last executing test programs: 20.904690941s ago: executing program 3 (id=6618): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x2, &(0x7f00000003c0)=[{@fixed}, {@none}]}) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000), 0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000001000000000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) unshare(0x8000400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 20.655769285s ago: executing program 3 (id=6620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)={0x67}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) r5 = accept4(r0, &(0x7f0000000180), &(0x7f0000000200)=0x80, 0x800) bind$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) ioctl$IMSETDEVNAME(r3, 0x80184947, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 20.596332653s ago: executing program 1 (id=6621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000640)={0x3b, "f9ee6ec55608636ee236d467eee436d2955f75950d57f0ba3ff807245430791c2ae753505313c943126bfeb0770c22fc95b8e2ee5ffe8816cd6fa8490f3415d831ded809c81ed6fadaf823ec2d62b13c37b3a93288e4b16c522e1f8bc54d60a9c27d2357220b1c5a0f71ccd54b57fcb908082f8eb1705d3ebacd0900aba8989a"}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000f8b55f23f9c2910e000003000000e0000002000000000000000000000000e780000000000000000000aa0000000006000000d7bcaf99c69297d0a00ab2e7194b9b6f4c91006dd8f0340b57806d93698471", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x110, 0x7, 0x3, 0x201, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@generic="3b59ee71e961f6ac3e37882cb1e66f15de4aa9e6565c0a1c8ee0c9499b35d7439c32cf160bbc291b7f1c2c6255b5277f4520bb97b9b862d02de2786fe64377241b7912b9ff1dc5bbe1b6f02b4674682202a70a9dc275a6addce5c8ee3bb87245ca7843b87e9fc0b8d7e5fb1f05147178944c7b7b59d83e53342fece60f7f7232e8e19614a7271a6af7614718f337e592a969426246dcd9edc4294cd1b5766e942ff39fd8f54c9157276abf9586f8c5c4b19899fd42c878632a038df28eb85654c6d332fd039569b4c662d7343b754be50d5a4c894ad27048519e29ca97d2d0f0d61d830a87638b79deac3583e8b44001d7e11f218b27c596f5e9"]}, 0x110}}, 0x840) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00), 0x0, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf0, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 20.128324927s ago: executing program 2 (id=6624): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r6, @ANYBLOB="0c005a8004f0e2162c000280"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xd6bfcabe3b05b20f) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44) 19.968092112s ago: executing program 2 (id=6625): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x50, r2, 0x73d20908dc91a4b0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080000}, 0x8000) (async) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x50, r2, 0x73d20908dc91a4b0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040027bd7000fcdbdf2509000000188dfe921100018014000200626f6e645f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x40094}, 0x80c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000b000000080004fa070000000400018004000680"], 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000b000000080004fa070000000400018004000680"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010080000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100200008000b40000000006c000480340001800b000100657874686472000024000280080001400000000f080003400000000108000440000000220500020083000000340001800b000100657874686472000024000280c70001400000000a0800064000000002080003400000009b08000340000000e20900010073797a30"], 0x108}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) 19.691666449s ago: executing program 1 (id=6628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x8040000, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x401, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 19.612245858s ago: executing program 3 (id=6629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 19.559605641s ago: executing program 0 (id=6630): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008104e00f80ecdb4cb9f207c804a01000000088080efb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 19.550077123s ago: executing program 1 (id=6631): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x400, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003", 0x2d) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x2, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@var={0x9, 0x0, 0x0, 0xe, 0x5}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x2e, 0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f00000003c0)=""/251, 0x3f, 0xfb, 0x1, 0xffff}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x3}, 0x8) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 19.472767851s ago: executing program 3 (id=6632): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 19.470280386s ago: executing program 0 (id=6633): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, r2, 0x1, 0x78bd26, 0x4, {0x5}}, 0x14}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r5, 0x111, 0x8, 0x0, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd00000000000000090004009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x3, 0x87) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd120000e90000140000006000000003088700f9f4a43de1a400000000000000007d01ff020000000000000000000000000001ff831b97"], 0xfdef) close(r8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000340)) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @rand_addr=0x64010100, 0x0, "9a06f4babaa21b0512cd4b680f9ba19a33a1d7e4946398babb90e863be6c9bc5", 0x64, 0x8000, 0x2, 0x7fff}, 0x3c) 19.433404854s ago: executing program 2 (id=6634): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="04", &(0x7f0000000040)=@tcp6=r0, 0x2}, 0x20) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0)="84eb6688455bd5faf3c5f83e34c0297c12d8fcbb36f5920735f17cd8e931b84f52", &(0x7f0000000400)=@udp6=r0, 0x2}, 0x20) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad3", 0x5e0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r12, @ANYBLOB="0eec7a8639ffe07ccffdaa20112af67e297f72b0f1e11d791eba600c7dbf592e58ff440167017a72f7d54dff9c9f35ddc8cabc83c707827294a489d541d87347af886c07b7809dc4e2371a9f864c603f85cd8512595e7affcb1c6933a4deeb782f33d0661e1414b3cd387b8aba2dd4a2a017b8a20e8c71c2729c76289302383c5a"], 0x3c}}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r12], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 19.272811033s ago: executing program 3 (id=6635): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000040)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x95}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x4f, &(0x7f0000000140)=""/79, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x6, 0x2, 0x80000001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r1, r2, r2, r2, r2], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x6, 0x5}, {0x2, 0x1, 0xb, 0xb}, {0x1, 0x1, 0x10, 0x4}, {0x5, 0x2, 0x2}, {0x3, 0x4, 0xd, 0x3}], 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r8, 0x0, 0x40008003}, 0x18) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r7, r9, 0x37, 0x2000, 0x0, @value=r13, @void, @void, @void, r12}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r14, r5, 0x24, 0x2000, r5, @value=r6, @void, @void, @void, r12}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r15, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r12}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r4, r1, 0x26, 0x0, @val=@tcx={@void, @value, @void, @void, r12}}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r16, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r3}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x2}]}]}, 0x44}}, 0x0) socket$inet(0x2, 0x3, 0x7) 19.144658231s ago: executing program 1 (id=6636): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x23, 0x2, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000001480)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x29, 0x5, 0x0, 0xfffff034}, {0x51, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x2, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) getsockname$netlink(r2, &(0x7f00000005c0), &(0x7f0000000580)=0xfffffffffffffe67) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.61311083s ago: executing program 1 (id=6638): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x3c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x3c}}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x8, 0xfff, 0x4, {{0x5, 0x4, 0x3, 0x1a, 0x14, 0x64, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}}}}}) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/70, 0x46}], 0x2) 18.498869248s ago: executing program 0 (id=6639): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="130000000102039839", 0x9}], 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a006080", @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x4080002}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000009000000000000000100000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000009554172f326b2fda4354df843bbf32a3bb72c9379f5602754fd552c6"], 0xb8}}, 0x4000) 17.233559073s ago: executing program 4 (id=6645): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) pipe(&(0x7f0000000dc0)) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000003c0)=0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x3f, 0x0, 0x8}, 0x28) (async) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) unshare(0x2c020400) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r7}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r8, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6080000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000000000100000000000000000100000108000340000000090900010073797a30000000000800030600000003"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x60040004) 17.124548941s ago: executing program 4 (id=6646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fc0100000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000100", @ANYBLOB='!'], 0x240}}, 0x0) 17.118144095s ago: executing program 4 (id=6647): r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x59}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x1, 0xc, 0x1, 0x3, 0xffffffffffffffc0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8001, 0x68, &(0x7f0000000180)=""/104, 0x40f00, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x0, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1], &(0x7f00000002c0)=[{0x5, 0x2, 0xb, 0xb}]}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f00000003c0)=r1, 0x4) 17.047250928s ago: executing program 4 (id=6648): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="150000001000010000060000c40c00000500000a1400000011000100000079c9800000000000010082453adf73788ccdddef3d52ea1c4cc9d8e922d7fb5de6da6c664693d63ddded6db20fbec548015e5c2757c3205ea8d7e9c3dd391b0175d182b20b73b8d910dfe037693bb249e55dfd5d54053891b6806286248609c8b5ac8fa34df2215b582324253759f487daf7d07497f76919060da54094a27b896313534ab6fcea0cb96527fbd5a65a2a4f7ed8004296285b085f38bf63ccc2a45243a1a768ef01d1cffe53e07fb3a73ec8ca6621a2e60de099494defaa3eed5f6968e472e07c2edeab23938c227434a53f95e55fccf969710bdffc"], 0x28}}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000508000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000094}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d140012801091e16c73bb4aa0bf756e6e656c000008000340000001"], 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff88ffffff1780c206050086dd6018293e00102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000241002200000400000000000000"], 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@private=0xa010102, @multicast2}, 0x8) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x48, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x8}], "ca1c9742d4326f1e67f2c42e238b53152a4849b1f5374c13fae9aeafea7b4e518a815941ec789f3bf4fb428d6a47975bd7d6b6ef03f8ba9a541b4f31c0863bd8"}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 16.572074011s ago: executing program 1 (id=6649): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRESDEC=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370900000000ffdbdf2500000080", @ANYRES32=r8, @ANYBLOB="01f5050015200000300012800b00010067656e657665000020000280050004000000000014000700fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x20004055}, 0x40004) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xfffffe33}}], 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) bind$bt_hci(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0xe}, @window={0x3, 0x7, 0x1}, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x3}], 0x8) 16.569694051s ago: executing program 0 (id=6650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x3, @remote}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0xa6}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x0, 0x1}, {0xb, 0x3}, {0xe}, {0x10, 0x1}, {0xb}, {0xb, 0x1}, {0x9, 0x5}, {0x5, 0x4}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x61, 0x30, 0x51]}}, &(0x7f0000000380)=""/35, 0x8d, 0x23, 0x1, 0xffff, 0x10000}, 0x28) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000026006bab9a3fe3d86e0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4930a00e70e5d09c5bb5b64f69853362ac3407173ec0000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c0c4) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000400)="b2fe169a1140dae6dedaff86a97df54e4840f9224b92808fe15e843ff57cbcb4f0f698d9e3ee713006527105643115eaababacc2d7db87594923d844138b2d6bb86ca0353e443dbae753fdee82ace9787c63e2a8a3474c6d4aa44748655befe18cd4f684d63146b26d6e0c9b366325903d96", 0x72) 16.559671518s ago: executing program 4 (id=6651): r0 = socket(0x15, 0x2, 0x5) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x3c}}, 0x24040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3e}}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 16.496836208s ago: executing program 2 (id=6652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)}], 0x3, 0x8040000, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x401, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16.402268634s ago: executing program 2 (id=6653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffd6e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000210003c3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000000080)}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000700)=""/250, 0xfa}], 0x5, &(0x7f0000000800)=""/249, 0xf9}, 0x5}, {{&(0x7f0000000900)=@sco={0x1f, @none}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000980)=""/228, 0xe4}], 0x1, &(0x7f0000000a80)=""/236, 0xec}, 0x3}], 0x2, 0x40, &(0x7f0000000c00)={r3, r4+10000000}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.366037068s ago: executing program 4 (id=6654): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) read(r0, &(0x7f00000013c0)=""/155, 0x9b) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 16.29445712s ago: executing program 0 (id=6655): getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000017c0)="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", 0x829}], 0x1}}], 0x1, 0x8124) 16.263255996s ago: executing program 3 (id=6656): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket(0x8, 0x3, 0x0) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) 16.261986285s ago: executing program 2 (id=6657): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x4, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x20000450) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 16.133262856s ago: executing program 0 (id=6658): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t(\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4950}, 0x24000840) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x20000450) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 767.785611ms ago: executing program 32 (id=6658): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t(\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4950}, 0x24000840) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x20000450) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 621.750222ms ago: executing program 33 (id=6649): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRESDEC=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370900000000ffdbdf2500000080", @ANYRES32=r8, @ANYBLOB="01f5050015200000300012800b00010067656e657665000020000280050004000000000014000700fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x20004055}, 0x40004) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xfffffe33}}], 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8080) bind$bt_hci(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0xe}, @window={0x3, 0x7, 0x1}, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x3}], 0x8) 252.393269ms ago: executing program 34 (id=6657): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x4, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x20000450) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 220.441327ms ago: executing program 35 (id=6656): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket(0x8, 0x3, 0x0) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) 0s ago: executing program 36 (id=6654): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) read(r0, &(0x7f00000013c0)=""/155, 0x9b) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): x [ 921.491253][T24944] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 921.628299][ T36] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 921.828244][ T36] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 921.961526][T19179] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 922.021759][T27514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5720'. [ 922.027888][T27515] syzkaller1: entered promiscuous mode [ 922.055217][T27514] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 922.058848][T27515] syzkaller1: entered allmulticast mode [ 922.270337][T27514] 8021q: adding VLAN 0 to HW filter on device bond10 [ 922.309397][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 922.372835][T27523] vlan1: entered allmulticast mode [ 922.390147][T27523] bond10: entered allmulticast mode [ 922.442655][T24944] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 922.588329][T19179] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 922.725594][T27537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5723'. [ 922.940413][T27551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5728'. [ 922.962590][T27553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5727'. [ 922.998596][ T5973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 923.018835][T27553] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5727'. [ 923.099150][T27558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5727'. [ 923.176161][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'. [ 923.299998][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 923.668316][T27581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5735'. [ 923.687619][T27578] nbd: couldn't find device at index 2 [ 923.759647][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'. [ 923.799162][ T5973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 924.371888][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5742'. [ 924.717111][T27626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5749'. [ 924.942158][T27640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'. [ 924.962361][T27640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5751'. [ 924.982256][T27640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'. [ 924.991372][T27640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5751'. [ 925.295643][T27658] bond0: (slave macvlan1): Error -98 calling set_mac_address [ 925.405256][T27666] tipc: Enabling of bearer rejected, already enabled [ 925.473985][T27666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5757'. [ 925.786281][T27685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 925.811275][T27685] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.821813][T24468] Bluetooth: hci4: link tx timeout [ 925.827642][T24468] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 925.987936][T27685] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.068763][T27685] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.145059][T27685] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.198159][T19170] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 926.215191][T24262] net_ratelimit: 29 callbacks suppressed [ 926.215212][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 926.417869][T24944] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.516796][T15490] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 926.534275][T27719] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.560453][T24262] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.570442][T24262] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.628794][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 926.738175][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 926.858178][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 926.979181][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 927.066144][T27743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.078349][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 927.146474][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 927.448435][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 927.452422][T27762] netlink: 'syz.3.5779': attribute type 1 has an invalid length. [ 927.456480][T27761] netlink: 'syz.0.5777': attribute type 12 has an invalid length. [ 927.578972][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 927.879817][T19170] Bluetooth: hci4: command 0x0405 tx timeout [ 928.266094][T27782] syzkaller0: entered promiscuous mode [ 928.272291][T27782] syzkaller0: entered allmulticast mode [ 928.334763][T27785] __nla_validate_parse: 2 callbacks suppressed [ 928.334782][T27785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5786'. [ 928.396471][T27785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5786'. [ 928.447273][T27785] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5786'. [ 928.491054][T27794] syzkaller1: entered promiscuous mode [ 928.496546][T27794] syzkaller1: entered allmulticast mode [ 928.763702][T27821] netlink: 'syz.3.5796': attribute type 21 has an invalid length. [ 928.834210][T27821] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5796'. [ 928.849334][T27821] netlink: 'syz.3.5796': attribute type 4 has an invalid length. [ 928.877127][T27821] netlink: 'syz.3.5796': attribute type 5 has an invalid length. [ 928.923109][T27821] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5796'. [ 929.132373][T27836] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5800'. [ 929.151880][T27836] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5800'. [ 929.163343][T27838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5799'. [ 929.227065][T27834] netlink: 'syz.2.5799': attribute type 89 has an invalid length. [ 929.572597][T27859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5805'. [ 929.657333][T27863] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5808'. [ 929.858139][T27879] sctp: [Deprecated]: syz.4.5812 (pid 27879) Use of int in max_burst socket option. [ 929.858139][T27879] Use struct sctp_assoc_value instead [ 929.940264][T27883] 8021q: VLANs not supported on ip_vti0 [ 929.961276][T27886] netlink: 'syz.4.5814': attribute type 13 has an invalid length. [ 930.008630][T27886] 0{X: refused to change device tx_queue_len [ 930.023483][T27886] netlink: 'syz.4.5814': attribute type 21 has an invalid length. [ 930.312215][T27901] netlink: 'syz.0.5820': attribute type 1 has an invalid length. [ 930.324011][T27901] netlink: 'syz.0.5820': attribute type 2 has an invalid length. [ 930.534626][T19170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 930.546056][T19170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 930.556199][T19170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 930.567080][T19170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 930.575319][T19170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 931.332823][T27723] net_ratelimit: 28 callbacks suppressed [ 931.332843][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 931.653362][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 931.778228][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 931.968900][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 931.995620][T27908] chnl_net:caif_netlink_parms(): no params data found [ 932.014309][T27965] IPVS: Scheduler module ip_vs_sip not found [ 932.235364][T27908] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.252278][T27908] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.267573][T27908] bridge_slave_0: entered allmulticast mode [ 932.281300][T27908] bridge_slave_0: entered promiscuous mode [ 932.312374][T27908] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.320743][T27908] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.328789][T27908] bridge_slave_1: entered allmulticast mode [ 932.336672][T27908] bridge_slave_1: entered promiscuous mode [ 932.405792][T27908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.431239][T27908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.598613][T24468] Bluetooth: hci1: command tx timeout [ 932.829642][T27908] team0: Port device team_slave_0 added [ 932.887417][T27908] team0: Port device team_slave_1 added [ 933.001060][T27908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.008154][T27908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.035042][T27908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.050466][T27908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.057446][T27908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.088785][T27908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.262997][T27908] hsr_slave_0: entered promiscuous mode [ 933.270491][T27908] hsr_slave_1: entered promiscuous mode [ 933.276657][T27908] debugfs: 'hsr0' already exists in 'hsr' [ 933.309088][T27908] Cannot create hsr debugfs directory [ 933.544938][T28026] validate_nla: 2 callbacks suppressed [ 933.544955][T28026] netlink: 'syz.4.5852': attribute type 13 has an invalid length. [ 933.602971][T28026] tipc: Resetting bearer [ 933.940501][T27710] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.950514][T27710] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.974119][T24262] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.983153][T24262] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.050053][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 934.134115][T28046] __nla_validate_parse: 13 callbacks suppressed [ 934.134133][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5855'. [ 934.189010][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 934.338717][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 934.433282][T27908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.476483][T28048] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5856'. [ 934.485939][T28048] netlink: 245 bytes leftover after parsing attributes in process `syz.2.5856'. [ 934.496416][T27908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.519793][T27908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 934.566400][T27908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.628520][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 934.679289][T24468] Bluetooth: hci1: command tx timeout [ 934.691236][T28064] netlink: 'syz.1.5857': attribute type 1 has an invalid length. [ 934.718313][T28064] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5857'. [ 934.730151][T28057] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5858'. [ 934.768200][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 934.812111][T28066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5858'. [ 935.076956][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 935.101755][T28075] syzkaller1: entered promiscuous mode [ 935.129354][T28075] syzkaller1: entered allmulticast mode [ 935.753357][T27908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.929491][T27908] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.942599][T27723] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.949821][T27723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.997862][T27718] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.005090][T27718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.363307][T28121] netlink: 'syz.4.5872': attribute type 39 has an invalid length. [ 936.398533][T27710] net_ratelimit: 6 callbacks suppressed [ 936.398551][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 936.518886][T27908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.594788][T27908] veth0_vlan: entered promiscuous mode [ 936.611644][T27908] veth1_vlan: entered promiscuous mode [ 936.647002][T27908] veth0_macvtap: entered promiscuous mode [ 936.674526][T27908] veth1_macvtap: entered promiscuous mode [ 936.708162][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 936.744480][T27908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.761674][T24468] Bluetooth: hci1: command tx timeout [ 936.775303][T27908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.796422][T27718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.810297][T28138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5878'. [ 936.830067][T27718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.840877][T27718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.849999][T27718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.860316][T28140] netlink: 'syz.1.5879': attribute type 5 has an invalid length. [ 936.889198][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 936.898639][T28140] netlink: zone id is out of range [ 936.903779][T28140] netlink: zone id is out of range [ 936.928215][T28142] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5881'. [ 936.944888][T28145] netlink: 'syz.3.5880': attribute type 1 has an invalid length. [ 937.035579][T28145] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 937.059870][T28145] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 937.070754][T28145] bond1: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 937.166807][T28162] netlink: 'syz.1.5883': attribute type 1 has an invalid length. [ 937.176393][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 937.184350][T27720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.193215][T28162] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5883'. [ 937.208412][T28162] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5883'. [ 937.212319][T27720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.217964][T28162] netlink: 'syz.1.5883': attribute type 1 has an invalid length. [ 937.232789][T28162] netlink: 'syz.1.5883': attribute type 8 has an invalid length. [ 937.336422][T19175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.351952][T19175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.370792][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 937.394603][T28170] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 937.499053][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 937.610708][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 938.088965][T28206] gretap2: entered allmulticast mode [ 938.205499][T28214] netlink: 'syz.2.5898': attribute type 6 has an invalid length. [ 938.382296][T28216] netlink: 'syz.2.5899': attribute type 1 has an invalid length. [ 938.649848][T28229] nbd: must specify a device to reconfigure [ 938.784324][T28229] netlink: 'syz.3.5902': attribute type 10 has an invalid length. [ 938.859558][T24468] Bluetooth: hci1: command tx timeout [ 939.900019][T28265] __nla_validate_parse: 8 callbacks suppressed [ 939.900038][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5910'. [ 940.187373][T19170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 940.202766][T19170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 940.213470][T19170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 940.222834][T19170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 940.231304][T19170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 940.285661][T28270] FAULT_INJECTION: forcing a failure. [ 940.285661][T28270] name failslab, interval 1, probability 0, space 0, times 0 [ 940.336843][T28270] CPU: 1 UID: 0 PID: 28270 Comm: syz.3.5913 Not tainted syzkaller #0 PREEMPT(full) [ 940.336874][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 940.336886][T28270] Call Trace: [ 940.336894][T28270] [ 940.336902][T28270] dump_stack_lvl+0xe8/0x150 [ 940.336929][T28270] should_fail_ex+0x414/0x560 [ 940.336960][T28270] should_failslab+0xa8/0x100 [ 940.336983][T28270] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 940.337014][T28270] ? __alloc_skb+0x190/0x720 [ 940.337032][T28270] ? __alloc_skb+0x1d5/0x720 [ 940.337049][T28270] ? __local_bh_enable_ip+0xd0/0x130 [ 940.337069][T28270] ? __alloc_skb+0x190/0x720 [ 940.337088][T28270] __alloc_skb+0x1d5/0x720 [ 940.337106][T28270] ? unwind_next_frame+0xa5/0x23d0 [ 940.337131][T28270] alloc_skb_with_frags+0xca/0x890 [ 940.337159][T28270] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 940.337186][T28270] sock_alloc_send_pskb+0x84d/0x980 [ 940.337232][T28270] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 940.337260][T28270] ? aa_sk_perm+0x15f/0x920 [ 940.337283][T28270] ? aa_sk_perm+0x7ee/0x920 [ 940.337306][T28270] hci_sock_sendmsg+0x1fe/0xf30 [ 940.337330][T28270] ? __pfx_aa_sk_perm+0x10/0x10 [ 