suppressed [ 701.949641][T14243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.011104][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2131'. [ 702.279644][T14254] bond6: entered promiscuous mode [ 702.307346][T14254] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.511934][T14254] bond6 (unregistering): Released all slaves [ 702.765314][T14262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2135'. [ 703.203948][T14272] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 703.211707][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2139'. [ 703.235338][ T5839] Bluetooth: hci2: command tx timeout [ 703.276441][T13087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.289486][T13087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.754293][T13087] team_slave_1 (unregistering): left promiscuous mode [ 703.763695][T13087] team0 (unregistering): Port device team_slave_1 removed [ 703.804326][T13087] team_slave_0 (unregistering): left promiscuous mode [ 703.812135][T13087] team0 (unregistering): Port device team_slave_0 removed [ 704.088845][T14281] 8021q: VLANs not supported on ip6gre0 [ 704.101703][T14233] chnl_net:caif_netlink_parms(): no params data found [ 704.475491][T14320] netlink: 'syz.4.2147': attribute type 2 has an invalid length. [ 704.565856][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.573196][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.580361][T14233] bridge_slave_0: entered allmulticast mode [ 704.623125][T14233] bridge_slave_0: entered promiscuous mode [ 704.645208][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.652397][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.673272][T14233] bridge_slave_1: entered allmulticast mode [ 704.695103][T14233] bridge_slave_1: entered promiscuous mode [ 704.793886][T13087] IPVS: stop unused estimator thread 0... [ 704.875423][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.964394][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.265132][T14233] team0: Port device team_slave_0 added [ 705.293985][ T5839] Bluetooth: hci2: command tx timeout [ 705.352490][T14233] team0: Port device team_slave_1 added [ 705.510831][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.530039][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.560582][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.581555][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.588820][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.616652][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.747867][T14233] hsr_slave_0: entered promiscuous mode [ 705.756135][T14233] hsr_slave_1: entered promiscuous mode [ 706.377037][T14358] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 706.502774][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2156'. [ 707.021287][T14359] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 707.031394][ T5995] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 707.037775][T14360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.138504][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 707.154170][ T6122] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 707.253190][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2159'. [ 707.363674][ T5839] Bluetooth: hci2: command tx timeout [ 707.593376][T14381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2162'. [ 707.609491][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 707.636722][T14381] macvlan0: entered allmulticast mode [ 707.642191][T14381] veth1_vlan: entered allmulticast mode [ 707.652637][T14381] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2162'. [ 707.740724][T14384] macvlan1: entered promiscuous mode [ 707.747497][T14384] ipvlan0: entered promiscuous mode [ 707.774696][T14384] ipvlan0: left promiscuous mode [ 707.783448][T14384] macvlan1: left promiscuous mode [ 707.804395][T14382] lo: Caught tx_queue_len zero misconfig [ 707.827725][T14384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.997125][T14233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 708.024378][T14233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.047110][T14233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.064978][T14233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.106103][T14394] syzkaller0: entered promiscuous mode [ 708.111595][T14394] syzkaller0: entered allmulticast mode [ 708.138496][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 708.280073][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.304456][T14404] syz_tun: entered allmulticast mode [ 708.328272][T14403] syz_tun: left allmulticast mode [ 708.357908][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.387453][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.394630][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.423817][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.431042][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.695335][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 708.725737][T14430] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 708.792963][T14430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.850405][T14437] bond2: (slave geneve3): making interface the new active one [ 708.860072][T14437] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 708.872462][ T1309] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 708.919652][ T1309] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 708.930313][ T1309] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 708.961356][ T1309] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 709.105691][T14457] syzkaller0: entered promiscuous mode [ 709.124050][T14457] syzkaller0: entered allmulticast mode [ 709.144674][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.300661][T14474] veth3: entered promiscuous mode [ 709.379485][T14233] veth0_vlan: entered promiscuous mode [ 709.394394][T14233] veth1_vlan: entered promiscuous mode [ 709.455865][T14233] veth0_macvtap: entered promiscuous mode [ 709.468384][T14233] veth1_macvtap: entered promiscuous mode [ 709.502033][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.511351][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 709.528933][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.530343][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 709.554496][ T1309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.588052][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.616453][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.632717][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.756297][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 709.790263][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.805155][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.873894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.882483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.047804][T14510] netlink: 'syz.1.2128': attribute type 2 has an invalid length. [ 711.217990][ T30] audit: type=1804 audit(1766256955.705:8): pid=14562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2205" name="cgroup.controllers" dev="tmpfs" ino=2239 res=1 errno=0 [ 711.243281][ T30] audit: type=1800 audit(1766256955.725:9): pid=14562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="cgroup.controllers" dev="tmpfs" ino=2239 res=0 errno=0 [ 711.267182][T14564] netlink: 'syz.0.2206': attribute type 12 has an invalid length. [ 712.228869][T14586] netlink: 'syz.1.2215': attribute type 2 has an invalid length. [ 712.425175][T14592] tipc: New replicast peer: 255.255.255.255 [ 712.435418][T14592] tipc: Enabled bearer , priority 10 [ 712.452450][T14592] netlink: 'syz.0.2217': attribute type 4 has an invalid length. [ 712.583852][T14596] __nla_validate_parse: 8 callbacks suppressed [ 712.583870][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2220'. [ 712.662717][T14596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'. [ 712.834731][T14609] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 713.313890][T14626] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2226'. [ 713.685647][T14635] netlink: 'syz.3.2229': attribute type 2 has an invalid length. [ 713.710953][T14635] tipc: Enabled bearer , priority 0 [ 713.718597][T14635] syzkaller0: entered promiscuous mode [ 713.732905][T14635] syzkaller0: entered allmulticast mode [ 713.769394][T14633] tipc: Resetting bearer [ 713.809867][T14643] netlink: zone id is out of range [ 713.832738][T14633] tipc: Disabling bearer [ 713.834737][T14643] netlink: zone id is out of range [ 713.873866][T14643] netlink: zone id is out of range [ 713.880218][T14643] netlink: zone id is out of range [ 713.885818][T14643] netlink: zone id is out of range [ 713.901275][T14643] netlink: zone id is out of range [ 713.908248][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'. [ 713.917466][T14643] netlink: zone id is out of range [ 713.924722][T14643] netlink: zone id is out of range [ 713.932361][T14643] netlink: zone id is out of range [ 713.938843][T14643] netlink: zone id is out of range [ 714.108515][T14645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2233'. [ 714.136131][T14658] veth1_to_bond: entered allmulticast mode [ 714.153723][T14658] veth1_to_bond: left allmulticast mode [ 714.168819][T14657] netlink: 'syz.0.2233': attribute type 7 has an invalid length. [ 714.183763][T14658] sctp: [Deprecated]: syz.1.2236 (pid 14658) Use of int in max_burst socket option deprecated. [ 714.183763][T14658] Use struct sctp_assoc_value instead [ 714.209466][T14657] netlink: 'syz.0.2233': attribute type 8 has an invalid length. [ 714.677219][T14687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2242'. [ 714.808673][T14686] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 715.841792][T14720] tipc: Started in network mode [ 715.853360][T14720] tipc: Node identity 8e60d45c4071, cluster identity 4711 [ 715.870894][T14720] tipc: Enabled bearer , priority 0 [ 715.890353][T14720] syzkaller0: entered promiscuous mode [ 715.896322][T14720] syzkaller0: entered allmulticast mode [ 715.962509][T14720] tipc: Resetting bearer [ 716.015815][T14719] tipc: Resetting bearer [ 716.035709][T14719] tipc: Disabling bearer [ 716.864804][T14750] bridge0: entered promiscuous mode [ 716.872863][T14750] bridge0: port 3(macvtap1) entered blocking state [ 716.879723][T14750] bridge0: port 3(macvtap1) entered disabled state [ 716.887316][T14750] macvtap1: entered allmulticast mode [ 716.892702][T14750] bridge0: entered allmulticast mode [ 716.907583][T14750] macvtap1: left allmulticast mode [ 716.913957][T14750] bridge0: left allmulticast mode [ 716.949702][T14750] bridge0: left promiscuous mode [ 717.081733][T14757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2259'. [ 717.239620][T14735] lec:lec_atm_close: lec0: Shut down! [ 717.506611][T14779] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2265'. [ 717.569976][T14781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2266'. [ 717.715329][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 717.878154][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2270'. [ 717.973493][T14791] macvlan4: entered promiscuous mode [ 717.978979][T14791] macvlan4: entered allmulticast mode [ 717.985715][T14791] bond5: (slave macvlan4): Opening slave failed [ 718.224355][T14808] raw_sendmsg: syz.3.2273 forgot to set AF_INET. Fix it! [ 718.394152][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 718.438101][T14811] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2274'. [ 718.452700][T14814] netlink: 'syz.3.2276': attribute type 3 has an invalid length. [ 718.455199][T14811] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 718.516777][T14818] netlink: 416 bytes leftover after parsing attributes in process `syz.1.2277'. [ 718.634089][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2277'. [ 718.821280][T14819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 718.823213][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 718.858413][T14832] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 718.906824][T14832] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2282'. [ 718.914271][T14835] net_ratelimit: 45 callbacks suppressed [ 718.914286][T14835] openvswitch: netlink: IP tunnel dst address not specified [ 719.366842][T14852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2287'. [ 719.620791][T14862] bond0: (slave rose0): Error: Device can not be enslaved while up [ 719.727199][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2291'. [ 719.930459][T14870] veth1_vlan: left allmulticast mode [ 719.985042][T14870] batman_adv: batadv0: Interface deactivated: gretap1 [ 720.007940][T11257] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.023583][T11257] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 41092 - 0 [ 720.057103][T11257] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.082497][T14870] netlink: 'syz.4.2294': attribute type 3 has an invalid length. [ 