last executing test programs: 6.679179224s ago: executing program 0 (id=4564): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40000102) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2000}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 5.787315885s ago: executing program 0 (id=4571): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800210000000000000000000000fffffffffffffff700009500000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0xd, 0x40, 0x0, 0x11, 0x0, 0xee01}, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x6e6bb6}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000001d850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000200), &(0x7f00000003c0)=r4}, 0x20) getsockopt(r2, 0x1, 0x6, 0x0, &(0x7f00000008c0)) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r10, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r14, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080003000f00000008000b0000000000"], 0x34}}, 0x0) 4.344110713s ago: executing program 0 (id=4579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b707, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r2, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"/286], &(0x7f0000000140)=""/7, 0x11e, 0x7, 0x1, 0x8000, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r3, 0x20, &(0x7f0000000680)={&(0x7f0000000600)=""/116, 0x74, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x51, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x101110, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x3fcb7000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000080), 0x4) syz_emit_ethernet(0xae, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000783a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d000011000000000000000000000000000000000100000000000000000000000000000000870005196800000000060000000000000502000001060000000000000022a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009253149d8e90d3726abcb96e519004010c0000000000315a169136e305fea34c620dda6507e53ac942f6f0ef6a27784c1ad88513d08aa8215d0c306c76a6bdad827711260b1f65eb45a8e6bea7ae2e4d7c127acbe1094462dc1b107060da6ce0db01c893b0d2dbe95d3d46453ec1ddc516ae527f8383a0a886ad63b37aa67e567902cf3b52c1bc59097aa80fdc1f5887622568f06843a7f32c54c85335f657ea8e0de98f75dd65cb9a243d9ddcb2c7b9c5531e2b"], 0x0) 4.263765117s ago: executing program 1 (id=4580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x4c}}, 0x2000a100) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x2000033f) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.0847612s ago: executing program 2 (id=4582): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) close(0x4) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="07d140031d32190e3377c3a20d42d4c776ecf61035aa3eb8d0bdded134ab5f8e929c82f89830c47c5303c976efba3808e52cc767f5e73fdce27f6ab88ab4bbed1120e2d12352ab0d8bf3e690f8b195dea4c20c648b5a372f30a6146cbd76086c8e8b00fc1d3f8cf0cbd311c258fb72e058fd8262137545d0724ca20e4e4d8435ca20d6e3221019d56ae4de43496bc266a131e97d3cce39bd196c0e7a703e20e35327f31d9d634fd05b1b79144e3da7053513b2a866d5f1f778d3ee26ae4d66cdb3f315cc676ca5d88fad1f4e", 0xcc}, {&(0x7f0000000480)="eaee1c8f164117c51a27feadcf2cb9716a47453d2345098df1812a206ac52e76dd47397832dcff2c5baaaeaf43d90c8f0d23b196050469e01dd31509180c9d1287eadc747396fdbe555762eef851f6b03858282c7ddcbe36646ed9fc5c5e8a904a9fb9f8cdfe46ab74e6303901df40e263b3e7b00497d8fd1cafd3b89cf69d7274dd62486c30d168b4cb2e8e7392", 0x8e}], 0x2, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0xc, [{@multicast2, 0x926}]}, @ra={0x94, 0x4}, @noop]}}}], 0x40}, 0x4000000) 3.978883982s ago: executing program 0 (id=4585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000500000004000000dd0a000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) 3.923819687s ago: executing program 1 (id=4586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x5) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001840)=ANY=[@ANYBLOB="009ca235f700000000000000000000000000000002000000"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) close(r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde2}}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000340)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r6, &(0x7f0000000040)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x1, {0x6, 0x1}}, 0x5) write$nci(r6, 0x0, 0x7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a030000000000000000000700000009"], 0xec}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x6f}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 3.780489535s ago: executing program 2 (id=4587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000e00)=@phonet={0x23, 0x8, 0x4, 0x2}, 0x80, 0x0}}], 0x4, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = accept4$unix(r2, &(0x7f0000000480)=@abs, &(0x7f0000000280)=0x6e, 0x800) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/254, 0xfe}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/214, 0xd6}], 0x6, &(0x7f0000000ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x12001) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="119cff7a6ce126479e48181f22d8bcdd", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {0x80, 0x14, 0x80, 0x3, 0x0, 0x2, 0xff, 0x9}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040054}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @local}, 0x1c) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r11, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 3.778785791s ago: executing program 0 (id=4589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r1}, 0x38) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r3], 0x34}}, 