940.337349][T28270] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 940.337374][T28270] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 940.337392][T28270] ? aa_sock_msg_perm+0xf1/0x1b0 [ 940.337416][T28270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.337432][T28270] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 940.337452][T28270] __sock_sendmsg+0x21c/0x270 [ 940.337480][T28270] sock_write_iter+0x279/0x360 [ 940.337506][T28270] ? __pfx_sock_write_iter+0x10/0x10 [ 940.337540][T28270] ? bpf_lsm_file_permission+0x9/0x20 [ 940.337558][T28270] ? security_file_permission+0x75/0x290 [ 940.337583][T28270] vfs_write+0x5c9/0xb30 [ 940.337606][T28270] ? __pfx_sock_write_iter+0x10/0x10 [ 940.337637][T28270] ? __pfx_vfs_write+0x10/0x10 [ 940.337664][T28270] ? __fget_files+0x2a/0x420 [ 940.337693][T28270] ksys_write+0x145/0x250 [ 940.337713][T28270] ? __pfx_ksys_write+0x10/0x10 [ 940.337741][T28270] do_syscall_64+0xec/0xf80 [ 940.337761][T28270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.337778][T28270] ? trace_irq_disable+0x37/0x100 [ 940.337799][T28270] ? clear_bhb_loop+0x60/0xb0 [ 940.337820][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.337838][T28270] RIP: 0033:0x7fe8c858f749 [ 940.337854][T28270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.337874][T28270] RSP: 002b:00007fe8c948e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.337894][T28270] RAX: ffffffffffffffda RBX: 00007fe8c87e5fa0 RCX: 00007fe8c858f749 [ 940.337908][T28270] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000004 [ 940.337919][T28270] RBP: 00007fe8c948e090 R08: 0000000000000000 R09: 0000000000000000 [ 940.337931][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.337943][T28270] R13: 00007fe8c87e6038 R14: 00007fe8c87e5fa0 R15: 00007ffebb3814f8 [ 940.337974][T28270] [ 940.731661][T16925] bond9: (slave syz_tun): Releasing backup interface [ 940.931894][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5915'. [ 940.939442][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5916'. [ 941.094172][T28278] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5916'. [ 941.517322][T27710] net_ratelimit: 19 callbacks suppressed [ 941.517344][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 941.719294][T28292] syzkaller0: entered promiscuous mode [ 941.724827][T28292] syzkaller0: entered allmulticast mode [ 941.888236][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 942.056531][T27718] tipc: Disabling bearer [ 942.151198][T28298] netlink: 'syz.3.5920': attribute type 1 has an invalid length. [ 942.208239][T28298] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5920'. [ 942.245284][T27718] bond10 (unregistering): (slave ip6erspan0): Releasing active interface [ 942.296030][T24468] Bluetooth: hci3: command tx timeout [ 943.167121][T27718] bond0 (unregistering): Released all slaves [ 943.179755][T27718] bond1 (unregistering): Released all slaves [ 943.315850][T27718] bond2 (unregistering): Released all slaves [ 943.441727][T27718] bond3 (unregistering): Released all slaves [ 943.453975][T27718] bond4 (unregistering): Released all slaves [ 943.579815][T27718] bond5 (unregistering): Released all slaves [ 943.591860][T27718] bond6 (unregistering): Released all slaves [ 943.603833][T27718] bond7 (unregistering): Released all slaves [ 943.615842][T27718] bond8 (unregistering): Released all slaves [ 943.748812][T27718] bond9 (unregistering): Released all slaves [ 943.872263][T27718] bond10 (unregistering): Released all slaves [ 944.025290][T27718] : left promiscuous mode [ 944.089392][T27718] : left promiscuous mode [ 944.148389][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 944.181984][T28266] chnl_net:caif_netlink_parms(): no params data found [ 944.207272][T27718] tipc: Disabling bearer [ 944.217485][T27718] tipc: Left network mode [ 944.358257][T19170] Bluetooth: hci3: command tx timeout [ 944.479134][T28320] netlink: 'syz.0.5925': attribute type 2 has an invalid length. [ 944.487133][T28320] netlink: 'syz.0.5925': attribute type 2 has an invalid length. [ 944.495508][T28320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5925'. [ 944.599308][T28327] netlink: 'syz.0.5928': attribute type 1 has an invalid length. [ 944.749703][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'. [ 944.803187][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 945.065063][T28340] netlink: 'syz.0.5931': attribute type 1 has an invalid length. [ 945.122581][T28266] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.138617][T28266] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.169166][T28266] bridge_slave_0: entered allmulticast mode [ 945.180515][T28266] bridge_slave_0: entered promiscuous mode [ 945.193992][T28266] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.201891][T28266] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.209746][T28266] bridge_slave_1: entered allmulticast mode [ 945.222497][T28266] bridge_slave_1: entered promiscuous mode [ 945.266461][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 945.455599][T28348] tipc: Enabling of bearer rejected, already enabled [ 945.491261][T28266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.509713][T28351] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5934'. [ 945.520619][T28266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.538341][T28349] tipc: Enabling of bearer rejected, already enabled [ 945.632900][T28266] team0: Port device team_slave_0 added [ 945.648855][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 945.663238][T28266] team0: Port device team_slave_1 added [ 945.690102][T28359] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 945.874476][T28366] netlink: 'syz.0.5937': attribute type 1 has an invalid length. [ 945.994269][T28266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.008089][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.062934][T28266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.109033][T28362] vlan2: entered allmulticast mode [ 946.114582][T28362] batadv_slave_1: entered allmulticast mode [ 946.213796][T28266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.223106][T28266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.270687][T28266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.301026][T27718] hsr_slave_0: left promiscuous mode [ 946.345952][T28371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5938'. [ 946.355479][T28371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5938'. [ 946.355915][T27718] pim6reg99999999 (unregistering): left allmulticast mode [ 946.439113][T19170] Bluetooth: hci3: command tx timeout [ 947.126594][T28266] hsr_slave_0: entered promiscuous mode [ 947.141492][T28266] hsr_slave_1: entered promiscuous mode [ 947.165013][T28266] debugfs: 'hsr0' already exists in 'hsr' [ 947.171896][T28266] Cannot create hsr debugfs directory [ 947.399427][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 947.533936][T28384] : renamed from veth0_to_bond (while UP) [ 947.605413][T28385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5940'. [ 947.622028][T28385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5940'. [ 947.631272][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 948.162908][T27718] IPVS: stop unused estimator thread 0... [ 948.175029][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 948.350391][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 948.487709][T28388] netlink: 'syz.0.5941': attribute type 21 has an invalid length. [ 948.509236][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 948.528662][T19170] Bluetooth: hci3: command tx timeout [ 948.548491][T28388] netlink: 'syz.0.5941': attribute type 1 has an invalid length. [ 948.580805][T28388] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5941'. [ 948.679423][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 948.804798][T28266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 948.854440][T28266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 948.886754][T28266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 948.933260][T28266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 949.063640][T28408] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.5944'. [ 949.206438][T28266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.229214][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 949.246249][T28266] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.263274][T27710] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.270500][T27710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.313425][T27710] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.320654][T27710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.352273][T28414] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 949.360989][T28414] syzkaller1: linktype set to 260 [ 949.368706][T28414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5947'. [ 949.377815][T28414] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5947'. [ 949.394100][T28414] netlink: 'syz.2.5947': attribute type 6 has an invalid length. [ 949.407166][T28414] netlink: 'syz.2.5947': attribute type 5 has an invalid length. [ 949.417682][T28414] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5947'. [ 949.449004][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 949.466262][T28414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 949.578487][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 949.598762][T28428] netlink: 'syz.3.5949': attribute type 1 has an invalid length. [ 949.708366][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 949.784530][T28266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.947003][T28443] x_tables: duplicate underflow at hook 1 [ 950.154317][T28453] netlink: 'syz.0.5955': attribute type 2 has an invalid length. [ 950.164779][T28453] netlink: 'syz.0.5955': attribute type 2 has an invalid length. [ 950.409582][T28266] veth0_vlan: entered promiscuous mode [ 950.459747][T28266] veth1_vlan: entered promiscuous mode [ 950.671123][T28266] veth0_macvtap: entered promiscuous mode [ 950.693913][T28266] veth1_macvtap: entered promiscuous mode [ 950.711331][T28460] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 950.746357][T28266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.776932][T28266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.824588][T27723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.861490][T27723] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.883748][T28461] __nla_validate_parse: 5 callbacks suppressed [ 950.883766][T28461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5957'. [ 950.905156][T27723] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.970007][T27723] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.033027][T27723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.043597][T27723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.215639][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.225559][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.716728][T28476] netlink: 'syz.4.5962': attribute type 13 has an invalid length. [ 951.736278][T28476] netlink: 'syz.4.5962': attribute type 17 has an invalid length. [ 952.032995][T28482] xfrm0: entered promiscuous mode [ 952.040091][T28482] xfrm0: entered allmulticast mode [ 952.148846][T28485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5964'. [ 952.169492][T28485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5964'. [ 952.408194][T27710] net_ratelimit: 12 callbacks suppressed [ 952.408245][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 952.447590][T28494] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5967'. [ 952.560833][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 952.698240][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 952.808169][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 952.893003][T28505] syzkaller0: left promiscuous mode [ 952.914705][T28505] syzkaller0: left allmulticast mode [ 952.938518][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 952.961879][T28503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5969'. [ 952.968791][T28508] netlink: 'syz.0.5970': attribute type 1 has an invalid length. [ 952.974298][T28503] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5969'. [ 953.022299][T28508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5970'. [ 953.058179][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 953.151488][T28512] syzkaller0: entered promiscuous mode [ 953.180556][T28512] syzkaller0: entered allmulticast mode [ 953.216740][T28512] 0: reclassify loop, rule prio 0, protocol 800 [ 953.237805][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 953.380008][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 953.469283][T28520] delete_channel: no stack [ 953.490835][T28520] delete_channel: no stack [ 953.498551][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 953.516563][T28520] delete_channel: no stack [ 953.528927][T28520] delete_channel: no stack [ 953.533576][T28520] delete_channel: no stack [ 953.552715][T28520] delete_channel: no stack [ 953.578386][T28520] delete_channel: no stack [ 953.583157][T28520] delete_channel: no stack [ 953.587719][T28520] delete_channel: no stack [ 953.614947][T28520] delete_channel: no stack [ 953.638499][T28520] delete_channel: no stack [ 953.643110][T28520] delete_channel: no stack [ 953.649658][T28520] delete_channel: no stack [ 953.654727][T28520] delete_channel: no stack [ 953.659391][T28520] delete_channel: no stack [ 953.663988][T28520] delete_channel: no stack [ 953.668656][T28520] delete_channel: no stack [ 953.673240][T28520] delete_channel: no stack [ 953.677808][T28520] delete_channel: no stack [ 953.725723][T28520] delete_channel: no stack [ 953.735554][T28520] delete_channel: no stack [ 953.746219][T28520] delete_channel: no stack [ 953.756868][T28547] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5979'. [ 953.767432][T28520] delete_channel: no stack [ 953.773905][T28520] delete_channel: no stack [ 953.779039][T28548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5979'. [ 953.789279][T28520] delete_channel: no stack [ 953.793882][T28520] delete_channel: no stack [ 953.801284][T28520] delete_channel: no stack [ 953.838802][T28520] delete_channel: no stack [ 953.882960][T28556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5981'. [ 953.895174][T28520] delete_channel: no stack [ 953.908501][T28520] delete_channel: no stack [ 953.913109][T28520] delete_channel: no stack [ 953.917725][T28520] delete_channel: no stack [ 953.968527][T28520] delete_channel: no stack [ 954.121016][T28570] syzkaller0: entered promiscuous mode [ 954.126530][T28570] syzkaller0: entered allmulticast mode [ 954.181431][T28561] can: request_module (can-proto-0) failed. [ 954.394921][T28591] netlink: 'syz.2.5991': attribute type 1 has an invalid length. [ 954.401227][T28578] bond1: option fail_over_mac: invalid value (127) [ 954.419773][T28578] bond1 (unregistering): Released all slaves [ 954.480155][T28591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 954.499724][T28593] ipvlan0: entered promiscuous mode [ 954.507600][T28593] bridge0: port 2(ipvlan0) entered blocking state [ 954.515650][T28593] bridge0: port 2(ipvlan0) entered disabled state [ 954.523414][T28593] ipvlan0: entered allmulticast mode [ 954.529095][T28593] bridge0: entered allmulticast mode [ 954.536833][T28593] ipvlan0: left allmulticast mode [ 954.542605][T28593] bridge0: left allmulticast mode [ 954.576291][T28580] tipc: Enabling of bearer rejected, already enabled [ 954.586248][T28586] syzkaller0: entered promiscuous mode [ 954.593490][T28586] syzkaller0: entered allmulticast mode [ 954.719337][T28605] sctp: [Deprecated]: syz.3.5998 (pid 28605) Use of int in max_burst socket option. [ 954.719337][T28605] Use struct sctp_assoc_value instead [ 954.930439][T28621] tipc: Enabled bearer , priority 0 [ 955.047259][T28621] syzkaller0: entered promiscuous mode [ 955.065823][T28621] syzkaller0: entered allmulticast mode [ 955.073261][T28621] tipc: Resetting bearer [ 955.090076][T28625] netlink: 'syz.1.6002': attribute type 1 has an invalid length. [ 955.210289][T19175] tipc: Resetting bearer [ 955.216711][T28620] tipc: Resetting bearer [ 956.960261][T28620] tipc: Disabling bearer [ 956.969316][T28625] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 956.972028][T28633] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 956.987662][T28631] bond2: option arp_validate: invalid value (18446744073491447809) [ 956.997754][T28633] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 956.999860][T28631] bond2 (unregistering): Released all slaves [ 957.057618][ T5907] tipc: Node number set to 3967638499 [ 957.172682][T28652] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 