720.123545][T11257] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.157506][T11257] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 41092 - 0 [ 720.176780][T11257] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.203232][T11257] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.211833][T11257] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 41092 - 0 [ 720.221203][T11257] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 720.247269][T11257] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.255985][T11257] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 41092 - 0 [ 720.266132][T11257] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 721.279877][T14920] openvswitch: netlink: Missing valid actions attribute. [ 721.291696][T14920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.324328][T14923] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 721.426837][T14927] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 721.560770][T14927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.126655][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.155941][T15024] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 792.164540][T15021] netlink: 'syz.2.2327': attribute type 1 has an invalid length. [ 792.209728][T15010] __nla_validate_parse: 6 callbacks suppressed [ 792.209744][T15010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2325'. [ 792.250139][T15021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 792.262880][T15024] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 792.288775][T15035] netlink: 'syz.3.2331': attribute type 2 has an invalid length. [ 792.321145][T15035] netlink: 'syz.3.2331': attribute type 1 has an invalid length. [ 792.908669][T15074] tipc: Enabling of bearer rejected, failed to enable media [ 792.926136][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 792.944461][T15074] caif0: left promiscuous mode [ 792.957456][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 793.001705][T15076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'. [ 793.001715][T15074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.970317][T15120] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2350'. [ 794.318224][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 794.340338][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 794.387922][T15132] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2354'. [ 794.976491][T15135] žÿ: renamed from team_slave_1 [ 795.202418][T15140] tipc: Enabling of bearer rejected, already enabled [ 795.886393][T15155] syzkaller0: entered promiscuous mode [ 795.896786][T15155] syzkaller0: entered allmulticast mode [ 795.923965][T15158] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 796.168328][T15165] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2363'. [ 796.221195][T15166] netlink: 'syz.4.2362': attribute type 13 has an invalid length. [ 797.432845][T15179] ieee802154 phy0 wpan0: encryption failed: -22 [ 797.502761][T15184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2367'. [ 797.836973][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'. [ 797.867218][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'. [ 798.152610][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 798.238684][T15221] bond8: Invalid ad_actor_system MAC address. [ 798.246060][T15221] bond8: option ad_actor_system: invalid value (7) [ 798.259476][T15221] bond8 (unregistering): Released all slaves [ 798.400516][T15229] 0ªX¹¦À: left allmulticast mode [ 798.411990][T15229] vlan0: left promiscuous mode [ 798.417545][T15229] macvlan0: left allmulticast mode [ 798.431161][T15229] bridge5: left allmulticast mode [ 798.516828][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 798.562766][T15229] hsr_slave_0: left promiscuous mode [ 798.581581][T15229] hsr_slave_1: left promiscuous mode [ 798.622050][T15244] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2384'. [ 799.904210][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 800.687544][T15257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 800.724058][T15258] 8021q: adding VLAN 0 to HW filter on device bond8 [ 800.725165][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2389'. [ 800.732170][T15258] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 800.751633][T15258] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 800.782519][T15267] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2387'. [ 800.794202][T15267] netlink: zone id is out of range [ 800.799442][T15267] netlink: zone id is out of range [ 800.799525][T15262] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2387'. [ 800.938025][T15277] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 801.167194][T15293] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 801.184093][T15293] netlink: 'syz.4.2395': attribute type 6 has an invalid length. [ 801.202191][T15293] netlink: 'syz.4.2395': attribute type 3 has an invalid length. [ 801.218591][T15293] netlink: 'syz.4.2395': attribute type 9 has an invalid length. [ 801.230747][T15293] netlink: 'syz.4.2395': attribute type 2 has an invalid length. [ 801.248851][T15293] netlink: 'syz.4.2395': attribute type 3 has an invalid length. [ 801.269092][T15293] netlink: 'syz.4.2395': attribute type 4 has an invalid length. [ 801.284956][T15293] netlink: 'syz.4.2395': attribute type 3 has an invalid length. [ 801.580399][T15312] ip6tnl0: Caught tx_queue_len zero misconfig [ 802.315693][T15332] geneve1: Caught tx_queue_len zero misconfig [ 802.532325][T15341] syzkaller1: entered promiscuous mode [ 802.541932][T15345] __nla_validate_parse: 3 callbacks suppressed [ 802.541946][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2411'. [ 802.558913][T15341] syzkaller1: entered allmulticast mode [ 802.620477][T15351] tipc: Enabling of bearer rejected, failed to enable media [ 802.671547][T15352] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2410'. [ 802.761387][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.793671][T15355] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 802.799342][T15355] pim6reg0: persist disabled [ 802.813865][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2413'. [ 802.838880][T15360] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 803.421752][T15386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 803.426163][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'. [ 803.524754][T15357] tipc: Resetting bearer [ 803.543347][T15357] tipc: Resetting bearer [ 803.549341][T15357] tipc: Resetting bearer [ 803.613915][T11257] bond6: (slave ip6gretap2): link status up again after 0 ms [ 803.632321][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2422'. [ 803.633604][T13087] bond6: (slave ip6gretap2): link status up again after 0 ms [ 803.683655][T13087] bond6: (slave ip6gretap2): link status up again after 0 ms [ 803.713823][ T6122] bond6: (slave ip6gretap2): link status up again after 0 ms [ 803.733922][T13087] bond6: (slave ip6gretap2): link status up again after 0 ms [ 803.741334][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 803.863897][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 804.272740][T15411] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 804.328726][T15411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2428'. [ 805.018244][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 805.244159][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 805.427657][T15431] bond6: entered promiscuous mode [ 805.433501][T15431] bond6: entered allmulticast mode [ 805.440568][T15431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 805.498447][T15429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 805.510167][T15429] bond7: entered promiscuous mode [ 805.518571][T15429] bond7: entered allmulticast mode [ 805.525071][T15429] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 805.824268][ T60] net_ratelimit: 11 callbacks suppressed [ 805.824289][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.023569][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.143619][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.523176][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.648605][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.764222][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 806.873664][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 807.565053][T15455] __nla_validate_parse: 1 callbacks suppressed [ 807.565071][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 807.581181][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 807.583140][T15455] validate_nla: 3 callbacks suppressed [ 807.583152][T15455] netlink: 'syz.0.2440': attribute type 30 has an invalid length. [ 807.709089][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 807.719170][T11257] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.733832][T15455] netlink: 'syz.0.2440': attribute type 30 has an invalid length. [ 807.812810][T11257] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.835317][T11257] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.851741][T11257] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.867157][T15458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2441'. [ 807.905968][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 807.946206][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 807.955871][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 807.984381][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 808.025716][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 808.035201][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 808.567754][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.823298][T15475] xt_hashlimit: size too large, truncated to 1048576 [ 809.006307][T15485] tipc: Enabled bearer , priority 0 [ 809.033904][T15486] syzkaller0: entered promiscuous mode [ 809.049697][T15486] syzkaller0: entered allmulticast mode [ 809.180765][T15482] tipc: Resetting bearer [ 809.327364][T15490] syzkaller0: entered promiscuous mode [ 809.333000][T15490] syzkaller0: entered allmulticast mode [ 809.359044][T15480] tipc: Resetting bearer [ 809.404692][T15480] tipc: Disabling bearer [ 809.637643][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 810.968657][T15510] netlink: 'syz.4.2452': attribute type 12 has an invalid length. [ 810.977345][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 811.015353][T15514] macsec2: entered promiscuous mode [ 811.041190][T15514] team0: entered promiscuous mode [ 811.063973][T15514] macsec2: entered allmulticast mode [ 811.094427][T15514] team0: entered allmulticast mode [ 811.121677][T15514] team0: left allmulticast mode [ 811.130448][T15514] team0: left promiscuous mode [ 811.205120][T15517] veth0: entered promiscuous mode [ 811.219071][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 811.515603][ T12] net_ratelimit: 9 callbacks suppressed [ 811.515621][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 811.636146][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 811.846149][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 811.983928][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 812.002325][T15568] netlink: 'syz.3.2467': attribute type 4 has an invalid length. [ 812.220653][T15576] bond1: entered promiscuous mode [ 812.227427][T15576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.253801][T15583] netlink: 'syz.3.2467': attribute type 4 has an invalid length. [ 812.291944][T15581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.303988][T15581] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 812.316389][T15581] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 812.353408][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 812.517657][T15595] IPv6: sit2: Disabled Multicast RS [ 812.543578][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 813.378602][T15637] __nla_validate_parse: 7 callbacks suppressed [ 813.378619][T15637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 814.184687][T15617] netlink: 'syz.0.2480': attribute type 12 has an invalid length. [ 814.203266][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 814.324272][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 814.404469][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 814.423405][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 814.454444][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 814.557421][T15667] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2493'. [ 814.574349][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 814.646356][T15674] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 814.665679][T15674] mac80211_hwsim hwsim8 wlan0: Caught tx_queue_len zero misconfig [ 814.737520][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 814.771135][T15674] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 815.375668][T15701] netlink: 'syz.3.2500': attribute type 32 has an invalid length. [ 816.544695][ T36] net_ratelimit: 10 callbacks suppressed [ 