0x48044) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x68, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x12}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f00000002c0)="5acd292fa11464d236a2f4d9eefee5f14572c49edf5a97d2cd1eec7460a7fe0f25683be0e7264d84f28a2ff938d39599c17c2a0aef72c2a761ca2473b8675e1d932f907502d92988982b9f77bef74b0ad4c4", &(0x7f0000000340)=""/240, 0x4}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xcc, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xcc}}, 0x0) 3.706180212s ago: executing program 3 (id=4590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x6, 0x8, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0xfffffffffffffed5, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xe0, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffc7111ec}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd85}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc4d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1400000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x34, 0xc, "4d71a451039d664b9ab25dbc8a3778bc1e2bc11a8526ccac7ba88e740d77c9320f7fa844226230893d33839d8833492c"}, @NFTA_CHAIN_COUNTERS={0x1c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1c8}}, 0x0) 3.63981852s ago: executing program 4 (id=4591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="811000f1000000029500405ea613af00000000000200000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x931, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xb}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x29, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.543781445s ago: executing program 3 (id=4592): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0x9, 0xfffff800}, {0x4, 0xffffff9d, 0xfffffffd}, {0xd, 0xf, 0xb4b2}, {0x6, 0x8, 0xb79}, {0x8000000b, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r2}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x4040080) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) 3.327806191s ago: executing program 4 (id=4593): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x7fffffff, 0xffff, {{0x12, 0x4, 0x3, 0x19, 0x48, 0x64, 0x0, 0x6, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0xa, [{@local, 0x9}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x58, [@multicast1, @remote, @remote, @private=0xa010102, @remote, @broadcast]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xfff1}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x64, 0xb, 0x6}]}}]}, 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) (async) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x24}}, 0x0) 774.813239ms ago: executing program 2 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000db8d7a7a04000100000a1400000002000000000000000002200000000e0a01080000000040000000eb52fa8b5e4b365e73797a3100000000140000001120010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x1, 0x3}, 0x6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={0x0, 0x5fe}, &(0x7f0000000540)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={0x0, 0x5fe}, &(0x7f0000000540)=0x8) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xf}, {0xb, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3d}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x6, 0x0, &(0x7f0000000080)) socket(0x10, 0x2, 0x1) (async) r10 = socket(0x10, 0x2, 0x1) write(r10, &(0x7f00000002c0)="fc0000001a000708ab09250009a3330081ab0700a90100001d6051930800018000000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300050000006c884000d09165d52495115ef5a46bd1ad140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f702e2f4aa656d0448c22b7c59159ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f05731d05b0310b0041f2", 0xfc) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) setsockopt$RDS_RECVERR(r11, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002400000000008890780000000000000000000000000008030002000000000000009e5a85acb454b595c25449345cbbd73b4dd010450d13428990071e5db15dc83a1263f09e4e2da704da"], 0x0) 686.302114ms ago: executing program 4 (id=4595): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async, rerun: 32) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async, rerun: 32) accept4(r0, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) 685.103592ms ago: executing program 1 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@private, @empty, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x65, 0x10, 0x503, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x20000, 0x6230}, [@IFLA_LINKINFO={0x6f, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 684.392306ms ago: executing program 0 (id=4597): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) (async) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x400d4) 595.255168ms ago: executing program 3 (id=4598): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x60240, &(0x7f00000000c0)={@align=0x9cab, {0x1, 0x85, 0x0, 0x549}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000280), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 493.774919ms ago: executing program 1 (id=4599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xa0397000) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x18, "4e5e4546ae702415545ca20dad7924520279eb21713fd4dd"}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x4}, &(0x7f0000000100)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 431.024596ms ago: executing program 2 (id=4600): r0 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xf}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 379.973128ms ago: executing program 4 (id=4601): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x200000000000015c, &(0x7f0000000180)=ANY=[@ANYBLOB="1885000000270000009500b6d6aa32b2dd376eb1988b058e141a9dd131bff707bdc5fe33972cf25d5f283402085c4f627f78edf5748f11111dc9b0e57f3989527ecba4eb90d0a04da41d8ac826ac2303dffda949f7816476f10404067a281035405862c29bcbc843a95ab26457a25bcaf1e7ed567e64"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r3, 