957.268348][T28664] __nla_validate_parse: 7 callbacks suppressed [ 957.268364][T28664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6012'. [ 957.274938][T28665] tipc: Started in network mode [ 957.298752][T28665] tipc: Node identity 2ab4f095f056, cluster identity 4711 [ 957.306013][T28665] tipc: Enabled bearer , priority 0 [ 957.326114][T28668] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.6013'. [ 957.337923][T28665] syzkaller0: entered promiscuous mode [ 957.354297][T28665] syzkaller0: entered allmulticast mode [ 957.391002][T28665] tipc: Resetting bearer [ 957.416018][T28663] tipc: Resetting bearer [ 957.444004][T28663] tipc: Disabling bearer [ 957.456061][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6015'. [ 957.473354][T28678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6015'. [ 957.482730][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6015'. [ 957.520932][T28678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6015'. [ 957.538169][T27710] net_ratelimit: 13 callbacks suppressed [ 957.538189][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 957.676240][T28684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6019'. [ 957.713413][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 957.737611][T28690] Bluetooth: MGMT ver 1.23 [ 957.770121][T28690] geneve2: entered promiscuous mode [ 957.800184][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6020'. [ 957.874015][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6023'. [ 958.088301][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 958.357148][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 958.481473][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 958.608672][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 958.693472][T28716] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6027'. [ 958.704879][T28716] netlink: 'syz.1.6027': attribute type 9 has an invalid length. [ 958.718181][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 958.828762][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 959.299963][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 959.448681][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 959.474936][T28750] netlink: 'syz.1.6037': attribute type 39 has an invalid length. [ 959.567617][T28759] netlink: 'syz.4.6038': attribute type 1 has an invalid length. [ 959.654146][T28766] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 959.728116][T28750] sctp: [Deprecated]: syz.1.6037 (pid 28750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.728116][T28750] Use struct sctp_sack_info instead [ 960.600750][T24468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 960.616489][T24468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 960.626387][T24468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 960.644089][T24468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 960.653672][T24468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 960.995345][T28806] syzkaller0: entered promiscuous mode [ 961.022260][T28806] syzkaller0: entered allmulticast mode [ 961.217994][T28806] tipc: Started in network mode [ 961.242419][T28806] tipc: Node identity 0e6b9bbafb16, cluster identity 4711 [ 961.269441][T28806] tipc: Enabled bearer , priority 0 [ 961.277383][T28815] kthread_run failed with err -4 [ 961.372533][T28802] tipc: Resetting bearer [ 961.442713][T28802] tipc: Disabling bearer [ 961.764631][T28836] macsec1: entered promiscuous mode [ 961.779555][T28836] macsec1: entered allmulticast mode [ 962.388707][T28855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.741166][T27710] net_ratelimit: 13 callbacks suppressed [ 962.741185][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 962.761165][T24468] Bluetooth: hci5: command tx timeout [ 962.920716][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 963.059614][T28783] chnl_net:caif_netlink_parms(): no params data found [ 963.082590][T28889] tipc: Enabling of bearer rejected, failed to enable media [ 963.128751][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 963.364667][T28783] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.386847][T28783] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.395635][T28783] bridge_slave_0: entered allmulticast mode [ 963.404871][T28783] bridge_slave_0: entered promiscuous mode [ 963.469241][T28783] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.476411][T28783] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.487586][T28783] bridge_slave_1: entered allmulticast mode [ 963.501072][T28783] bridge_slave_1: entered promiscuous mode [ 963.554874][T28913] __nla_validate_parse: 8 callbacks suppressed [ 963.554893][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6076'. [ 963.712167][T28783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.805466][T28925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6077'. [ 963.826315][T28916] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.833820][T28916] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.951313][T28916] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 963.967640][T28916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.985958][T28916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.106477][T28783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.253139][T27722] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.275131][T27722] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.293216][T27722] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.448005][T27722] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.508888][T28944] siw: device registration error -23 [ 964.660547][T28783] team0: Port device team_slave_0 added [ 964.793047][T28783] team0: Port device team_slave_1 added [ 964.842300][T24468] Bluetooth: hci5: command tx timeout [ 964.847026][T28957] xfrm1: entered allmulticast mode [ 964.919088][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 964.947860][T28783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.956616][T28783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.985515][T28783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.015811][T28783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.024827][T28783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.053671][T28783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.122413][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6086'. [ 965.143431][T28783] hsr_slave_0: entered promiscuous mode [ 965.150847][T28783] hsr_slave_1: entered promiscuous mode [ 965.157407][T28783] debugfs: 'hsr0' already exists in 'hsr' [ 965.164820][T28783] Cannot create hsr debugfs directory [ 965.199255][T28972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6088'. [ 965.519357][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 965.729154][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 965.848241][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 966.018659][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 966.314157][T28990] syzkaller0: entered promiscuous mode [ 966.338227][T28990] syzkaller0: entered allmulticast mode [ 966.357200][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6093'. [ 966.366294][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 966.375062][T28989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 966.399870][T28989] netlink: 'syz.4.6093': attribute type 14 has an invalid length. [ 966.410550][T28989] netlink: 'syz.4.6093': attribute type 13 has an invalid length. [ 966.921349][T24468] Bluetooth: hci5: command tx timeout [ 968.638336][T28998] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 968.671002][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 968.714639][T28783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 968.752530][T28783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 968.815525][T28783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 969.001173][T24468] Bluetooth: hci5: command tx timeout [ 969.171404][T29006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.251647][T28783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 969.389575][T29006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.513158][T29006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.567436][T29045] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 969.632429][T29006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.719035][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 969.760891][T28783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.801381][T28783] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.825857][T27722] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.833065][T27722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.874621][T27723] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.936985][T27722] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.944214][T27722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.962791][T27723] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.985333][T27722] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.010810][T27723] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.168993][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 970.288740][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 970.340788][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6112'. [ 970.418602][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 970.464485][T28783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.507419][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6113'. [ 970.548201][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 970.678369][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 970.817243][T28783] veth0_vlan: entered promiscuous mode [ 970.833442][T28783] veth1_vlan: entered promiscuous mode [ 970.885964][T28783] veth0_macvtap: entered promiscuous mode [ 970.896715][T28783] veth1_macvtap: entered promiscuous mode [ 970.957408][T29109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6119'. [ 970.998854][T28783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.008992][T29109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6119'. [ 971.024754][T28783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.056252][T27722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.076759][T27722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.092711][T27722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.103745][T27722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.160504][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 971.218973][T29126] syzkaller0: left promiscuous mode [ 971.224337][T29126] syzkaller0: left allmulticast mode [ 971.277858][T29128] netlink: 'syz.3.6125': attribute type 16 has an invalid length. [ 971.290918][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 971.408451][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 971.693165][T29123] netlink: 'syz.0.6123': attribute type 1 has an invalid length. [ 971.712191][T24262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.715685][T29123] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6123'. [ 971.743713][T24262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.782777][T29136] netlink: 'syz.4.6127': attribute type 10 has an invalid length. [ 971.815564][T29136] team0: Device veth1_macvtap failed to register rx_handler [ 971.869692][T27720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.877553][T27720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.075755][T29149] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 972.234728][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6132'. [ 972.255419][T29156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6132'. [ 972.281083][T29156] netlink: 'syz.3.6132': attribute type 14 has an invalid length. [ 972.386822][T29155] netlink: 'syz.2.6131': attribute type 10 has an invalid length. [ 972.409182][T29155] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6131'. [ 972.429208][T29155] bond0: entered promiscuous mode [ 972.448462][T29155] bond_slave_0: entered promiscuous mode [ 972.475246][T29155] bond_slave_1: entered promiscuous mode [ 972.491996][T29155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.965440][T29169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6136'. [ 973.750953][T24262] net_ratelimit: 13 callbacks suppressed [ 973.751021][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 973.878551][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.068204][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.178896][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.264819][T29201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6143'. [ 974.308381][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.493900][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.618501][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.674613][T29223] netlink: 'syz.4.6151': attribute type 6 has an invalid length. [ 974.698621][T29223] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.738717][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.803623][T29235] netlink: 'syz.0.6154': attribute type 1 has an invalid length. [ 974.868259][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 974.978239][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 976.176990][T29256] __nla_validate_parse: 4 callbacks suppressed [ 976.177009][T29256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6158'. [ 977.221307][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6166'. [ 978.571409][T29318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.578723][T29318] IPv6: NLM_F_CREATE should be set when creating new route [ 978.585961][T29318] IPv6: NLM_F_CREATE should be set when creating new route [ 978.790986][T27710] net_ratelimit: 27 callbacks suppressed [ 978.791006][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 978.877696][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6176'. [ 978.938353][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 979.098525][T29359] netlink: 'syz.2.6180': attribute type 1 has an invalid length. [ 979.122000][T29360] netlink: 'syz.2.6180': attribute type 1 has an invalid length. [ 979.287468][T29360] 8021q: adding VLAN 0 to HW filter on device bond9 [ 979.368603][T29362] bond9: (slave geneve3): making interface the new active one [ 979.379235][T29362] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 979.454276][T27710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.489329][T27710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.497612][T27710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.526418][T27710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.566696][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 979.698259][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 979.734282][T29381] netlink: 'syz.3.6186': attribute type 13 has an invalid length. [ 979.898510][ T5973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 979.928553][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 979.971361][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 980.042692][T29385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6187'. [ 980.107523][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 980.240953][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 980.338502][ T5973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 980.348506][T29407] vlan2: left allmulticast mode [ 980.353399][T29407] batadv_slave_1: left allmulticast mode [ 980.391158][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 980.400730][T29409] netlink: 'syz.4.6192': attribute type 10 has an invalid length. [ 980.414868][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 980.424600][T29412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6194'. [ 980.445261][T29412] veth1_virt_wifi: entered allmulticast mode [ 980.525613][T29409] team0: Device veth0_macvtap failed to register rx_handler [ 980.628153][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 980.738515][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 981.005877][T29443] netlink: 'syz.4.6202': attribute type 11 has an invalid length. [ 981.020656][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6202'. [ 981.452039][T29436] syzkaller1: entered promiscuous mode [ 981.458132][T29436] syzkaller1: entered allmulticast mode [ 981.638531][T29456] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6204'. [ 981.664114][T29456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6204'. [ 981.673465][T29456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6204'. [ 982.309072][T29480] netlink: 'syz.2.6210': attribute type 1 has an invalid length. [ 982.443864][T29480] 8021q: adding VLAN 0 to HW filter on device bond10 [ 982.602770][T29483] 8021q: adding VLAN 0 to HW filter on device bond10 [ 982.618701][T29483] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 982.634552][T29483] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 982.683567][T29473] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 982.705814][T29473] bond10: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 982.774944][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6206'. [ 982.803223][T29489] sctp: [Deprecated]: syz.1.6213 (pid 29489) Use of int in maxseg socket option. [ 982.803223][T29489] Use struct sctp_assoc_value instead [ 983.222330][T29506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6215'. [ 983.304490][T19170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 983.315446][T19170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.336404][T19170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.345160][T19170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.361269][T19170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 983.469397][T29511] netlink: 'syz.0.6219': attribute type 2 has an invalid length. [ 983.696406][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 983.753503][T29518] chnl_net:caif_netlink_parms(): no params data found [ 983.838190][T24262] net_ratelimit: 16 callbacks suppressed [ 983.838210][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 983.978134][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 984.089630][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 984.222596][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 984.404053][T29536] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 984.529253][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 984.728329][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 984.808463][T29553] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6228'. [ 984.891373][T29553] team0: No ports can be present during mode change [ 984.920161][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 985.114471][T29563] netlink: 'syz.0.6230': attribute type 12 has an invalid length. [ 985.136174][T29508] chnl_net:caif_netlink_parms(): no params data found [ 985.280050][T29570] netlink: 'syz.3.6229': attribute type 27 has an invalid length. [ 985.398398][T24468] Bluetooth: hci2: command tx timeout [ 985.495813][T29508] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.505599][T29508] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.518873][T29508] bridge_slave_0: entered allmulticast mode [ 985.545776][T29508] bridge_slave_0: entered promiscuous mode [ 985.609034][T29508] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.618561][T29508] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.625914][T29508] bridge_slave_1: entered allmulticast mode [ 985.635597][T29508] bridge_slave_1: entered promiscuous mode [ 985.817746][T29508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.847233][T29508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.889293][T29508] team0: Port device team_slave_0 added [ 985.901031][T29508] team0: Port device team_slave_1 added [ 986.098873][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 986.124985][T29508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.138106][T29508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.168639][T29508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.196528][T27714] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.225697][T29508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.237889][T29508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.280069][T29508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.335246][T27714] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.388771][T29508] hsr_slave_0: entered promiscuous mode [ 986.395615][T29508] hsr_slave_1: entered promiscuous mode [ 986.408806][T29508] debugfs: 'hsr0' already exists in 'hsr' [ 986.414690][T29508] Cannot create hsr debugfs directory [ 986.460551][T27714] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.533300][T27714] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.658186][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 986.752666][T29597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6236'. [ 986.778916][T29597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6236'. [ 986.975023][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 987.078402][T27714] ip6gretap0 (unregistering): left promiscuous mode [ 987.358357][T27714] gretap0 (unregistering): left promiscuous mode [ 987.397974][T27714] bond6 (unregistering): (slave gretap1): Releasing active interface [ 987.458818][T27714] dvmrp6 (unregistering): left allmulticast mode [ 987.492118][T24468] Bluetooth: hci2: command tx timeout [ 987.499519][T27714] bond9 (unregistering): (slave geneve3): Releasing active interface [ 987.750582][T27714] bond7 (unregistering): (slave bridge5): Releasing active interface [ 987.995929][T27714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.005079][T27714] bond_slave_0: left promiscuous mode [ 988.012856][T27714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.021999][T27714] bond_slave_1: left promiscuous mode [ 988.027798][T27714] bond0 (unregistering): Released all slaves [ 988.183706][T27714] bond1 (unregistering): Released all slaves [ 988.306519][T27714] bond2 (unregistering): Released all slaves [ 988.318914][T27714] bond3 (unregistering): Released all slaves [ 988.331236][T27714] bond4 (unregistering): Released all slaves [ 988.460443][T27714] bond5 (unregistering): Released all slaves [ 988.587036][T27714] bond6 (unregistering): Released all slaves [ 988.710951][T27714] bond7 (unregistering): Released all slaves [ 988.835611][T27714] bond8 (unregistering): Released all slaves [ 988.956254][T27714] bond9 (unregistering): Released all slaves [ 989.071860][T27714] bond10 (unregistering): Released all slaves [ 989.115045][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6241'. [ 989.140986][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6241'. [ 989.280929][T27714] : left promiscuous mode [ 989.401237][T29630] netlink: 'syz.4.6245': attribute type 14 has an invalid length. [ 989.444384][T27714] tipc: Left network mode [ 989.469226][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 989.558008][T29639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 989.559888][T24468] Bluetooth: hci2: command tx timeout [ 989.584499][T29639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6248'. [ 989.596149][T29638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 989.668301][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 989.692396][T29638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6248'. [ 990.029302][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 990.158489][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 990.230601][T29656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6253'. [ 990.329433][T29655] tipc: Failed to remove unknown binding: 66,0,0/0:4139810293/4139810295 [ 990.335547][T29508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 990.338017][T29655] tipc: Failed to remove unknown binding: 66,0,0/0:4139810293/4139810294 [ 990.353600][T29655] tipc: Failed to remove unknown binding: 66,0,0/0:4139810293/4139810295 [ 990.365047][T29655] tipc: Failed to remove unknown binding: 66,0,0/0:4139810293/4139810294 [ 990.367079][T29508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 990.437655][T29508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 990.478732][T29508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 990.707194][T29508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.753651][T29508] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.768433][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 990.790819][T27720] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.798098][T27720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.835497][T27720] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.842742][T27720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.926545][T29678] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 990.978564][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 991.098223][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 991.230128][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 991.294717][T29508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.349859][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 991.382153][T29508] veth0_vlan: entered promiscuous mode [ 991.406209][T29508] veth1_vlan: entered promiscuous mode [ 991.467555][T29508] veth0_macvtap: entered promiscuous mode [ 991.481022][T29508] veth1_macvtap: entered promiscuous mode [ 991.505379][T29508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.537042][T29508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.572892][T27712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.595812][T27712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.625001][T27712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.638687][T24468] Bluetooth: hci2: command tx timeout [ 991.653604][T27712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.758347][T27720] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 991.839862][T29708] __nla_validate_parse: 4 callbacks suppressed [ 991.839881][T29708] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6264'. [ 991.891569][T24262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.900198][T24262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.966925][T27718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.982435][T27718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.998311][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 993.290965][T27714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.532224][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6273'. [ 993.815212][T27714] team0 (unregistering): Port device team_slave_1 removed [ 993.864058][T27714] team0 (unregistering): Port device team_slave_0 removed [ 993.956536][T27718] smc: removing ib device sy [ 994.543044][T27711] net_ratelimit: 13 callbacks suppressed [ 994.543065][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 994.658558][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 994.788734][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 994.843152][T29781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6284'. [ 994.926844][T29781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6284'. [ 994.979072][T29781] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 995.008630][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 995.046244][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6285'. [ 995.190832][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 995.516906][T29796] bond2: entered promiscuous mode [ 995.538324][T29799] netpci0: tun_chr_ioctl cmd 1074025677 [ 995.544169][T29799] netpci0: linktype set to 6 [ 995.619594][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 995.789308][T29803] vlan1: entered allmulticast mode [ 995.808361][T29803] bridge_slave_0: entered allmulticast mode [ 995.901309][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 995.943061][T29807] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.6288'. [ 996.018431][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 996.158681][T19176] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 996.558935][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 997.129828][T27714] IPVS: stop unused estimator thread 0... [ 998.003104][T29841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6297'. [ 998.634181][T29857] netlink: 'syz.3.6302': attribute type 4 has an invalid length. [ 998.790724][T29859] tipc: Enabled bearer , priority 0 [ 998.809511][T29859] syzkaller0: entered promiscuous mode [ 998.828337][T29859] syzkaller0: entered allmulticast mode [ 998.885519][T29859] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 998.939616][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6304'. [ 998.963506][T29862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6304'. [ 998.974779][T29862] netlink: 'syz.3.6304': attribute type 1 has an invalid length. [ 998.982716][T29862] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6304'. [ 999.008301][T29862] block nbd1: Unsupported socket: should be TCP or UNIX. [ 999.038735][T29860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 999.065082][T29860] tipc: Resetting bearer [ 999.130183][T29858] tipc: Resetting bearer [ 999.219694][T29858] tipc: Disabling bearer [ 999.266317][T29871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6306'. [ 999.307327][T29871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6306'. [ 999.525959][T29886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6311'. [ 999.589595][T27714] net_ratelimit: 13 callbacks suppressed [ 999.589616][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 999.729879][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 999.868271][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 999.999255][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1000.051772][T29914] tipc: Enabled bearer , priority 0 [ 1000.069040][T29914] syzkaller0: entered promiscuous mode [ 1000.074648][T29914] syzkaller0: entered allmulticast mode [ 1000.165095][T29914] tipc: Resetting bearer [ 1000.184386][T29913] tipc: Resetting bearer [ 1000.281373][T29913] tipc: Disabling bearer [ 1000.488759][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1000.497431][T29920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1000.566639][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6320'. [ 1000.638697][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1000.807417][T29931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1000.841009][T29927] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1000.908519][T27722] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1001.040515][T27716] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1001.168421][T27722] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1001.218989][T29945] netlink: 'syz.3.6327': attribute type 7 has an invalid length. [ 1001.227540][T29945] netlink: 'syz.3.6327': attribute type 7 has an invalid length. [ 1001.298380][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1001.886078][T29989] atomic_op ffff888045bae998 conn xmit_atomic 0000000000000000 [ 1002.988257][T30048] tipc: Failed to remove unknown binding: 66,1,1/0:50237180/50237182 [ 1003.022749][T30048] tipc: Failed to remove unknown binding: 66,1,1/0:50237180/50237182 [ 1003.031723][T30048] tipc: Failed to remove unknown binding: 66,1,1/0:50237180/50237182 [ 1003.303024][T30055] __nla_validate_parse: 4 callbacks suppressed [ 1003.303168][T30055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1003.338226][T30057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1003.372496][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1003.382714][T30060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1003.423694][T30057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1003.650340][T30061] syzkaller0: entered promiscuous mode [ 1003.652925][T30067] netlink: 'syz.1.6363': attribute type 1 has an invalid length. [ 1003.668443][T30061] syzkaller0: entered allmulticast mode [ 1003.817453][T30070] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1004.011882][T27712] gretap0: left allmulticast mode [ 1004.031878][T27712] gretap0: left promiscuous mode [ 1004.061859][T27712] bridge0: port 1(gretap0) entered disabled state [ 1004.106523][T27712] tipc: Resetting bearer [ 1004.258778][T27712] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1004.404805][T30099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1004.690721][T27712] tipc: Disabling bearer [ 1004.922292][T27712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.932537][T27712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.942598][T27712] bond0 (unregistering): (slave team0): Releasing backup interface [ 1004.951494][T27712] bond0 (unregistering): Released all slaves [ 1005.008284][T24468] Bluetooth: hci2: command tx timeout [ 1005.085057][T27712] bond1 (unregistering): Released all slaves [ 1005.097001][T27712] bond2 (unregistering): Released all slaves [ 1005.226647][T27712] bond3 (unregistering): Released all slaves [ 1005.370405][T24262] net_ratelimit: 18 callbacks suppressed [ 1005.370445][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1005.428110][T27712] : left promiscuous mode [ 1005.542524][T27712] tipc: Disabling bearer [ 1005.568834][T27712] tipc: Left network mode [ 1005.589630][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1005.641811][T30112] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 1005.702637][T30112] CPU: 1 UID: 0 PID: 30112 Comm: syz.1.6373 Not tainted syzkaller #0 