816.544713][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 816.577214][T15748] netlink: 'syz.3.2514': attribute type 4 has an invalid length. [ 816.680578][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 816.708810][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 816.719296][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 816.744133][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 816.763471][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 816.824072][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2512'. [ 817.093831][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.234372][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.343966][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.397933][T15773] netlink: 'syz.4.2521': attribute type 4 has an invalid length. [ 817.515642][T15775] sctp: [Deprecated]: syz.0.2522 (pid 15775) Use of int in maxseg socket option. [ 817.515642][T15775] Use struct sctp_assoc_value instead [ 817.517429][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.663587][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.727227][T15775] netlink: 'syz.0.2522': attribute type 5 has an invalid length. [ 817.783575][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 817.903068][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 818.013063][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 818.394844][T15790] syzkaller0: entered promiscuous mode [ 818.404838][T15790] syzkaller0: entered allmulticast mode [ 821.613084][T13087] net_ratelimit: 5 callbacks suppressed [ 821.613103][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 821.743269][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 821.853068][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 821.906684][T15804] __nla_validate_parse: 3 callbacks suppressed [ 821.906701][T15804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2529'. [ 821.973085][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 822.093314][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 822.203663][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 822.323611][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 822.823061][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 822.953058][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 823.526702][T15816] netlink: 'syz.4.2533': attribute type 10 has an invalid length. [ 823.576523][T15816] team_slave_0: left promiscuous mode [ 823.608793][T15816] team0: Port device team_slave_0 removed [ 823.641105][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 823.937192][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 824.435157][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 824.682464][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.692869][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.702669][T15847] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.717919][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.727438][T15847] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.753992][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2541'. [ 824.783623][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2541'. [ 825.118508][T15862] bridge_slave_1: left allmulticast mode [ 825.134784][T15862] bridge_slave_1: left promiscuous mode [ 825.151059][T15862] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.359068][T15877] xt_connbytes: Forcing CT accounting to be enabled [ 825.367002][T15879] xt_bpf: check failed: parse error [ 825.381883][T15875] xt_connbytes: Forcing CT accounting to be enabled [ 825.413778][T15877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.416022][T15879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.463869][T15875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.556632][T15879] IPVS: Scheduler module ip_vs_sip not found [ 825.625774][T15887] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 825.645848][T15887] veth1_to_bond: entered allmulticast mode [ 825.709702][T15887] veth1_to_bond (unregistering): left allmulticast mode [ 825.774890][ T1309] nci: nci_rsp_packet: unknown rsp opcode 0x3b [ 825.826047][T15892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.970174][T15904] netlink: 'syz.2.2554': attribute type 13 has an invalid length. [ 825.991141][T15904] netlink: 'syz.2.2554': attribute type 17 has an invalid length. [ 826.026693][T15907] batadv2: entered promiscuous mode [ 826.171553][T15904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.199079][T15904] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.853066][ T12] net_ratelimit: 21 callbacks suppressed [ 826.853085][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.104650][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.215845][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.353847][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.474354][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.593888][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.705145][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 827.807229][T15941] __nla_validate_parse: 4 callbacks suppressed [ 827.807247][T15941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2562'. [ 827.833807][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 828.005813][T15946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2561'. [ 828.603851][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 828.630264][T15962] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 828.711396][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.775334][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 828.784821][T15975] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 828.798724][T15975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2569'. [ 830.208859][T15997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.525453][T16018] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2580'. [ 830.575149][T16019] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 830.685905][T16021] tipc: Enabling of bearer rejected, failed to enable media [ 830.804727][T16025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'. [ 830.968929][ T1309] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 831.055373][T16025] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 831.106143][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2583'. [ 831.135099][T16025] bond3: entered promiscuous mode [ 831.140531][T16025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.586380][T16043] batman_adv: batadv0: Adding interface: ip6gretap1 [ 831.594125][T16043] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.653233][T16043] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 832.043165][ T13] net_ratelimit: 17 callbacks suppressed [ 832.043183][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.255644][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.373211][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.493229][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.612738][T16083] bond2: Unable to set up delay as MII monitoring is disabled [ 832.626348][T16085] netlink: 'syz.3.2592': attribute type 6 has an invalid length. [ 832.655177][T16083] bond2 (unregistering): Released all slaves [ 832.734163][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.838503][T16090] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2600'. [ 832.855492][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 832.863613][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 832.930998][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2602'. [ 832.953174][T16095] IPv6: NLM_F_REPLACE set, but no existing node found! [ 832.983183][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 833.093059][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 833.154265][T16101] nbd: device at index 0 is going down [ 833.203982][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 833.423078][T16103] netlink: 'syz.1.2605': attribute type 31 has an invalid length. [ 833.466774][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 833.836823][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 833.851938][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 833.872694][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 833.906515][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 834.068833][T16119] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2608'. [ 834.475169][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 834.498980][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 834.732830][T16139] x_tables: duplicate underflow at hook 3 [ 834.875672][T16147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 835.140286][T16160] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 835.147652][T16160] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 835.155438][T16160] tipc: Resetting bearer [ 835.162701][T16164] netlink: 'syz.2.2620': attribute type 16 has an invalid length. [ 835.209008][T16164] netlink: 'syz.2.2620': attribute type 17 has an invalid length. [ 835.286259][T16163] IPv6: NLM_F_REPLACE set, but no existing node found! [ 836.355618][T16194] macvtap1: entered promiscuous mode [ 836.361128][T16194] syz_tun: entered promiscuous mode [ 836.367426][T16194] macvtap1: entered allmulticast mode [ 836.372806][T16194] syz_tun: entered allmulticast mode [ 836.387242][T16194] syz_tun: left allmulticast mode [ 836.392363][T16194] syz_tun: left promiscuous mode [ 836.609595][T16202] delete_channel: no stack [ 837.073588][T11257] net_ratelimit: 16 callbacks suppressed [ 837.073606][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.203063][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.313143][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.374127][T16250] delete_channel: no stack [ 837.423297][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.533125][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.718223][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.893809][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 837.992214][T16285] __nla_validate_parse: 7 callbacks suppressed [ 837.992230][T16285] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2654'. [ 838.033912][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 838.115966][ T30] audit: type=1800 audit(1766257082.605:10): pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2653" name="memory.events" dev="tmpfs" ino=2657 res=0 errno=0 [ 838.176739][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 838.364329][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 838.481530][T16309] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2660'. [ 838.710129][T16325] sctp: [Deprecated]: syz.1.2663 (pid 16325) Use of int in maxseg socket option. [ 838.710129][T16325] Use struct sctp_assoc_value instead [ 838.774834][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 838.859428][T16330] netlink: 672 bytes leftover after parsing attributes in process `syz.1.2665'. [ 838.904779][T16333] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2666'. [ 839.030285][T16339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2667'. [ 839.315958][T16351] syzkaller1: entered promiscuous mode [ 839.321859][T16351] syzkaller1: entered allmulticast mode [ 839.331520][T16344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.515762][T16358] netlink: 'syz.0.2674': attribute type 13 has an invalid length. [ 839.525732][T16358] netlink: 'syz.0.2674': attribute type 17 has an invalid length. [ 839.595791][T16358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.607295][T16358] 0ªX¹¦À: left allmulticast mode [ 840.223135][T16391] bond0: option miimon: invalid value (18446744072730617911) [ 840.230921][T16391] bond0: option miimon: allowed values 0 - 2147483647 [ 840.275012][T16391] smc: removing ib device syû [ 840.492922][T16396] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 840.588214][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 840.676501][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 840.758751][T16406] erspan0: entered promiscuous mode [ 840.813696][T16406] macvtap1: entered promiscuous mode [ 840.819185][T16406] macvtap1: entered allmulticast mode [ 840.843412][T16406] erspan0: entered allmulticast mode [ 840.892649][T16406] macvtap1: left promiscuous mode [ 840.923239][T16406] macvtap1: left allmulticast mode [ 840.945513][T16406] erspan0: left allmulticast mode [ 840.978631][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2687'. [ 841.293082][T16426] tipc: Enabled bearer , priority 0 [ 841.310598][T16426] syzkaller0: entered promiscuous mode [ 841.336289][T16426] syzkaller0: entered allmulticast mode [ 841.404172][T16426] tipc: Resetting bearer [ 841.415750][T16425] tipc: Resetting bearer [ 841.465815][T16425] tipc: Disabling bearer [ 842.005609][T16458] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.038752][T16459] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.071624][T16459] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.114832][T16458] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.125673][ T1309] net_ratelimit: 26 callbacks suppressed [ 842.125688][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 842.179289][T16459] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.194517][T16458] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.237642][T16459] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.252037][T16458] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 842.594645][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 842.804143][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.014702][T16471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.034707][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.163310][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.273960][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.378048][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 843.388031][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.574478][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.694933][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.814644][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 843.857739][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 844.523692][T16526] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 844.524153][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 844.524308][T16524] validate_nla: 66 callbacks suppressed [ 844.524321][T16524] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 844.614899][T16533] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 844.634718][T16524] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2715'. [ 844.648662][T16524] unsupported nla_type 58 [ 844.652035][T16535] gretap3: entered allmulticast mode [ 844.719248][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 844.842935][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2724'. [ 846.880306][T16559] syzkaller0: entered promiscuous mode [ 846.899384][T16559] syzkaller0: entered allmulticast mode [ 847.256120][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 847.273562][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 848.573064][ T1309] net_ratelimit: 22 callbacks suppressed [ 848.573082][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 848.673883][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 848.830659][T16602] vlan1: entered promiscuous mode [ 848.839833][T16602] gretap0: entered promiscuous mode [ 848.879951][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.009136][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.054009][T16624] bridge_slave_1: left allmulticast mode [ 849.073783][T16624] bridge_slave_1: left promiscuous mode [ 849.079593][T16624] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.105740][T16625] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 849.143090][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.331593][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 849.366484][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.491542][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.501632][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'. [ 849.511515][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'. [ 849.540606][T16652] netlink: 'syz.0.2751': attribute type 8 has an invalid length. [ 849.584425][T16652] sch_fq: defrate 0 ignored. [ 849.713350][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.823537][ T1309] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 849.948400][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 850.078670][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 850.775106][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 850.797514][T16715] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 851.204888][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2771'. [ 851.731802][T16747] netlink: 'syz.4.2775': attribute type 3 has an invalid length. [ 852.118487][T16756] veth4: entered allmulticast mode [ 852.340423][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 852.799852][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2786'. [ 852.845530][T16790] nbd: must specify an index to disconnect [ 852.854837][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.862800][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.004773][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 853.122191][T16800] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 853.168978][T16800] bond10 (unregistering): Released all slaves [ 853.177014][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 853.276276][T16801] netlink: 'syz.2.2790': attribute type 12 has an invalid length. [ 853.370146][T16807] bond8: invalid ARP target 0.0.0.0 specified for addition [ 853.574738][T16807] bond8: option arp_ip_target: invalid value (0) [ 853.640054][T16807] bond8 (unregistering): Released all slaves [ 853.714104][T11257] net_ratelimit: 17 callbacks suppressed [ 853.714122][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 853.833854][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 853.953715][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.074107][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.122260][T16832] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 854.155135][T16832] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 854.190498][T16832] tipc: Resetting bearer [ 854.233608][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.364125][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.434462][T16849] __nla_validate_parse: 1 callbacks suppressed [ 854.434480][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 854.473584][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.494316][T16851] IPVS: length: 229 != 24 [ 854.575756][T16852] delete_channel: no stack [ 854.583891][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.693319][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.814238][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 854.947960][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 855.161560][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2815'. [ 855.215639][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'. [ 855.266508][T16885] netlink: 'syz.1.2817': attribute type 3 has an invalid length. [ 855.281078][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'. [ 855.398444][T16897] netlink: 'syz.3.2818': attribute type 12 has an invalid length. [ 855.428524][T16897] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 855.432791][T16901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2822'. [ 855.558277][T16908] netlink: 'syz.1.2823': attribute type 3 has an invalid length. [ 855.591686][T16908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2823'. [ 855.716528][T16913] tipc: Enabling of bearer rejected, failed to enable media [ 855.937875][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2830'. [ 856.142578][T16943] netlink: 'syz.1.2833': attribute type 23 has an invalid length. [ 856.265881][T16954] netlink: 'syz.4.2834': attribute type 22 has an invalid length. [ 856.285438][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 856.414324][T16954] netlink: 'syz.4.2834': attribute type 22 has an invalid length. [ 856.422866][T16958] syzkaller0: entered promiscuous mode [ 856.429709][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 856.439495][T16958] syzkaller0: entered allmulticast mode [ 856.449630][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.461267][T16957] netlink: 'syz.1.2837': attribute type 101 has an invalid length. [ 856.469942][T16957] netlink: 'syz.1.2837': attribute type 7 has an invalid length. [ 856.473632][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.537391][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.553521][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.092913][T16997] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 857.245668][T17006] 8021q: VLANs not supported on caif0 [ 857.516343][T17030] netlink: 'syz.1.2857': attribute type 10 has an invalid length. [ 858.773430][ T1004] net_ratelimit: 29 callbacks suppressed [ 858.773448][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 858.864983][T17086] tipc: Enabled bearer , priority 0 [ 858.872332][T17087] tipc: Enabling of bearer rejected, already enabled [ 858.893585][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 859.001098][T11347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 859.024097][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 859.031787][T11347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 859.042416][T11347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 859.062314][T11347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 859.081062][T11347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 859.134267][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 859.264131][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 859.394736][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 859.459320][T17100] __nla_validate_parse: 11 callbacks suppressed [ 859.459336][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2876'. [ 859.624322][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2876'. [ 860.380870][T17117] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 860.540076][T17121] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 861.123712][T11347] Bluetooth: hci5: command tx timeout [ 862.404096][ T5886] tipc: Node number set to 3457274972 [ 862.409790][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 862.811152][T17125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 862.849210][T17135] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2881'. [ 862.919339][T17139] validate_nla: 1 callbacks suppressed [ 862.919356][T17139] netlink: 'syz.1.2882': attribute type 30 has an invalid length. [ 862.947236][T17139] Cannot find set identified by id 3 to match [ 862.976866][T17141] pimreg: entered allmulticast mode [ 862.985602][T17139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2882'. [ 862.995754][T17141] pimreg: left allmulticast mode [ 863.033102][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 863.049758][T17091] chnl_net:caif_netlink_parms(): no params data found [ 863.194903][T17151] netlink: 'syz.1.2886': attribute type 29 has an invalid length. [ 863.205772][T11347] Bluetooth: hci5: command tx timeout [ 863.260891][T17159] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2888'. [ 863.286276][T17156] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2888'. [ 863.324719][T17091] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.331923][T17091] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.344361][T17091] bridge_slave_0: entered allmulticast mode [ 863.352182][T17091] bridge_slave_0: entered promiscuous mode [ 863.364541][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 863.378375][T17091] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.386083][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 863.420119][T17091] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.436701][T17091] bridge_slave_1: entered allmulticast mode [ 863.446805][T17091] bridge_slave_1: entered promiscuous mode [ 863.567437][T17177] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 863.593483][T17091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.650670][T17177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 863.661311][T17091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.691048][T17181] erspan0: entered allmulticast mode [ 863.718516][T17181] bond3: (slave erspan0): making interface the new active one [ 863.745014][T17181] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 863.776286][T17177] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 863.893517][T17091] team0: Port device team_slave_0 added [ 863.922359][T17091] team0: Port device team_slave_1 added [ 864.020403][T17091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.028207][T17091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.058274][T17091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.081337][T17199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2897'. [ 864.091848][T17188] pim6reg1: entered promiscuous mode [ 864.108765][T17188] pim6reg1: entered allmulticast mode [ 864.134105][T17201] x_tables: duplicate underflow at hook 2 [ 864.154018][T17199] sctp: [Deprecated]: syz.3.2897 (pid 17199) Use of int in max_burst socket option. [ 864.154018][T17199] Use struct sctp_assoc_value instead [ 864.215161][T17091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.222187][T17091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.248938][T17091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.322094][T17187] delete_channel: no stack [ 864.338641][T17091] hsr_slave_0: entered promiscuous mode [ 864.351169][T17091] hsr_slave_1: entered promiscuous mode [ 864.357745][T17091] debugfs: 