0x4, r0}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r4, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x9}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept4(r5, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x80, 0x80000) readv(r6, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f00000000c0)="ff02040004fffffffff40f936e83775a710cb663", 0x14) 358.726207ms ago: executing program 1 (id=4602): r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000480)=r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x2, 0x1, 0xc, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, 0x26, 0x4}, @sadb_x_nat_t_port={0x1, 0x3c, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x0, 0xc6, 0x0, 0x1}]}, 0x50}}, 0x20040804) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) syz_emit_ethernet(0xc9, &(0x7f00000000c0)={@broadcast, @remote, @void, {@x25={0x805, {0x1, 0x7, 0xf1, "9e6ad36ac071e496aa4a3fe9e75a6b81fb1a2c904bacb8726512a348c9769b868570287ce1865cf2fcf77551d91e26dc14347f446a0353950a662200023f7ba998cb29120c37605c5e1d4b1c0d0f53b0c1363a7ae9a5682798ed8f5926186c21db1cedaca23e3b2bfecf2f95c55bb23c885eb5a64b4dfed0a8b2e6f1221cf426d2564a6425624f8cfc2ef706560e4cf937d5063a3653a69bff52867fa95998377084aeb7d7c5ef667024aa72afcb3c78118d7b5979b05894"}}}}, &(0x7f00000001c0)={0x0, 0x1, [0x8ff, 0x853, 0x414, 0x2fd]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 331.044343ms ago: executing program 3 (id=4603): syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @private2, [], "96b24e2389907a94"}}}}}}}, 0x0) 268.118693ms ago: executing program 4 (id=4604): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 251.989964ms ago: executing program 2 (id=4605): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0xf, 0x14, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x3b}]}, @timestamp={0x44, 0x8, 0xe, 0x0, 0x3, [0x10]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x3ff, 0xc7, 0xced3, 0x4, 0x8}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 218.428551ms ago: executing program 3 (id=4606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 151.149677ms ago: executing program 4 (id=4607): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)="0817b984558c9db4d1c1e379ce093a756f", 0x11) (async, rerun: 64) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r1, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (rerun: 64) 106.630877ms ago: executing program 3 (id=4608): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x7a9c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000201010300000000000000000a0000040c0019800800020001000000300002802c00018014000300ff010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xae}}}}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r7, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f00000002c0)) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000180)=0x4, 0x4) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r11, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008181}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xc0, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x5) 69.438191ms ago: executing program 1 (id=4609): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="3b6beaab9849219b9dcfb53df1d87116658bd1b463ad63363d2e5d9c5ccf51096216a55db6ff7b7f5c7a0f3af1726c1909569ada6b7eb1636ec54fa0e181517e2b4e1b39"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r6, r5, 0x25, 0x8, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r7, 0x4) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000200081dc00000000000004000200200000400003c1818cec"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x1313}, [@IFLA_ALT_IFNAME={0x0, 0x35, 'virt_wifi0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 0s ago: executing program 2 (id=4610): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async, rerun: 32) connect$rose(r1, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c000000008002907800000000e00003000000907800640007898050a054084023641660020000002d037fc07acc192ea859d79137a7a8c7f40934f107472a050ac894c011447cf867e2236ee25025ef6447e03694622014a4df2739b9a42d3445b4fd8b36c3c9519e788ddfdb2739"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x10, 0x2000004, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x7524faac92a61c7a}}}, 0x24}}, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000080)={@remote, @remote, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002d00"/14], 0x14}}, 0x800) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0), 0x4, 0x0) (async, rerun: 64) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r8, 0xfffffffd) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, 0x0, 0x0, 0x40000000, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.2956'. [ 330.726727][T16942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.757609][T16942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.775000][T17190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 330.795418][T16942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.855291][T16942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.386881][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.477016][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.647864][T17223] bond14: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 331.684098][T17223] bond14 (unregistering): Released all slaves [ 331.775747][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.783101][T10197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.840075][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.847468][T10197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.882801][ T51] Bluetooth: hci0: command tx timeout [ 331.965207][T16942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.989706][T16942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.293041][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.305737][T17248] netlink: 'syz.1.2976': attribute type 2 has an invalid length. [ 332.529214][T17256] netlink: 'syz.1.2977': attribute type 14 has an invalid length. [ 332.691202][T17259] ipt_REJECT: TCP_RESET invalid for non-tcp [ 332.774704][T16942] veth0_vlan: entered promiscuous mode [ 332.791352][T16942] veth1_vlan: entered promiscuous mode [ 332.844631][T16942] veth0_macvtap: entered promiscuous mode [ 332.872419][T16942] veth1_macvtap: entered promiscuous mode [ 332.897125][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.947511][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.989270][T10205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.018191][T10205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.056894][T10205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.096537][T10205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.266891][T17268] bond1: option min_links: invalid value (18446744073709551614) [ 333.309669][T17268] bond1: option min_links: allowed values 0 - 2147483647 [ 333.494433][T17268] bond1 (unregistering): Released all slaves [ 333.830425][ T107] net_ratelimit: 17 callbacks suppressed [ 333.830449][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 333.879742][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.957672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.965584][ T51] Bluetooth: hci0: command tx timeout [ 333.995759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.029804][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 334.064672][T17299] bond1: option min_links: invalid value (18446744073709551614) [ 334.073021][T17299] bond1: option min_links: allowed values 0 - 2147483647 [ 334.086462][T17299] bond1 (unregistering): Released all slaves [ 334.124343][ T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.137573][ T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.152088][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 334.260039][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 334.298066][T17304] netlink: 'syz.2.2990': attribute type 5 has an invalid length. [ 334.400517][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 334.461022][T17316] 8021q: VLANs not supported on sit0 [ 334.532374][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 334.659915][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 334.779733][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 334.812935][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.827388][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.836395][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.845555][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.853320][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.896245][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 334.930387][T15128] IPVS: starting estimator thread 0... [ 335.039992][T17340] IPVS: using max 24 ests per chain, 57600 per kthread [ 335.109373][T17332] lo speed is unknown, defaulting to 1000 [ 335.230737][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.252162][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.404846][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.442163][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.531738][T17332] wg1 speed is unknown, defaulting to 1000 [ 335.560989][T17362] __nla_validate_parse: 2 callbacks suppressed [ 335.561011][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 335.594034][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.604656][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.677100][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.697298][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.860372][T17373] x_tables: duplicate underflow at hook 1 [ 336.171810][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 336.206491][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'. [ 336.494519][ T12] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 336.746556][ T12] dvmrp8 (unregistering): left allmulticast mode [ 336.926097][ T51] Bluetooth: hci2: command tx timeout [ 337.064300][ T12] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 337.073628][ T12] bridge5 (unregistering): left promiscuous mode [ 337.177894][ T12] bond0 (unregistering): Released all slaves [ 337.189100][ T12] bond1 (unregistering): Released all slaves [ 337.204287][ T12] bond2 (unregistering): Released all slaves [ 337.220546][ T12] bond3 (unregistering): Released all slaves [ 337.235343][ T12] bond4 (unregistering): Released all slaves [ 337.252826][ T12] bond5 (unregistering): Released all slaves [ 337.282322][ T12] bond6 (unregistering): Released all slaves [ 337.298181][ T12] bond7 (unregistering): Released all slaves [ 337.313326][ T12] bond8 (unregistering): Released all slaves [ 337.335309][ T12] bond9 (unregistering): Released all slaves [ 337.355704][ T12] bond10 (unregistering): Released all slaves [ 337.370953][ T12] bond11 (unregistering): Released all slaves [ 337.392558][ T12] bond12 (unregistering): Released all slaves [ 337.407695][ T12] bond13 (unregistering): Released all slaves [ 337.422981][ T12] bond14 (unregistering): Released all slaves [ 337.439000][ T12] bond15 (unregistering): Released all slaves [ 337.464742][ T12] bond16 (unregistering): Released all slaves [ 337.480734][ T12] bond17 (unregistering): Released all slaves [ 337.497552][ T12] bond18 (unregistering): Released all slaves [ 337.511965][ T12] bond19 (unregistering): Released all slaves [ 337.537017][ T12] bond20 (unregistering): Released all slaves [ 337.552161][ T12] bond21 (unregistering): Released all slaves [ 337.587737][ T12] bond22 (unregistering): Released all slaves [ 337.617108][T17393] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3012'. [ 337.637968][T17393] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3012'. [ 337.742924][T17404] ipvlan2: entered allmulticast mode [ 337.768815][T17404] batadv_slave_1: entered allmulticast mode [ 337.795828][T17404] batman_adv: batadv0: Adding interface: ipvlan2 [ 337.824559][T17404] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.864447][T17404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.909784][T17404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.940966][T17404] batman_adv: batadv0: Interface activated: ipvlan2 [ 337.977080][ T12] 9: left promiscuous mode [ 338.037581][T17426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3018'. [ 338.136823][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.148705][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.179833][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 338.190555][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.284003][T17424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.313179][T17424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.339221][ T12] tipc: Disabling bearer [ 338.353616][ T12] tipc: Disabling bearer [ 338.375731][ T12] tipc: Left network mode [ 338.552040][T17436] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3021'. [ 338.896898][T17443] syzkaller0: entered promiscuous mode [ 338.963008][T17443] syzkaller0: entered allmulticast mode [ 338.992893][T17472] "syz.3.3027" (17472) uses obsolete ecb(arc4) skcipher [ 339.016567][ T51] Bluetooth: hci2: command tx timeout [ 339.045744][T17475] "syz.3.3027" (17475) uses obsolete ecb(arc4) skcipher [ 339.096113][T17477] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 339.202695][T17475] netlink: 16932 bytes leftover after parsing attributes in process `syz.3.3027'. [ 339.252377][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3029'. [ 339.952965][T17496] Bluetooth: MGMT ver 1.23 [ 340.900360][ T322] net_ratelimit: 13 callbacks suppressed [ 340.900378][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 341.032506][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 341.079999][ T51] Bluetooth: hci2: command tx timeout [ 341.095738][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 341.144941][T17332] chnl_net:caif_netlink_parms(): no params data found [ 341.161556][T17499] delete_channel: no stack [ 341.182383][T17499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3031'. [ 341.238197][T17504] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3034'. [ 341.291102][T17499] bond1: entered promiscuous mode [ 341.296278][T17499] bond1: entered allmulticast mode [ 341.302776][T17499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.409611][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 341.601651][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 341.960645][T17526] bond14 (unregistering): Released all slaves [ 342.027609][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.036268][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.048402][T17332] bridge_slave_0: entered allmulticast mode [ 342.057160][T17332] bridge_slave_0: entered promiscuous mode [ 342.070710][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.078033][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.094040][T17332] bridge_slave_1: entered allmulticast mode [ 342.102329][T17332] bridge_slave_1: entered promiscuous mode [ 342.171108][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 342.223745][T17548] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 342.266538][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.281041][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 342.292239][T17550] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.438112][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.516108][T17553] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.559632][T17553] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 342.570693][T17553] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 342.669774][T17558] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 342.719407][T17558] bond2: (slave vcan1): making interface the new active one [ 342.734977][T17558] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 342.800502][T17332] team0: Port device team_slave_0 added [ 342.877465][T17332] team0: Port device team_slave_1 added [ 342.903332][ T12] hsr_slave_1: left promiscuous mode [ 342.926841][ T12] batadv_slave_1: left allmulticast mode [ 342.934390][ T12] batadv_slave_1: left promiscuous mode [ 342.941053][ T12] veth1_vlan: left promiscuous mode [ 342.946525][ T12] veth0_vlan: left promiscuous mode [ 343.034989][T17576] openvswitch: netlink: Tunnel attr 223 out of range max 16 [ 343.097379][T17577] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 343.160137][ T51] Bluetooth: hci2: command tx timeout [ 343.194014][T10197] smc: removing ib device syz1 [ 343.361325][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 343.406584][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.448753][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.484100][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 343.516306][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.596458][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.638086][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.675975][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.701887][T17590] openvswitch: netlink: IPv4 tunnel dst address is zero [ 343.872353][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 343.889639][T17571] lo speed is unknown, defaulting to 1000 [ 343.920061][T17596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3050'. [ 344.143736][T17607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.250317][T17332] hsr_slave_0: entered promiscuous mode [ 344.279230][T17332] hsr_slave_1: entered promiscuous mode [ 344.337998][T17332] debugfs: 'hsr0' already exists in 'hsr' [ 344.377404][T17332] Cannot create hsr debugfs directory [ 344.380469][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3055'. [ 344.455953][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3055'. [ 344.802614][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 344.937897][T17629] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 345.238570][T17571] wg1 speed is unknown, defaulting to 1000 [ 345.393424][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 346.012234][T10205] net_ratelimit: 6 callbacks suppressed [ 346.012258][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 346.141949][T17676] __nla_validate_parse: 3 callbacks suppressed [ 346.141968][T17676] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3068'. [ 346.168698][T17676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3068'. [ 346.267959][T17671] vlan2: entered allmulticast mode [ 346.302499][T17671] geneve1: entered allmulticast mode [ 346.473315][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 346.700049][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 346.893858][T17699] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3076'. [ 346.928274][T17699] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3076'. [ 346.937840][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 347.150419][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 347.192197][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 347.281113][T17719] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3079'. [ 347.357962][ T29] audit: type=1107 audit(1772707524.836:5): pid=17721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H¦ÉÄc_ÆÛ‹Ú>Êwâ!ÔáÙÔF [ 347.357962][ T29] N"ÉÉ_¡‹"$}ÁR(”,Ú}dkX®Å;ð¿ó38å' [ 347.458948][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 347.593343][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 347.789018][T17741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 347.846599][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 347.880567][T17745] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 347.892792][ T12] IPVS: stop unused estimator thread 0... [ 347.900936][T17745] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3085'. [ 348.043447][T15128] tipc: Resetting bearer [ 348.063588][T17751] netlink: 'syz.4.3086': attribute type 11 has an invalid length. [ 348.100244][T17751] netlink: 'syz.4.3086': attribute type 11 has an invalid length. [ 348.108118][T17751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3086'. [ 348.212038][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 348.247051][T17332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.311161][T17332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.380849][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 348.392050][T17332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.452579][T17332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.510577][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 348.678296][T17790] veth0: entered promiscuous mode [ 348.783642][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.822817][T17796] veth0: left promiscuous mode [ 348.866897][T17332] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.897565][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.904819][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.956113][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.963371][T10199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.031719][T17800] syzkaller1: entered promiscuous mode [ 349.080219][T17800] syzkaller1: entered allmulticast mode [ 349.726045][T17835] pim6reg1: entered promiscuous mode [ 349.731545][T17835] pim6reg1: entered allmulticast mode [ 349.865338][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.044117][T17332] veth0_vlan: entered promiscuous mode [ 350.076043][T17332] veth1_vlan: entered promiscuous mode [ 350.204184][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.211950][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.314463][T17872] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 350.516940][T17332] veth0_macvtap: entered promiscuous mode [ 350.549032][T17332] veth1_macvtap: entered promiscuous mode [ 350.627510][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.664537][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.729672][ T107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.747354][ T107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.782208][ T107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.807804][ T107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.008022][T17896] syzkaller0: entered allmulticast mode [ 351.052680][ T325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.060843][ T107] net_ratelimit: 15 callbacks suppressed [ 351.060863][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 351.082090][ T325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.192772][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.204812][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 351.215470][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.333009][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 