PREEMPT(full) [ 1005.702663][T30112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.702674][T30112] Call Trace: [ 1005.702689][T30112] [ 1005.702698][T30112] dump_stack_lvl+0xe8/0x150 [ 1005.702726][T30112] sysfs_warn_dup+0x8e/0xa0 [ 1005.702746][T30112] sysfs_do_create_link_sd+0xc0/0x110 [ 1005.702766][T30112] device_add_class_symlinks+0x1cf/0x240 [ 1005.702789][T30112] device_add+0x475/0xb80 [ 1005.702809][T30112] wiphy_register+0x1d2e/0x2d20 [ 1005.702840][T30112] ? __pfx_wiphy_register+0x10/0x10 [ 1005.702857][T30112] ? __pfx_netdev_run_todo+0x10/0x10 [ 1005.702879][T30112] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1005.702908][T30112] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1005.702935][T30112] ieee80211_register_hw+0x34a7/0x4110 [ 1005.702975][T30112] ? ieee80211_register_hw+0x13e1/0x4110 [ 1005.703007][T30112] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1005.703048][T30112] ? __hrtimer_setup+0x181/0x200 [ 1005.703073][T30112] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1005.703098][T30112] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 1005.703150][T30112] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1005.703168][T30112] ? kstrndup+0xbf/0x160 [ 1005.703198][T30112] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1005.703226][T30112] ? __pfx___nla_validate_parse+0x10/0x10 [ 1005.703262][T30112] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1005.703289][T30112] ? rcu_is_watching+0x15/0xb0 [ 1005.703314][T30112] ? __nla_parse+0x40/0x60 [ 1005.703337][T30112] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1005.703367][T30112] genl_family_rcv_msg_doit+0x215/0x300 [ 1005.703394][T30112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1005.703428][T30112] ? bpf_lsm_capable+0x9/0x20 [ 1005.703447][T30112] ? security_capable+0x7e/0x2e0 [ 1005.703475][T30112] genl_rcv_msg+0x60e/0x790 [ 1005.703502][T30112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.703520][T30112] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1005.703554][T30112] netlink_rcv_skb+0x208/0x470 [ 1005.703580][T30112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.703601][T30112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.703621][T30112] ? genl_rcv+0x19/0x40 [ 1005.703661][T30112] ? down_read+0x274/0x2e0 [ 1005.703687][T30112] ? genl_rcv+0xd/0x40 [ 1005.703708][T30112] genl_rcv+0x28/0x40 [ 1005.703725][T30112] netlink_unicast+0x82f/0x9e0 [ 1005.703753][T30112] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.703775][T30112] ? netlink_sendmsg+0x642/0xb30 [ 1005.703793][T30112] ? skb_put+0x11b/0x210 [ 1005.703816][T30112] netlink_sendmsg+0x805/0xb30 [ 1005.703848][T30112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.703874][T30112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.703896][T30112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1005.703910][T30112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.703933][T30112] __sock_sendmsg+0x21c/0x270 [ 1005.703960][T30112] ____sys_sendmsg+0x505/0x820 [ 1005.703986][T30112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.704016][T30112] ? import_iovec+0x74/0xa0 [ 1005.704057][T30112] ___sys_sendmsg+0x21f/0x2a0 [ 1005.704078][T30112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.704104][T30112] ? futex_wake+0x4b2/0x560 [ 1005.704149][T30112] ? __fget_files+0x2a/0x420 [ 1005.704167][T30112] ? __fget_files+0x3a0/0x420 [ 1005.704196][T30112] __x64_sys_sendmsg+0x19b/0x260 [ 1005.704220][T30112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1005.704251][T30112] ? rcu_is_watching+0x15/0xb0 [ 1005.704283][T30112] do_syscall_64+0xec/0xf80 [ 1005.704301][T30112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.704316][T30112] ? trace_irq_disable+0x37/0x100 [ 1005.704337][T30112] ? clear_bhb_loop+0x60/0xb0 [ 1005.704358][T30112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.704374][T30112] RIP: 0033:0x7efe5378f749 [ 1005.704415][T30112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.704430][T30112] RSP: 002b:00007efe54674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.704447][T30112] RAX: ffffffffffffffda RBX: 00007efe539e5fa0 RCX: 00007efe5378f749 [ 1005.704457][T30112] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 1005.704466][T30112] RBP: 00007efe53813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1005.704477][T30112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.704487][T30112] R13: 00007efe539e6038 R14: 00007efe539e5fa0 R15: 00007fffc4cf3b98 [ 1005.704517][T30112] [ 1006.131896][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1006.248784][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1006.363100][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1006.508288][T19175] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1006.552426][T30133] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6376'. [ 1006.591978][T27712] IPVS: stopping backup sync thread 21316 ... [ 1006.716161][T30133] .70: renamed from hsr0 (while UP) [ 1006.734289][T30145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1006.756633][T30133] .70: entered allmulticast mode [ 1006.794931][T30133] hsr_slave_0: entered allmulticast mode [ 1006.825398][T30133] hsr_slave_1: entered allmulticast mode [ 1006.832852][T30133] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 1006.851437][T30145] netlink: 'syz.0.6380': attribute type 1 has an invalid length. [ 1006.989896][T27714] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1007.308243][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1007.491423][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1007.608998][T30176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1007.734926][T30184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1007.775023][T30184] netlink: 'syz.3.6388': attribute type 14 has an invalid length. [ 1007.837579][T30188] tipc: Enabled bearer , priority 0 [ 1007.902032][T30188] syzkaller0: entered promiscuous mode [ 1007.938784][T30188] syzkaller0: entered allmulticast mode [ 1008.080598][T30196] nbd: must specify at least one socket [ 1008.303061][T30200] netlink: 'syz.3.6392': attribute type 1 has an invalid length. [ 1008.348675][T27712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.764046][T27712] team0 (unregistering): Port device team_slave_1 removed [ 1009.813733][T27712] team0 (unregistering): Port device team_slave_0 removed [ 1010.176913][T30196] tipc: Resetting bearer [ 1010.261567][T30200] bond4: entered promiscuous mode [ 1010.267017][T30200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1010.334225][T30201] bond4: (slave veth3): making interface the new active one [ 1010.342271][T30201] veth3: entered promiscuous mode [ 1010.348848][T30201] bond4: (slave veth3): Enslaving as an active interface with an up link [ 1010.357600][T30187] tipc: Resetting bearer [ 1010.366483][T30207] __nla_validate_parse: 1 callbacks suppressed [ 1010.366500][T30207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6393'. [ 1010.397185][T30187] tipc: Disabling bearer [ 1010.415583][T22214] tipc: Node number set to 3672305813 [ 1010.427129][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6393'. [ 1010.469063][T30211] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6395'. [ 1010.469593][T30204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6393'. [ 1010.547205][T30207] bridge0: port 3(vlan2) entered blocking state [ 1010.578589][T30207] bridge0: port 3(vlan2) entered disabled state [ 1010.585103][T30207] vlan2: entered allmulticast mode [ 1010.601420][T30207] gretap0: entered allmulticast mode [ 1010.640703][T30207] vlan2: entered promiscuous mode [ 1010.645784][T30207] gretap0: entered promiscuous mode [ 1010.664942][T30207] bridge0: port 3(vlan2) entered blocking state [ 1010.671403][T30207] bridge0: port 3(vlan2) entered forwarding state [ 1010.708647][ T6011] net_ratelimit: 2 callbacks suppressed [ 1010.708668][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1010.756461][T30221] syzkaller0: entered promiscuous mode [ 1010.762133][T30221] syzkaller0: entered allmulticast mode [ 1010.828840][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1010.933378][T30229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6400'. [ 1010.950451][T27712] IPVS: stop unused estimator thread 0... [ 1010.960709][T30230] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1010.969817][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1011.008274][T30230] 0{X: renamed from gretap0 [ 1011.022611][T30230] 0{X: entered allmulticast mode [ 1011.050594][T30230] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1011.168510][T30239] netlink: 'syz.3.6403': attribute type 39 has an invalid length. [ 1011.192432][T30236] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1011.227657][T30240] syzkaller0: entered promiscuous mode [ 1011.234975][T30240] syzkaller0: entered allmulticast mode [ 1011.253433][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1011.403506][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1011.589219][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1011.697665][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6410'. [ 1011.758160][ T6011] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1011.778814][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6410'. [ 1011.944724][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1012.501615][T30290] sctp: [Deprecated]: syz.4.6416 (pid 30290) Use of int in max_burst socket option. [ 1012.501615][T30290] Use struct sctp_assoc_value instead [ 1012.550239][T30295] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1012.566138][T30295] .70: renamed from hsr0 [ 1012.580021][T30295] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1012.591080][T30295] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1012.607138][T30295] .70: entered allmulticast mode [ 1012.615886][T30295] hsr_slave_0: entered allmulticast mode [ 1012.638824][T30295] hsr_slave_1: entered allmulticast mode [ 1012.649676][T30295] 8021q: adding VLAN 0 to HW filter on device .70 [ 1012.657333][T30295] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 1012.829061][T30304] netlink: 'syz.3.6420': attribute type 2 has an invalid length. [ 1012.836966][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6420'. [ 1013.026303][T30311] syzkaller0: entered promiscuous mode [ 1013.032866][T30311] syzkaller0: entered allmulticast mode [ 1013.297299][T30326] netlink: 'syz.4.6427': attribute type 1 has an invalid length. [ 1013.365396][T30328] netlink: 'syz.4.6427': attribute type 6 has an invalid length. [ 1013.489639][T30332] macvtap1: entered allmulticast mode [ 1013.498559][T30332] veth0_macvtap: entered allmulticast mode [ 1013.706236][T30341] netlink: 'syz.3.6432': attribute type 1 has an invalid length. [ 1013.864972][T30357] bridge_slave_1: left allmulticast mode [ 1013.871888][T30357] bridge_slave_1: left promiscuous mode [ 1013.888536][T30357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.951460][T30357] tipc: Enabling of bearer rejected, failed to enable media [ 1014.028534][T29121] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1014.348409][T29121] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1014.828492][T30374] netlink: 'syz.3.6441': attribute type 1 has an invalid length. [ 1016.122975][T27712] net_ratelimit: 13 callbacks suppressed [ 1016.122999][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.278963][T30388] __nla_validate_parse: 9 callbacks suppressed [ 1016.278983][T30388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1016.294941][T30383] macvtap1: entered allmulticast mode [ 1016.300851][T30383] veth0_macvtap: entered allmulticast mode [ 1016.318120][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.383445][T30390] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1016.445001][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.578580][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.623421][T30403] x_tables: duplicate underflow at hook 3 [ 1016.654504][T30404] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 1016.688134][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.757596][T30408] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20000 [ 1016.818179][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1016.939810][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1017.086046][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1017.289246][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1017.398285][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1017.484600][T30438] bond6: entered promiscuous mode [ 1017.494456][T30438] bond6: entered allmulticast mode [ 1017.500289][T30438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1017.725793][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6462'. [ 1017.839610][T30446] netlink: 'syz.1.6465': attribute type 39 has an invalid length. [ 1018.142884][T30467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1018.192892][T30467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1018.251254][T30472] bond1: entered promiscuous mode [ 1018.257297][T30472] bond1: entered allmulticast mode [ 1018.264484][T30472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.274022][T30476] wg1: entered promiscuous mode [ 1018.279478][T30476] wg1: entered allmulticast mode [ 1018.647697][T30490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1018.735604][T30498] xt_policy: too many policy elements [ 1018.863129][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1018.899380][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1019.121092][T30517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1019.196857][T30523] syzkaller1: entered promiscuous mode [ 1019.206967][T30523] syzkaller1: entered allmulticast mode [ 1019.622068][T30535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1019.720130][T30537] netlink: 'syz.4.6490': attribute type 5 has an invalid length. [ 1021.203107][T30572] netlink: 'syz.4.6500': attribute type 11 has an invalid length. [ 1023.438478][T27716] net_ratelimit: 20 callbacks suppressed [ 1023.438499][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1023.598632][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1023.708239][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1023.820473][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1023.870090][T30610] __nla_validate_parse: 3 callbacks suppressed [ 1023.870108][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1023.935738][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1024.052422][T30616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1024.061911][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1024.170001][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1024.319809][T30628] openvswitch: netlink: IP tunnel dst address not specified [ 1024.359568][T27716] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1024.470980][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1024.586141][T30644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1024.626422][T30644] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1024.682616][T30646] netlink: 'syz.4.6516': attribute type 1 has an invalid length. [ 1024.805497][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1024.854174][T30646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.943863][T30650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.953033][T30650] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1024.978494][T30650] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1025.011632][T30664] digital: digital_start_poll: Unknown protocol [ 1025.033190][T30664] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1025.184763][T30654] veth3: entered promiscuous mode [ 1025.281340][T30654] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1025.369443][T30677] syzkaller1: entered promiscuous mode [ 1025.374994][T30677] syzkaller1: entered allmulticast mode [ 1025.644363][T30689] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1026.536981][T30718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1026.548433][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1026.560105][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1026.800369][T30725] sctp: [Deprecated]: syz.1.6537 (pid 30725) Use of int in max_burst socket option deprecated. [ 1026.800369][T30725] Use struct sctp_assoc_value instead [ 1027.161094][T30737] netlink: 'syz.0.6541': attribute type 3 has an invalid length. [ 1027.269630][T30741] syzkaller0: entered promiscuous mode [ 1027.275389][T30741] syzkaller0: entered allmulticast mode [ 1027.285676][T30741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1027.296208][T30741] chnl_net:caif_netlink_parms(): no params data found [ 1027.840659][T30782] netlink: 