'hsr0' already exists in 'hsr' [ 864.364930][T17091] Cannot create hsr debugfs directory [ 864.511485][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 864.523733][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 864.536963][T17091] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.546952][T17091] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.602189][T17091] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.612530][T17091] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.656073][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 864.668706][T17091] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.679374][T17091] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.746574][T17091] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.757415][T17091] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.793092][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 864.896671][T17220] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 864.980772][T17226] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 865.046288][T17226] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.056883][T17226] bond8: (slave bond9): making interface the new active one [ 865.066223][T17226] bond8: (slave bond9): Enslaving as an active interface with an up link [ 865.148912][ T5959] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 865.176303][T17091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.198023][T17091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.244242][T17091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.273158][T17091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.284361][T11347] Bluetooth: hci5: command tx timeout [ 865.291881][T17242] netlink: 'syz.1.2911': attribute type 1 has an invalid length. [ 865.359772][T17242] bond3: entered promiscuous mode [ 865.365373][T17242] bond3: entered allmulticast mode [ 865.396946][T17248] bond3: (slave ip6gretap1): making interface the new active one [ 865.407135][T17248] ip6gretap1: entered promiscuous mode [ 865.412755][T17248] ip6gretap1: entered allmulticast mode [ 865.419285][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2911'. [ 865.420593][T17248] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 865.443284][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 865.472708][T17242] bond3: left promiscuous mode [ 865.478432][T17242] ip6gretap1: left promiscuous mode [ 865.485894][T17242] bond3: left allmulticast mode [ 865.490762][T17242] ip6gretap1: left allmulticast mode [ 865.499012][T17242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.511504][T17258] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 865.519748][T17258] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2915'. [ 865.563188][ T5995] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 865.798158][T17271] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 865.807182][T17276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2919'. [ 865.817470][T17271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2919'. [ 865.854641][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 865.882426][T17091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.932749][T17286] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 865.949468][T17286] netlink: 'syz.1.2921': attribute type 2 has an invalid length. [ 865.988050][ T5995] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 866.005431][T17091] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.029114][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.036335][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.079174][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.086390][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.123433][T11257] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 866.177423][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 866.180275][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 866.197656][T17300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.223436][T17297] macvtap2: entered promiscuous mode [ 866.229086][T17297] macvtap2: entered allmulticast mode [ 866.234710][T17297] team0: entered allmulticast mode [ 866.244424][T17297] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 866.272571][T17303] team0: left allmulticast mode [ 866.342184][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 866.379796][T17308] macsec2: entered promiscuous mode [ 866.385800][T17308] macsec2: entered allmulticast mode [ 866.425873][T17311] sctp: [Deprecated]: syz.4.2929 (pid 17311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.425873][T17311] Use struct sctp_sack_info instead [ 866.464905][T17312] sctp: [Deprecated]: syz.4.2929 (pid 17312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.464905][T17312] Use struct sctp_sack_info instead [ 866.500120][T17311] syzkaller0: entered promiscuous mode [ 866.509256][T17311] syzkaller0: entered allmulticast mode [ 866.578888][T17091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.654800][T17091] veth0_vlan: entered promiscuous mode [ 866.683909][T17091] veth1_vlan: entered promiscuous mode [ 866.750284][T17091] veth0_macvtap: entered promiscuous mode [ 866.774476][T17091] veth1_macvtap: entered promiscuous mode [ 866.821586][T17091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.859817][T17091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.006399][T17340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2935'. [ 867.061278][T17337] bond4: entered promiscuous mode [ 867.136022][T17337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 867.248963][T17338] bond4: (slave veth11): making interface the new active one [ 867.284753][T17338] veth11: entered promiscuous mode [ 867.290533][T17338] bond4: (slave veth11): Enslaving as an active interface with an up link [ 867.309742][T17347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2936'. [ 867.330452][ T1309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.354653][T17337] tipc: Enabled bearer , priority 0 [ 867.363461][T11347] Bluetooth: hci5: command tx timeout [ 867.392122][ T5995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.433355][T17337] syzkaller0: entered promiscuous mode [ 867.439397][T17337] syzkaller0: entered allmulticast mode [ 867.458572][ T5995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.482821][ T5995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.508789][T17335] tipc: Resetting bearer [ 867.552783][T17335] tipc: Disabling bearer [ 867.825280][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.855908][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.967709][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.011592][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.834989][T17415] validate_nla: 4 callbacks suppressed [ 868.835006][T17415] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 869.533648][T17442] __nla_validate_parse: 6 callbacks suppressed [ 869.533664][T17442] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2960'. [ 869.602718][T17438] bond0: entered promiscuous mode [ 869.617731][T17438] bond_slave_0: entered promiscuous mode [ 869.624968][T17438] bond_slave_1: entered promiscuous mode [ 869.783580][ T36] net_ratelimit: 18 callbacks suppressed [ 869.783599][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.021538][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.133990][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.230237][T17452] tipc: Started in network mode [ 870.236524][T17452] tipc: Node identity 927bfc2873aa, cluster identity 4711 [ 870.254374][T17452] tipc: Enabled bearer , priority 0 [ 870.267701][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.369862][T17451] tipc: Disabling bearer [ 870.459996][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.579608][T17449] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 870.618167][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 870.653312][ T5998] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.712235][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 870.745822][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 870.763589][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 870.940986][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 871.083203][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 871.133350][T17474] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2969'. [ 871.168950][T17474] IPv6: sit4: Disabled Multicast RS [ 871.190900][T17474] sit4: entered allmulticast mode [ 871.233085][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 871.383083][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 871.534815][T17486] syzkaller0: entered promiscuous mode [ 871.540327][T17486] syzkaller0: entered allmulticast mode [ 871.590960][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 871.604635][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 871.612589][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 871.620615][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 871.628323][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.725733][T17496] SET target dimension over the limit! [ 871.826628][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 871.879140][T17504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2974'. [ 871.934884][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2974'. [ 873.454066][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 873.464811][T17502] veth0_macvtap: left promiscuous mode [ 873.683641][ T5839] Bluetooth: hci1: command tx timeout [ 873.726192][T17459] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.890449][T17459] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.989170][T17522] vxcan3: entered allmulticast mode [ 874.047264][T17459] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.212500][T17459] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.881567][T17459] bridge_slave_0: left allmulticast mode [ 874.904501][T17459] bridge_slave_0: left promiscuous mode [ 874.911887][T17459] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.154925][T17459] batman_adv: batadv0: Removing interface: ip6gretap1 [ 875.305017][T17459] bond3 (unregistering): (slave erspan0): Releasing active interface [ 875.350644][T17459] batman_adv: batadv0: Removing interface: gretap1 [ 875.359797][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 875.399114][T17459] dvmrp0 (unregistering): left allmulticast mode [ 875.417206][T17459] bond2 (unregistering): (slave geneve3): Releasing active interface [ 875.734803][T17459] bond0 (unregistering): left promiscuous mode [ 875.740988][T17459] bond_slave_0: left promiscuous mode [ 875.746991][T17459] bond_slave_1: left promiscuous mode [ 875.752550][T17459] team0: left promiscuous mode [ 875.757733][T17459] team_slave_1: left promiscuous mode [ 875.773477][ T5839] Bluetooth: hci1: command tx timeout [ 875.781419][T17459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.791559][T17459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.801644][T17459] bond0 (unregistering): (slave team0): Releasing backup interface [ 875.811743][T17459] bond0 (unregistering): Released all slaves [ 875.900279][T17459] bond1 (unregistering): Released all slaves [ 875.988454][T17459] bond2 (unregistering): Released all slaves [ 876.078899][T17459] bond3 (unregistering): Released all slaves [ 876.165880][T17459] bond4 (unregistering): (slave veth11): Releasing backup interface [ 876.174689][T17459] veth11: left promiscuous mode [ 876.181053][T17459] bond4 (unregistering): Released all slaves [ 876.362734][T17459] tipc: Left network mode [ 876.392875][T17546] net_ratelimit: 4 callbacks suppressed [ 876.392894][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 876.500423][T17577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2989'. [ 876.509684][T17577] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2989'. [ 876.514791][T17493] chnl_net:caif_netlink_parms(): no params data found [ 876.527511][T17577] netlink: 'syz.1.2989': attribute type 6 has an invalid length. [ 876.535858][T17577] netlink: 'syz.1.2989': attribute type 5 has an invalid length. [ 876.544779][T17577] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2989'. [ 876.656683][T17572] team_slave_0: entered promiscuous mode [ 876.662409][T17572] team_slave_1: entered promiscuous mode [ 876.691718][T17572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 876.743951][T17572] netlink: 'syz.1.2989': attribute type 4 has an invalid length. [ 876.814754][T17572] netlink: 'syz.1.2989': attribute type 4 has an invalid length. [ 876.962763][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.974991][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.982190][T17493] bridge_slave_0: entered allmulticast mode [ 876.997793][T17493] bridge_slave_0: entered promiscuous mode [ 877.012255][T17588] tipc: Enabled bearer , priority 0 [ 877.051346][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.063865][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.105998][T17493] bridge_slave_1: entered allmulticast mode [ 877.116114][T17493] bridge_slave_1: entered promiscuous mode [ 877.161728][T17588] syzkaller0: entered promiscuous mode [ 877.185174][T17588] syzkaller0: entered allmulticast mode [ 877.197588][T17593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2994'. [ 877.256212][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 877.312637][T17588] tipc: Resetting bearer [ 877.395069][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.431893][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.533767][T17609] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2999'. [ 877.545409][T17610] netlink: 'syz.3.3000': attribute type 8 has an invalid length. [ 877.553602][T17608] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2999'. [ 877.626465][T17617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3002'. [ 877.708816][T17582] tipc: Resetting bearer [ 877.843350][ T5839] Bluetooth: hci1: command tx timeout [ 878.016976][T17582] tipc: Disabling bearer [ 879.760987][T17493] team0: Port device team_slave_0 added [ 879.788783][T17623] pimreg3: entered allmulticast mode [ 879.850979][ T5886] tipc: Node number set to 3788635176 [ 879.869924][T17493] team0: Port device team_slave_1 added [ 879.901871][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 879.923346][ T5839] Bluetooth: hci1: command tx timeout [ 880.033687][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 880.052946][T17633] netlink: 'syz.1.3005': attribute type 13 has an invalid length. [ 880.054191][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.110180][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.164095][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.194323][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.207148][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.294047][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.329986][T17459] hsr_slave_0: left promiscuous mode [ 880.364031][T17459] hsr_slave_1: left promiscuous mode [ 880.375387][T17459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.396051][T17459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.583629][T17459] team0 (unregistering): Port device team_slave_1 removed [ 881.644982][ T12] smc: removing ib device !yz! [ 882.100447][T17669] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3010'. [ 882.156731][T17689] vlan2: entered promiscuous mode [ 882.161795][T17689] dummy0: entered promiscuous mode [ 882.853055][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 882.922838][T17724] sctp: [Deprecated]: syz.2.3021 (pid 17724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.922838][T17724] Use struct sctp_sack_info instead [ 882.945836][T17728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3023'. [ 883.058785][T17493] hsr_slave_0: entered promiscuous mode [ 883.078600][T17493] hsr_slave_1: entered promiscuous mode [ 883.114880][T17493] debugfs: 'hsr0' already exists in 'hsr' [ 883.130855][T17493] Cannot create hsr debugfs directory [ 883.161392][T17731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3024'. [ 883.836889][T17753] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 883.974152][T17758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3030'. [ 884.157003][T17764] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 884.211825][T17765] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 884.230500][T17765] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 884.378069][T17755] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 884.391554][T17755] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 884.415212][T17758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 884.449770][T17760] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 884.536897][T17764] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 884.574834][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 884.624613][T17459] IPVS: stop unused estimator thread 0... [ 884.690735][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'. [ 884.713578][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 884.945271][T17786] syzkaller0: entered promiscuous mode [ 884.950759][T17786] syzkaller0: entered allmulticast mode [ 884.964378][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 885.232749][T17807] netlink: 4608 bytes leftover after parsing attributes in process `syz.3.3042'. [ 885.579826][T17811] netlink: 'syz.2.3044': attribute type 13 has an invalid length. [ 885.594760][T17811] netlink: 'syz.2.3044': attribute type 17 has an invalid length. [ 886.383805][ T148] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 886.460108][T17814] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3045'. [ 886.477074][T17811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.486066][T17811] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.506692][T17811] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 886.669765][T17493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.702474][T17493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.730595][T17493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.778363][T17493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.884481][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 887.025650][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.064054][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 887.089161][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.104204][T17849] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3053'. [ 887.117299][T17851] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3053'. [ 887.175956][T17850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.248881][T17459] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.256062][T17459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.301571][T17459] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.308781][T17459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.351964][T17850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.480955][T17850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.513358][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 887.526071][T17867] ip6tnl1: entered promiscuous mode [ 887.531284][T17867] ip6tnl1: entered allmulticast mode [ 887.580508][T17850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.835147][T17877] x_tables: duplicate underflow at hook 4 [ 887.911920][ T1004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.965932][ T148] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.020147][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.079140][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.131011][ T1004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.173556][ T148] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.189429][T17885] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 888.290348][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.313513][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.433128][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.535112][T17905] xt_TCPMSS: Only works on TCP SYN packets [ 888.557044][T17904] xt_TCPMSS: Only works on TCP SYN packets [ 888.605567][T17670] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.723700][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 888.866019][T17493] veth0_vlan: entered promiscuous mode [ 888.882365][T17493] veth1_vlan: entered promiscuous mode [ 888.904140][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 888.935485][T17493] veth0_macvtap: entered promiscuous mode [ 888.946194][T17493] veth1_macvtap: entered promiscuous mode [ 888.982902][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.001862][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.019465][ T1129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.037417][ T1129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.057089][ T1129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.078261][ T1129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.103775][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 889.148269][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.163560][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.339501][T17925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3073'. [ 889.358958][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.374725][ T1004] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 889.413594][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.534558][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 889.548200][T17933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3074'. [ 889.576837][T17936] netlink: 'syz.1.3074': attribute type 1 has an invalid length. [ 889.616370][T17936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3074'. [ 889.634609][T17937] netlink: 'syz.4.2973': attribute type 1 has an invalid length. [ 889.666143][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 889.686463][T17937] netlink: 'syz.4.2973': attribute type 2 has an invalid length. [ 889.755037][T17937] netlink: 'syz.4.2973': attribute type 1 has an invalid length. [ 889.809958][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2973'. [ 889.810306][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2973'. [ 890.129995][T11347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.150726][T11347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.162213][T11347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.171978][T11347] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.179886][T11347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.667581][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3081'. [ 890.709624][T17977] netlink: 'syz.0.3082': attribute type 10 has an invalid length. [ 890.773862][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.781653][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.817018][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.824219][T17977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.831733][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.838919][T17977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.866550][T17977] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 890.890690][T17950] chnl_net:caif_netlink_parms(): no params data found [ 890.956840][T17985] netlink: 'syz.1.3084': attribute type 12 has an invalid length. [ 890.969704][T17982] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3083'. [ 890.990107][T17985] netlink: 'syz.1.3084': attribute type 29 has an invalid length. [ 891.010355][T17985] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3084'. [ 891.035920][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.047937][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42306 - 0 [ 891.059046][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 891.156633][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.166865][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42306 - 0 [ 891.177317][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 891.242765][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.252782][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42306 - 0 [ 891.262824][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 891.281005][T17950] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.288670][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.296073][T17950] bridge_slave_0: entered allmulticast mode [ 891.304426][T17950] bridge_slave_0: entered promiscuous mode [ 891.318446][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.329151][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42306 - 0 [ 891.339792][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 891.355297][T17950] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.362447][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.370669][T17950] bridge_slave_1: entered allmulticast mode [ 891.378151][T17950] bridge_slave_1: entered promiscuous mode [ 891.429540][T17950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.470439][T17950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.510948][T17950] team0: Port device team_slave_0 added [ 891.526875][T17950] team0: Port device team_slave_1 added [ 891.563983][T17950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.570925][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.597467][T17950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.609502][ T36] vlan2: left promiscuous mode [ 891.617846][ T36] bridge_slave_0: left promiscuous mode [ 891.623805][ T36] bridge0: port 1(vlan2) entered disabled state [ 891.929065][ T36] bond2 (unregistering): (slave geneve5): Releasing active interface [ 892.072072][ T36] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 892.243425][ T5839] Bluetooth: hci3: command tx timeout [ 892.532315][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 892.540931][ T36] bond0 (unregistering): Released all slaves [ 892.552851][ T36] bond1 (unregistering): Released all slaves [ 892.567883][ T36] bond2 (unregistering): Released all slaves [ 892.584520][ T36] bond3 (unregistering): Released all slaves [ 892.596807][ T36] bond4 (unregistering): Released all slaves [ 892.609091][ T36] bond5 (unregistering): Released all slaves [ 892.701666][ T36] bond6 (unregistering): (slave bond7): Releasing backup interface [ 892.710475][ T36] bond7 (unregistering): left promiscuous mode [ 892.716734][ T36] bond7 (unregistering): left allmulticast mode [ 892.723620][ T36] bond6 (unregistering): Released all slaves [ 892.808119][ T36] bond7 (unregistering): Released all slaves [ 892.821410][ T36] bond8 (unregistering): (slave bond9): Releasing backup interface [ 892.830032][ T36] bond8 (unregistering): Released all slaves [ 892.918283][ T36] bond9 (unregistering): Released all slaves [ 892.930099][T17950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.937331][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.966638][T17950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.017864][T17950] hsr_slave_0: entered promiscuous mode [ 893.031546][T17950] hsr_slave_1: entered promiscuous mode [ 893.043808][T17950] debugfs: 'hsr0' already exists in 'hsr' [ 893.049801][T17950] Cannot create hsr debugfs directory [ 893.081751][ T36] : left promiscuous mode [ 893.159187][ T36] : left promiscuous mode [ 893.203620][T13087] net_ratelimit: 6 callbacks suppressed [ 893.203636][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 893.225183][ T36] : left promiscuous mode [ 893.266732][ T36] tipc: Disabling bearer [ 893.272080][ T36] tipc: Left network mode [ 893.289685][ T36] IPVS: stopping backup sync thread 8581 ... [ 893.323196][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 893.433100][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 893.511979][T17950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 893.522295][T17950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 893.535028][T17950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 893.551369][T17950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 893.591445][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 893.647158][T17950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.677016][T17950] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.715397][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.722474][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.733501][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 893.744762][T17546] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.751828][T17546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.785485][ T36] hsr_slave_0: left promiscuous mode [ 893.791683][ T36] batman_adv: batadv0: Removing interface: macvtap0 [ 894.315875][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 894.323776][ T5839] Bluetooth: hci3: command tx timeout [ 894.463767][T17950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.498578][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 894.516882][T17950] veth0_vlan: entered promiscuous mode [ 894.529996][T17950] veth1_vlan: entered promiscuous mode [ 894.551792][ T36] IPVS: stop unused estimator thread 0... [ 894.557430][T17950] veth0_macvtap: entered promiscuous mode [ 894.567641][T17950] veth1_macvtap: entered promiscuous mode [ 894.592463][T17950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.607084][T17950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.651768][ T6122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.661101][ T6122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.672192][ T6122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.712716][ T6122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.777399][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.785855][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.806325][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.806765][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 894.816692][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.933336][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 895.044023][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 896.404234][ T5839] Bluetooth: hci3: command tx timeout [ 898.293480][ T36] net_ratelimit: 28 callbacks suppressed [ 898.293502][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.413102][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.483441][ T5839] Bluetooth: hci3: command tx timeout [ 898.523113][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.633239][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.743069][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.853208][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 898.963555][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 899.073337][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 899.183091][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 899.293100][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.383123][ T6122] net_ratelimit: 36 callbacks suppressed [ 903.383139][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.513908][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.623155][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.733106][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.853397][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 903.963370][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 904.073055][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 904.183106][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 904.293187][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 904.403172][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 908.483201][ T6122] net_ratelimit: 36 callbacks suppressed [ 908.483220][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 908.603097][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 908.713125][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 908.823075][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 908.933122][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 909.044118][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 909.153208][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 909.263220][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 909.373114][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 909.483265][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 913.573094][T17459] net_ratelimit: 36 callbacks suppressed [ 913.573110][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 913.693778][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 913.804004][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 913.913175][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.023171][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.133784][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.243223][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.353204][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.463131][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 914.573185][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 918.673069][ T60] net_ratelimit: 36 callbacks suppressed [ 918.673084][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 918.793156][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 918.903307][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.013110][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.123216][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.233916][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.343217][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.453589][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.573127][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 919.683600][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 923.783109][T17459] net_ratelimit: 36 callbacks suppressed [ 923.783130][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 923.903064][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.013067][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.123236][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.233064][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.343084][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.453207][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.563151][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.673101][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 924.783266][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 928.853070][T17459] net_ratelimit: 36 callbacks suppressed [ 928.853087][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 928.973101][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.083222][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.193136][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.303083][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.413101][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.533790][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.643673][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.753119][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 929.863169][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 931.447295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.943202][ T6122] net_ratelimit: 36 callbacks suppressed [ 933.943225][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.063126][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.183644][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.303129][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.413092][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.523202][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.633575][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.743182][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.853100][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 934.973123][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 938.963116][ T13] net_ratelimit: 35 callbacks suppressed [ 938.963137][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.084010][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.194224][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.303133][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.423621][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.533112][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.643417][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.754190][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.863947][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 939.983101][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.054017][ T12] net_ratelimit: 36 callbacks suppressed [ 944.054037][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.173590][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.283371][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.393116][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.503201][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.613427][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.723707][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.833895][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 944.943354][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 945.053139][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.163146][ T36] net_ratelimit: 36 callbacks suppressed [ 949.163167][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.283162][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.393295][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.503138][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.613105][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.723296][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.833196][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 949.943145][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 950.054248][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 950.163373][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.243375][ T36] net_ratelimit: 36 callbacks suppressed [ 954.243397][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.363363][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.473116][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.583088][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.693130][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.803670][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 954.913159][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 955.033092][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 955.143091][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 955.253245][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.333303][T17546] net_ratelimit: 36 callbacks suppressed [ 