'syz.1.6554': attribute type 1 has an invalid length. [ 1028.362941][T30794] netlink: 'syz.0.6558': attribute type 9 has an invalid length. [ 1028.421207][T30796] netlink: 'syz.0.6559': attribute type 1 has an invalid length. [ 1028.475346][T30796] bond2: (slave geneve2): making interface the new active one [ 1028.489610][T30796] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1028.498519][T27717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1028.507947][T27717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1028.518100][T27717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1028.527095][T27717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1028.548282][T27717] net_ratelimit: 26 callbacks suppressed [ 1028.548300][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1028.590518][T30804] veth1: entered promiscuous mode [ 1028.648392][T30804] vlan2: entered promiscuous mode [ 1028.728498][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1028.823552][T30818] syzkaller0: left promiscuous mode [ 1028.831768][T30818] syzkaller0: left allmulticast mode [ 1028.868628][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1028.961467][T30825] __nla_validate_parse: 4 callbacks suppressed [ 1028.961486][T30825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1029.041162][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1029.160110][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1029.282889][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1029.298590][T30837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1029.320216][T30840] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1029.408284][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1029.538786][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1029.642587][T19170] Bluetooth: hci2: command 0x0405 tx timeout [ 1029.670398][T30854] tipc: Enabling of bearer rejected, media not registered [ 1029.967244][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1029.978697][T30869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6579'. [ 1030.044678][T30869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6579'. [ 1030.870266][T30875] sctp: [Deprecated]: syz.1.6578 (pid 30875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1030.870266][T30875] Use struct sctp_sack_info instead [ 1030.902822][T30882] netlink: 'syz.4.6582': attribute type 1 has an invalid length. [ 1031.092106][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1031.101433][T30882] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1031.140058][T30882] bond3 (unregistering): Released all slaves [ 1031.485979][T30880] syzkaller0: Caught tx_queue_len zero misconfig [ 1031.602029][T30902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 1032.009776][T30907] veth0_macvtap: left allmulticast mode [ 1032.019102][T27718] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.032018][T27718] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.078580][T27718] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.087613][T27718] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.148511][T30909] netlink: 'syz.0.6589': attribute type 10 has an invalid length. [ 1032.168542][T30909] hsr0: entered promiscuous mode [ 1032.188296][T30909] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1032.218635][T30909] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1032.231662][T30909] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1032.275063][T30894] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1032.644538][T30910] lo speed is unknown, defaulting to 1000 [ 1032.658700][T30910] lo speed is unknown, defaulting to 1000 [ 1032.699136][T30910] lo speed is unknown, defaulting to 1000 [ 1032.735111][T30910] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1032.841634][T30910] lo speed is unknown, defaulting to 1000 [ 1032.879603][T30910] lo speed is unknown, defaulting to 1000 [ 1032.899157][T30910] lo speed is unknown, defaulting to 1000 [ 1032.944179][T30910] lo speed is unknown, defaulting to 1000 [ 1032.985269][T30910] lo speed is unknown, defaulting to 1000 [ 1033.017578][T30910] lo speed is unknown, defaulting to 1000 [ 1033.074685][T30910] lo speed is unknown, defaulting to 1000 [ 1033.323973][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1033.340173][T30930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1033.618136][T27723] net_ratelimit: 27 callbacks suppressed [ 1033.618153][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1033.738207][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1033.848329][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1033.968422][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.078192][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.188366][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.298152][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.408256][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.519094][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1034.628217][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1038.728173][T27713] net_ratelimit: 36 callbacks suppressed [ 1038.728194][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1038.848215][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1038.968382][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.079610][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.188270][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.298330][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.408166][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.518207][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.628226][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1039.738355][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1043.838274][T27712] net_ratelimit: 36 callbacks suppressed [ 1043.838295][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1043.958327][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.068284][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.178245][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.288264][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.398389][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.508310][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.618229][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.728335][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1044.839200][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1048.928170][T27723] net_ratelimit: 36 callbacks suppressed [ 1048.928189][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.048241][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.158364][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.268387][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.378131][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.488638][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.598162][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.708197][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.818380][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1049.928273][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1051.398209][T19170] Bluetooth: hci4: command 0x0405 tx timeout [ 1054.008269][T27717] net_ratelimit: 36 callbacks suppressed [ 1054.008331][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.129374][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.238373][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.358222][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.468249][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.578394][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.688326][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.798294][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1054.908475][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1055.018295][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1056.518214][T24468] Bluetooth: hci1: command 0x0406 tx timeout [ 1059.118250][T27723] net_ratelimit: 36 callbacks suppressed [ 1059.118266][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.238284][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.348242][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.458205][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.568194][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.678362][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.788277][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1059.898250][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1060.008385][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1060.118269][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.228327][T27712] net_ratelimit: 36 callbacks suppressed [ 1064.228347][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.348219][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.458291][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.568227][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.679791][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.788182][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1064.908630][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1065.018390][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1065.128287][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1065.238787][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.318224][T27723] net_ratelimit: 36 callbacks suppressed [ 1069.318245][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.438296][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.548344][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.658534][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.768258][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.878711][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1069.988498][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1070.098322][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1070.208475][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1070.318442][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.428381][T27713] net_ratelimit: 36 callbacks suppressed [ 1074.428403][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.548302][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.658301][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.768223][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.878384][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1074.988303][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1075.098407][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1075.208266][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1075.319843][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1075.428468][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1076.998517][T24468] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.508322][T27717] net_ratelimit: 36 callbacks suppressed [ 1079.508345][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1079.628204][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1079.738199][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1079.848329][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1079.958398][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1080.068255][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1080.178191][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1080.288171][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1080.398186][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1080.508188][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1084.578491][T27717] net_ratelimit: 36 callbacks suppressed [ 1084.578510][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1084.708382][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1084.818297][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1084.938318][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.048401][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.162454][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.278267][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.388385][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.498289][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1085.608318][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1087.238559][T24468] Bluetooth: hci5: command 0x0406 tx timeout [ 1089.598375][T27723] net_ratelimit: 35 callbacks suppressed [ 1089.598396][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1089.728233][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1089.838222][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1089.948257][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.058333][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.168182][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.282262][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.398397][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.508261][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1090.618200][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1094.608452][T27712] net_ratelimit: 35 callbacks suppressed [ 1094.608474][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1094.728306][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1094.838353][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1094.948294][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.058314][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.168277][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.278480][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.388236][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.498349][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1095.608266][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1099.678215][T27718] net_ratelimit: 36 callbacks suppressed [ 1099.678236][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1099.798520][T27723] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1099.908357][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.018157][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.128236][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.238238][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.348201][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.458164][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1100.567069][T27710] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1100.586691][T27710] bond7 (unregistering): (slave ip6gretap3): Releasing backup interface [ 1100.734255][T27710] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1100.743432][T27710] gretap1 (unregistering): left allmulticast mode [ 1100.762262][T27710] bond9 (unregistering): (slave gretap2): Releasing active interface [ 1100.770810][T27710] gretap2 (unregistering): left allmulticast mode [ 1100.840067][T27710] batman_adv: batadv0: Removing interface: geneve2 [ 1101.161137][T27710] team0: Port device bridge6 removed [ 1101.253339][T27710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.263293][T27710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.272624][T27710] bond0 (unregistering): Released all slaves [ 1101.394861][T27710] bond1 (unregistering): Released all slaves [ 1101.513411][T27710] bond2 (unregistering): Released all slaves [ 1101.525748][T27710] bond3 (unregistering): Released all slaves [ 1101.647107][T27710] bond4 (unregistering): Released all slaves [ 1101.763620][T27710] bond5 (unregistering): Released all slaves [ 1101.882110][T27710] bond6 (unregistering): Released all slaves [ 1101.999198][T27710] bond7 (unregistering): Released all slaves [ 1102.120586][T27710] bond8 (unregistering): Released all slaves [ 1102.242463][T27710] bond9 (unregistering): Released all slaves [ 1102.365121][T27710] bond10 (unregistering): Released all slaves [ 1102.378289][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1102.491652][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1102.517713][T27710] : left promiscuous mode [ 1102.589119][T27710] : left promiscuous mode [ 1102.648219][T27710] tipc: Left network mode [ 1102.695361][T27710] IPVS: stopping backup sync thread 21864 ... [ 1103.138403][T27710] hsr_slave_0: left promiscuous mode [ 1103.144333][T27710] hsr_slave_1: left promiscuous mode [ 1103.151164][T27710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.159468][T27710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.167061][T27710] batman_adv: batadv0: Removing interface: dummy0 [ 1103.500976][T27710] team0 (unregistering): Port device team_slave_1 removed [ 1103.547034][T27710] team0 (unregistering): Port device C removed [ 1104.099012][T27710] IPVS: stop unused estimator thread 0... [ 1104.778257][T27710] net_ratelimit: 13 callbacks suppressed [ 