959.333325][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.453216][T17670] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.563130][T17670] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.673093][T17670] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.783083][T17670] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 959.893103][T17459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 960.003378][ T6122] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 960.113240][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 960.223094][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 960.333085][T17546] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 963.807115][T18011] __nla_validate_parse: 1 callbacks suppressed [ 963.807170][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 963.888804][T18018] netlink: 'syz.4.3090': attribute type 9 has an invalid length. [ 963.929809][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 963.956471][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3087'. [ 963.997898][T11347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 964.009325][T11347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 964.018614][T11347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 964.026550][T11347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 964.032799][T18011] bridge_slave_1: left allmulticast mode [ 964.035871][T11347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 964.065934][T18011] bridge_slave_1: left promiscuous mode [ 964.071808][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.090917][T18011] bridge_slave_0: left allmulticast mode [ 964.098344][T18011] bridge_slave_0: left promiscuous mode [ 964.108934][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.161000][T18011] bond0: (slave bridge0): Releasing backup interface [ 964.523978][ T36] net_ratelimit: 32 callbacks suppressed [ 964.523996][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.723946][ T1129] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.784614][T18025] chnl_net:caif_netlink_parms(): no params data found [ 964.886518][ T36] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 964.925742][T18062] C: renamed from team_slave_0 (while UP) [ 964.935744][T18062] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3098'. [ 965.011932][T18068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3099'. [ 965.062358][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.092646][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.100030][T18025] bridge_slave_0: entered allmulticast mode [ 965.115695][T18025] bridge_slave_0: entered promiscuous mode [ 965.128786][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.137232][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.144490][T18025] bridge_slave_1: entered allmulticast mode [ 965.152198][T18025] bridge_slave_1: entered promiscuous mode [ 965.365145][ T60] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 965.473096][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 965.583370][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 965.693111][ T13] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 965.804280][T13087] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 965.884601][T17091] ------------[ cut here ]------------ [ 965.890288][T17091] refcount_t: underflow; use-after-free. [ 965.895977][T17091] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz-executor/17091 [ 965.906298][T17091] Modules linked in: [ 965.910424][T17091] CPU: 0 UID: 0 PID: 17091 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 965.920417][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.930578][T17091] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 965.936713][T17091] Code: 94 68 fd 0a 67 48 0f b9 3a eb 4a e8 68 a0 32 fd 48 8d 3d 91 68 fd 0a 67 48 0f b9 3a eb 37 e8 55 a0 32 fd 48 8d 3d 8e 68 fd 0a <67> 48 0f b9 3a eb 24 e8 42 a0 32 fd 48 8d 3d 8b 68 fd 0a 67 48 0f [ 965.956752][T17091] RSP: 0018:ffffc9000c3c7578 EFLAGS: 00010293 [ 965.962832][T17091] RAX: ffffffff848f11fb RBX: 0000000000000003 RCX: ffff88804eeb5b80 [ 965.970992][T17091] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c7a90 [ 965.979277][T17091] RBP: 0000000000000000 R08: ffff88804eeb5b80 R09: 0000000000000005 [ 965.988058][T17091] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888058e41800 [ 965.996090][T17091] R13: ffff888031fca860 R14: ffff888031fca878 R15: dffffc0000000000 [ 966.004153][T17091] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 966.013362][T17091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.019961][T17091] CR2: 0000562e03e69000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 966.027945][T17091] Call Trace: [ 966.031311][T17091] [ 966.034280][T17091] klist_dec_and_del+0x3c7/0x3d0 [ 966.039218][T17091] klist_remove+0x1bd/0x340 [ 966.043868][T17091] ? __pfx_klist_children_put+0x10/0x10 [ 966.049404][T17091] ? __pfx_klist_remove+0x10/0x10 [ 966.054444][T17091] ? kobject_move+0x5a6/0x6e0 [ 966.059111][T17091] ? __pfx_kobject_move+0x10/0x10 [ 966.064143][T17091] ? do_raw_spin_unlock+0x122/0x240 [ 966.069335][T17091] ? get_device_parent+0x366/0x3a0 [ 966.074590][T17091] device_move+0x193/0x730 [ 966.079266][T17091] hci_conn_del_sysfs+0xb8/0x1a0 [ 966.084487][T17091] hci_conn_del+0xc36/0x1240 [ 966.089105][T17091] hci_conn_hash_flush+0x191/0x260 [ 966.093428][T11347] Bluetooth: hci4: command tx timeout [ 966.094272][T17091] hci_dev_close_sync+0x821/0x1100 [ 966.105236][T17091] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 966.110791][T17091] ? up_write+0x1ac/0x410 [ 966.115159][T17091] ? rcu_is_watching+0x15/0xb0 [ 966.119945][T17091] hci_unregister_dev+0x21a/0x5b0 [ 966.125004][T17091] vhci_release+0x152/0x1a0 [ 966.129494][T17091] ? __pfx_vhci_release+0x10/0x10 [ 966.134666][T17091] __fput+0x44c/0xa70 [ 966.138658][T17091] task_work_run+0x1d4/0x260 [ 966.143307][T17091] ? __pfx_task_work_run+0x10/0x10 [ 966.148429][T17091] ? kmem_cache_free+0x197/0x620 [ 966.153426][T17091] ? do_exit+0x6c0/0x2310 [ 966.157769][T17091] do_exit+0x6c5/0x2310 [ 966.161920][T17091] ? do_raw_spin_lock+0x121/0x290 [ 966.167140][T17091] ? __pfx_do_exit+0x10/0x10 [ 966.171713][T17091] ? __free_object+0x4e3/0x6d0 [ 966.176525][T17091] do_group_exit+0x21c/0x2d0 [ 966.181376][T17091] ? lockdep_hardirqs_on+0x98/0x140 [ 966.186735][T17091] get_signal+0x1285/0x1340 [ 966.191285][T17091] arch_do_signal_or_restart+0x9a/0x7a0 [ 966.196983][T17091] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 966.202172][T17091] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 966.208361][T17091] ? exit_to_user_mode_loop+0x55/0x4f0 [ 966.213852][T17091] exit_to_user_mode_loop+0x87/0x4f0 [ 966.219122][T17091] ? rcu_is_watching+0x15/0xb0 [ 966.224131][T17091] do_syscall_64+0x2d0/0xf80 [ 966.228713][T17091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.234833][T17091] ? clear_bhb_loop+0x60/0xb0 [ 966.239520][T17091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.245669][T17091] RIP: 0033:0x7f51205c2005 [ 966.250095][T17091] Code: Unable to access opcode bytes at 0x7f51205c1fdb. [ 966.257253][T17091] RSP: 002b:00007ffef003da70 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 966.265686][T17091] RAX: 0000000000000000 RBX: 0000000000000090 RCX: 00007f51205c2005 [ 966.273688][T17091] RDX: 00007ffef003dab0 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.281664][T17091] RBP: 00007ffef003db1c R08: 0000000000000000 R09: 0000000000000000 [ 966.289931][T17091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 966.298075][T17091] R13: 00000000000927c0 R14: 00000000000eb74f R15: 00007ffef003db70 [ 966.306119][T17091] [ 966.309124][T17091] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 966.316383][T17091] CPU: 0 UID: 0 PID: 17091 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 966.325902][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 966.335943][T17091] Call Trace: [ 966.339205][T17091] [ 966.342117][T17091] dump_stack_lvl+0x99/0x250 [ 966.346690][T17091] ? __asan_memcpy+0x40/0x70 [ 966.351259][T17091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.356434][T17091] ? __pfx__printk+0x10/0x10 [ 966.361017][T17091] vpanic+0x237/0x6d0 [ 966.364987][T17091] ? __pfx_vpanic+0x10/0x10 [ 966.369483][T17091] ? is_bpf_text_address+0x292/0x2b0 [ 966.374762][T17091] ? is_bpf_text_address+0x26/0x2b0 [ 966.379958][T17091] panic+0xb9/0xc0 [ 966.383666][T17091] ? __pfx_panic+0x10/0x10 [ 966.388085][T17091] __warn+0x317/0x4b0 [ 966.392055][T17091] ? refcount_warn_saturate+0xb2/0x110 [ 966.397508][T17091] ? refcount_warn_saturate+0xb2/0x110 [ 966.402960][T17091] __report_bug+0x288/0x500 [ 966.407456][T17091] ? __pfx_stack_trace_save+0x10/0x10 [ 966.412821][T17091] ? refcount_warn_saturate+0xb2/0x110 [ 966.418270][T17091] ? __pfx___report_bug+0x10/0x10 [ 966.423288][T17091] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 966.429513][T17091] ? __lock_acquire+0x146f/0x2cf0 [ 966.434533][T17091] report_bug_entry+0x19a/0x290 [ 966.439377][T17091] ? refcount_warn_saturate+0xb2/0x110 [ 966.444821][T17091] ? refcount_warn_saturate+0xb7/0x110 [ 966.450265][T17091] handle_bug+0xca/0x200 [ 966.454494][T17091] exc_invalid_op+0x1a/0x50 [ 966.458987][T17091] asm_exc_invalid_op+0x1a/0x20 [ 966.463820][T17091] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 966.469878][T17091] Code: 94 68 fd 0a 67 48 0f b9 3a eb 4a e8 68 a0 32 fd 48 8d 3d 91 68 fd 0a 67 48 0f b9 3a eb 37 e8 55 a0 32 fd 48 8d 3d 8e 68 fd 0a <67> 48 0f b9 3a eb 24 e8 42 a0 32 fd 48 8d 3d 8b 68 fd 0a 67 48 0f [ 966.489473][T17091] RSP: 0018:ffffc9000c3c7578 EFLAGS: 00010293 [ 966.495534][T17091] RAX: ffffffff848f11fb RBX: 0000000000000003 RCX: ffff88804eeb5b80 [ 966.503492][T17091] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c7a90 [ 966.511451][T17091] RBP: 0000000000000000 R08: ffff88804eeb5b80 R09: 0000000000000005 [ 966.519404][T17091] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888058e41800 [ 966.527359][T17091] R13: ffff888031fca860 R14: ffff888031fca878 R15: dffffc0000000000 [ 966.535322][T17091] ? refcount_warn_saturate+0xab/0x110 [ 966.540776][T17091] ? refcount_warn_saturate+0xab/0x110 [ 966.546220][T17091] klist_dec_and_del+0x3c7/0x3d0 [ 966.551148][T17091] klist_remove+0x1bd/0x340 [ 966.555634][T17091] ? __pfx_klist_children_put+0x10/0x10 [ 966.561169][T17091] ? __pfx_klist_remove+0x10/0x10 [ 966.566176][T17091] ? kobject_move+0x5a6/0x6e0 [ 966.570843][T17091] ? __pfx_kobject_move+0x10/0x10 [ 966.575850][T17091] ? do_raw_spin_unlock+0x122/0x240 [ 966.581039][T17091] ? get_device_parent+0x366/0x3a0 [ 966.586140][T17091] device_move+0x193/0x730 [ 966.590550][T17091] hci_conn_del_sysfs+0xb8/0x1a0 [ 966.595479][T17091] hci_conn_del+0xc36/0x1240 [ 966.600066][T17091] hci_conn_hash_flush+0x191/0x260 [ 966.605173][T17091] hci_dev_close_sync+0x821/0x1100 [ 966.610279][T17091] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 966.615809][T17091] ? up_write+0x1ac/0x410 [ 966.620128][T17091] ? rcu_is_watching+0x15/0xb0 [ 966.624888][T17091] hci_unregister_dev+0x21a/0x5b0 [ 966.629908][T17091] vhci_release+0x152/0x1a0 [ 966.634403][T17091] ? __pfx_vhci_release+0x10/0x10 [ 966.639416][T17091] __fput+0x44c/0xa70 [ 966.643405][T17091] task_work_run+0x1d4/0x260 [ 966.647986][T17091] ? __pfx_task_work_run+0x10/0x10 [ 966.653085][T17091] ? kmem_cache_free+0x197/0x620 [ 966.658006][T17091] ? do_exit+0x6c0/0x2310 [ 966.662338][T17091] do_exit+0x6c5/0x2310 [ 966.666487][T17091] ? do_raw_spin_lock+0x121/0x290 [ 966.671501][T17091] ? __pfx_do_exit+0x10/0x10 [ 966.676075][T17091] ? __free_object+0x4e3/0x6d0 [ 966.680846][T17091] do_group_exit+0x21c/0x2d0 [ 966.685423][T17091] ? lockdep_hardirqs_on+0x98/0x140 [ 966.690609][T17091] get_signal+0x1285/0x1340 [ 966.695117][T17091] arch_do_signal_or_restart+0x9a/0x7a0 [ 966.700654][T17091] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 966.705842][T17091] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 966.712001][T17091] ? exit_to_user_mode_loop+0x55/0x4f0 [ 966.717449][T17091] exit_to_user_mode_loop+0x87/0x4f0 [ 966.722718][T17091] ? rcu_is_watching+0x15/0xb0 [ 966.727485][T17091] do_syscall_64+0x2d0/0xf80 [ 966.732073][T17091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.738129][T17091] ? clear_bhb_loop+0x60/0xb0 [ 966.742800][T17091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.748680][T17091] RIP: 0033:0x7f51205c2005 [ 966.753082][T17091] Code: Unable to access opcode bytes at 0x7f51205c1fdb. [ 966.760082][T17091] RSP: 002b:00007ffef003da70 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 966.768486][T17091] RAX: 0000000000000000 RBX: 0000000000000090 RCX: 00007f51205c2005 [ 966.776443][T17091] RDX: 00007ffef003dab0 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.784401][T17091] RBP: 00007ffef003db1c R08: 0000000000000000 R09: 0000000000000000 [ 966.792360][T17091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 966.800321][T17091] R13: 00000000000927c0 R14: 00000000000eb74f R15: 00007ffef003db70 [ 966.808305][T17091] [ 966.811657][T17091] Kernel Offset: disabled [ 966.815971][T17091] Rebooting in 86400 seconds..