1104.778278][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1104.898256][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.008154][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.118189][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.228213][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.338170][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.458183][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.568160][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.678281][T27713] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1105.788199][T24262] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1107.572712][T30945] netlink: 'syz.3.6597': attribute type 1 has an invalid length. [ 1107.584483][T30945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6597'. [ 1107.594096][T30945] NCSI netlink: No device for ifindex 0 [ 1107.685137][T30952] sctp: [Deprecated]: syz.2.6596 (pid 30952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.685137][T30952] Use struct sctp_sack_info instead [ 1108.167597][T30972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1108.191602][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1108.277084][T30972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1108.531903][T30990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6610'. [ 1108.557712][T30988] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1108.579752][T30988] syzkaller1: linktype set to 773 [ 1108.603476][T30988] netlink: 'syz.0.6609': attribute type 4 has an invalid length. [ 1108.620737][T30988] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1109.159977][T31006] IPVS: Unknown mcast interface: veth0_vlan [ 1109.175585][T31009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1109.510781][T31017] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1109.604304][T31031] netlink: 'syz.3.6618': attribute type 1 has an invalid length. [ 1109.640015][T31031] netlink: 'syz.3.6618': attribute type 1 has an invalid length. [ 1109.683991][T31031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1109.838133][T27718] net_ratelimit: 32 callbacks suppressed [ 1109.838151][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1109.860640][T31039] syzkaller0: entered promiscuous mode [ 1109.866251][T31039] syzkaller0: entered allmulticast mode [ 1110.184085][T31044] wg1: entered promiscuous mode [ 1110.189270][T31044] wg1: entered allmulticast mode [ 1110.258319][T27718] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1110.315764][T31049] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1110.346934][T28030] IPVS: starting estimator thread 0... [ 1110.368416][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1110.459007][T31050] IPVS: using max 32 ests per chain, 76800 per kthread [ 1110.549276][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1110.709814][T31057] macsec2: entered promiscuous mode [ 1110.723300][T31057] macsec2: entered allmulticast mode [ 1110.788149][T27712] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1110.898402][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1111.009459][T27711] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1111.017563][T31077] netlink: 'syz.3.6632': attribute type 39 has an invalid length. [ 1111.094472][T31079] syzkaller0: entered promiscuous mode [ 1111.104205][T31079] syzkaller0: entered allmulticast mode [ 1111.128833][T31079] netlink: 'syz.2.6634': attribute type 1 has an invalid length. [ 1111.285871][T31087] nbd: couldn't find a device at index 65546 [ 1112.992208][T31110] __nla_validate_parse: 9 callbacks suppressed [ 1112.992227][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6643'. [ 1113.008296][T31110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6643'. [ 1113.117702][T19170] Bluetooth: hci2: link tx timeout [ 1113.124763][T19170] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1113.755855][T31083] lo speed is unknown, defaulting to 1000 [ 1113.762190][T27717] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1113.770150][T31083] lo speed is unknown, defaulting to 1000 [ 1113.789413][T31083] lo speed is unknown, defaulting to 1000 [ 1113.826759][T31083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1113.878907][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1113.899689][T31083] lo speed is unknown, defaulting to 1000 [ 1113.945416][T31083] lo speed is unknown, defaulting to 1000 [ 1113.958833][T31131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6650'. [ 1113.977778][T31083] lo speed is unknown, defaulting to 1000 [ 1113.988147][T27710] bond13: (slave ip6gretap1): failed to get link speed/duplex [ 1114.008891][T31083] lo speed is unknown, defaulting to 1000 [ 1114.024177][T31083] lo speed is unknown, defaulting to 1000 [ 1114.044568][T31083] lo speed is unknown, defaulting to 1000 [ 1114.178547][T19170] Bluetooth: hci2: link tx timeout [ 1114.184071][T19170] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1114.222198][T31150] netlink: 'syz.4.6654': attribute type 1 has an invalid length. [ 1114.301846][T22176] IPVS: starting estimator thread 0... [ 1114.398115][T31151] IPVS: using max 25 ests per chain, 60000 per kthread [ 1114.702259][T31159] netlink: 'syz.0.6658': attribute type 2 has an invalid length. [ 1121.000339][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1129.800830][T27432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1129.810290][T27432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1129.819742][T27432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1129.827648][T27432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1129.835435][T27432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1130.021662][T19170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1130.031184][T19170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1130.043541][T19170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1130.051499][T19170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1130.061214][T19170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1130.295976][T19170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1130.309011][T19170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1130.317461][T19170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1130.326416][T19170] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1130.336027][T19170] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1130.517400][T27432] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1130.531181][T27432] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1130.540877][T27432] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1130.548913][T27432] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1130.556507][T27432] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1130.721794][T19170] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1130.731389][T19170] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1130.740541][T19170] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1130.751403][T19170] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1130.761829][T19170] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1131.878217][T19170] Bluetooth: hci0: command tx timeout [ 1132.118372][T19170] Bluetooth: hci6: command tx timeout [ 1132.358223][T19170] Bluetooth: hci7: command tx timeout [ 1132.598233][T19170] Bluetooth: hci8: command tx timeout [ 1132.838365][T19170] Bluetooth: hci9: command tx timeout [ 1133.958228][T19170] Bluetooth: hci0: command tx timeout [ 1134.198296][T19170] Bluetooth: hci6: command tx timeout [ 1134.438210][T19170] Bluetooth: hci7: command tx timeout [ 1134.678222][T19170] Bluetooth: hci8: command tx timeout [ 1134.918193][T19170] Bluetooth: hci9: command tx timeout [ 1136.039019][T19170] Bluetooth: hci0: command tx timeout [ 1136.278301][T19170] Bluetooth: hci6: command tx timeout [ 1136.518127][T19170] Bluetooth: hci7: command tx timeout [ 1136.758186][T19170] Bluetooth: hci8: command tx timeout [ 1136.998176][T19170] Bluetooth: hci9: command tx timeout [ 1138.118305][T19170] Bluetooth: hci0: command tx timeout [ 1138.358276][T19170] Bluetooth: hci6: command tx timeout [ 1138.598119][T19170] Bluetooth: hci7: command tx timeout [ 1138.838264][T19170] Bluetooth: hci8: command tx timeout [ 1139.078088][T19170] Bluetooth: hci9: command tx timeout [ 1189.819206][T27432] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1189.829763][T27432] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1189.838181][T27432] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1189.850427][T27432] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1189.858231][T27432] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1190.989131][T27432] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1191.001342][T27432] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1191.011109][T27432] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1191.019193][T27432] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1191.026924][T27432] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1191.097755][T19170] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1191.109313][T19170] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1191.117759][T19170] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1191.125917][T19170] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1191.133736][T19170] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1191.335755][T27432] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1191.346037][T27432] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1191.354489][T27432] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1191.363235][T27432] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1191.372944][T27432] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1191.526682][T19170] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1191.537611][T19170] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1191.546229][T19170] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1191.555447][T19170] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1191.563447][T19170] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1191.878311][T27432] Bluetooth: hci10: command tx timeout [ 1193.078203][T27432] Bluetooth: hci11: command tx timeout [ 1193.158121][T27432] Bluetooth: hci12: command tx timeout [ 1193.398130][T27432] Bluetooth: hci13: command tx timeout [ 1193.638113][T27432] Bluetooth: hci14: command tx timeout [ 1193.958179][T27432] Bluetooth: hci10: command tx timeout [ 1195.158126][T27432] Bluetooth: hci11: command tx timeout [ 1195.238270][T27432] Bluetooth: hci12: command tx timeout [ 1195.478135][T27432] Bluetooth: hci13: command tx timeout [ 1195.718113][T27432] Bluetooth: hci14: command tx timeout [ 1196.038189][T27432] Bluetooth: hci10: command tx timeout [ 1197.238096][T27432] Bluetooth: hci11: command tx timeout [ 1197.318201][T27432] Bluetooth: hci12: command tx timeout [ 1197.558120][T27432] Bluetooth: hci13: command tx timeout [ 1197.799543][T27432] Bluetooth: hci14: command tx timeout [ 1198.118216][T27432] Bluetooth: hci10: command tx timeout [ 1199.318137][T27432] Bluetooth: hci11: command tx timeout [ 1199.398117][T27432] Bluetooth: hci12: command tx timeout [ 1199.638291][T27432] Bluetooth: hci13: command tx timeout [ 1199.878136][T27432] Bluetooth: hci14: command tx timeout [ 1219.197946][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1219.204591][ C0] rcu: 0-....: (10500 ticks this GP) idle=9894/1/0x4000000000000000 softirq=262667/262669 fqs=5243 [ 1219.216569][ C0] rcu: hardirqs softirqs csw/system [ 1219.222977][ C0] rcu: number: 8453 0 0 [ 1219.229381][ C0] rcu: cputime: 138 52351 3 ==> 52520(ms) [ 1219.237179][ C0] rcu: (t=10504 jiffies g=174949 q=2769 ncpus=2) [ 1219.243588][ C0] CPU: 0 UID: 0 PID: 29508 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1219.243616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1219.243632][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x70 [ 1219.243655][ C0] Code: 8b 04 24 65 48 8b 0c 25 08 40 80 92 65 8b 15 68 47 bf 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 <74> 2c 8b 91 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b [ 1219.243667][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 1219.243680][ C0] RAX: ffffffff8970d08e RBX: ffff88804c9c9800 RCX: ffff88803ef03d00 [ 1219.243690][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88804c9c9800 [ 1219.243699][ C0] RBP: ffff8880202fa000 R08: ffffffff89702086 R09: ffffffff8df41aa0 [ 1219.243710][ C0] R10: 0000000000000001 R11: ffffffff89634ae0 R12: dffffc0000000000 [ 1219.243719][ C0] R13: ffff888058b94000 R14: ffff88804c9c9800 R15: ffffffff8f82b538 [ 1219.243729][ C0] FS: 000055555af4c500(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 1219.243740][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.243749][ C0] CR2: 00002000000017e0 CR3: 0000000049684000 CR4: 00000000003526f0 [ 1219.243762][ C0] Call Trace: [ 1219.243768][ C0] [ 1219.243774][ C0] taprio_dequeue_from_txq+0x48e/0x980 [ 1219.243795][ C0] ? taprio_dequeue+0x26/0x550 [ 1219.243817][ C0] taprio_dequeue_tc_priority+0x1ac/0x750 [ 1219.243844][ C0] ? taprio_dequeue+0x26/0x550 [ 1219.243862][ C0] taprio_dequeue+0x186/0x550 [ 1219.243882][ C0] __qdisc_run+0x23f/0x1510 [ 1219.243912][ C0] qdisc_run+0xc7/0x300 [ 1219.243926][ C0] ? net_tx_action+0x58c/0x900 [ 1219.243940][ C0] net_tx_action+0x717/0x900 [ 1219.243957][ C0] handle_softirqs+0x22b/0x7c0 [ 1219.243973][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1219.243992][ C0] __irq_exit_rcu+0x60/0x150 [ 1219.244005][ C0] irq_exit_rcu+0x9/0x30 [ 1219.244016][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1219.244032][ C0] [ 1219.244037][ C0] [ 1219.244043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1219.244056][ C0] RIP: 0010:__page_table_check_ptes_set+0xb/0x330 [ 1219.244071][ C0] Code: c3 cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 18 89 cd 49 89 d5 49 89 f6 49 89 ff e8 0e 4a 8e [ 1219.244081][ C0] RSP: 0018:ffffc9000ce2f3b8 EFLAGS: 00000293 [ 1219.244098][ C0] RAX: ffffffff820eedff RBX: 8000000158dad007 RCX: 0000000000000001 [ 1219.244107][ C0] RDX: 8000000158dad007 RSI: ffff8880b29e2d50 RDI: ffff88807def0000 [ 1219.244117][ C0] RBP: ffffc9000ce2f670 R08: ffffea0005636b47 R09: 1ffffd4000ac6d68 [ 1219.244127][ C0] R10: dffffc0000000000 R11: fffff94000ac6d69 R12: dffffc0000000000 [ 1219.244137][ C0] R13: ffff88803a2e7d50 R14: ffff88807def0000 R15: ffff8880b29e2d50 [ 1219.244153][ C0] ? copy_pmd_range+0x4cef/0x7e00 [ 1219.244180][ C0] copy_pmd_range+0x4d02/0x7e00 [ 1219.244197][ C0] ? arch_stack_walk+0xfc/0x150 [ 1219.244221][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1219.244247][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1219.244263][ C0] ? copy_mm+0x13c/0x4b0 [ 1219.244275][ C0] ? copy_process+0x165d/0x3950 [ 1219.244287][ C0] ? kernel_clone+0x21e/0x820 [ 1219.244304][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1219.244321][ C0] ? mas_wr_store_type+0xcc2/0x19d0 [ 1219.244341][ C0] copy_page_range+0xb88/0x11d0 [ 1219.244370][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1219.244391][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1219.244409][ C0] dup_mmap+0xf4a/0x1b80 [ 1219.244435][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1219.244447][ C0] ? copy_mm+0x131/0x4b0 [ 1219.244474][ C0] copy_mm+0x13c/0x4b0 [ 1219.244490][ C0] copy_process+0x165d/0x3950 [ 1219.244513][ C0] ? copy_process+0x915/0x3950 [ 1219.244533][ C0] ? __pfx_copy_process+0x10/0x10 [ 1219.244548][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1219.244571][ C0] kernel_clone+0x21e/0x820 [ 1219.244590][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1219.244618][ C0] __x64_sys_clone+0x18b/0x1e0 [ 1219.244636][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1219.244663][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 1219.244684][ C0] do_syscall_64+0xec/0xf80 [ 1219.244699][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.244711][ C0] ? trace_irq_disable+0x37/0x100 [ 1219.244727][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1219.244742][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.244755][ C0] RIP: 0033:0x7fd1ba785e93 [ 1219.244768][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1219.244778][ C0] RSP: 002b:00007ffd0e2aa988 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1219.244791][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1ba785e93 [ 1219.244801][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1219.244809][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1219.244816][ C0] R10: 000055555af4c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1219.244825][ C0] R13: 00000000000927c0 R14: 000000000010ffd2 R15: 00007ffd0e2aab20 [ 1219.244848][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1220.745468][ C0] sched: DL replenish lagged too much