351.576071][T17925] sctp: [Deprecated]: syz.4.3122 (pid 17925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.576071][T17925] Use struct sctp_sack_info instead [ 351.616877][T17920] syzkaller0: entered promiscuous mode [ 351.650228][T17920] syzkaller0: entered allmulticast mode [ 351.696103][T17915] tipc: Started in network mode [ 351.706153][T17915] tipc: Node identity f21bc148dec3, cluster identity 4711 [ 351.761210][T17915] tipc: Enabled bearer , priority 0 [ 351.784162][T17926] syzkaller0: entered promiscuous mode [ 351.804792][T17926] syzkaller0: entered allmulticast mode [ 351.860347][T17940] tipc: Resetting bearer [ 351.875483][T17913] tipc: Resetting bearer [ 351.953228][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.967272][T17913] tipc: Disabling bearer [ 351.988175][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.998025][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.007035][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.015693][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.049746][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 352.185080][T17941] lo speed is unknown, defaulting to 1000 [ 352.200737][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 352.476986][T17957] __nla_validate_parse: 11 callbacks suppressed [ 352.477011][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3128'. [ 352.546743][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 354.051629][ T5836] Bluetooth: hci3: command tx timeout [ 354.612106][T17941] wg1 speed is unknown, defaulting to 1000 [ 354.770035][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 354.781724][T18006] netlink: 'syz.4.3130': attribute type 1 has an invalid length. [ 354.920290][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 355.029042][T18014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3133'. [ 355.119725][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 355.295653][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'. [ 355.420813][T18042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3139'. [ 355.421498][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'. [ 355.494595][T17941] chnl_net:caif_netlink_parms(): no params data found [ 355.518977][T18037] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 355.531352][T18037] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3138'. [ 355.569596][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 355.587856][T18043] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3138'. [ 355.640604][T18030] tun0: tun_chr_ioctl cmd 1074025675 [ 355.655808][T18030] tun0: persist disabled [ 355.768273][T18050] Cannot find add_set index 0 as target [ 355.888484][T18062] pimreg: entered allmulticast mode [ 355.930811][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.938052][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.948308][T17941] bridge_slave_0: entered allmulticast mode [ 355.956587][T17941] bridge_slave_0: entered promiscuous mode [ 356.000722][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 356.011134][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.027195][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.035002][T17941] bridge_slave_1: entered allmulticast mode [ 356.043706][T17941] bridge_slave_1: entered promiscuous mode [ 356.088305][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 356.126257][ T5836] Bluetooth: hci3: command tx timeout [ 356.139625][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 356.162962][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.176111][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.232799][T17941] team0: Port device team_slave_0 added [ 356.245480][T17941] team0: Port device team_slave_1 added [ 356.294246][T18081] openvswitch: netlink: Multiple metadata blocks provided [ 356.306462][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.314881][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.344108][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.360970][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 356.371306][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.385136][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.421726][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.558954][T17941] hsr_slave_0: entered promiscuous mode [ 356.570622][T17941] hsr_slave_1: entered promiscuous mode [ 356.577209][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 356.583420][T17941] Cannot create hsr debugfs directory [ 356.591433][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 356.732119][T18090] lo speed is unknown, defaulting to 1000 [ 356.810309][T18100] bond15: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 356.830057][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 356.881115][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3156'. [ 357.166488][T17941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.180690][T18107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.221307][T18090] wg1 speed is unknown, defaulting to 1000 [ 357.280956][T17941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.363377][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 357.455752][T17941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.483414][T18120] netlink: 'syz.4.3161': attribute type 4 has an invalid length. [ 357.492396][T18120] __nla_validate_parse: 4 callbacks suppressed [ 357.492414][T18120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3161'. [ 357.512362][T18120] .`: renamed from bond0 [ 357.555374][T17941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.610852][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 357.628949][T18127] tipc: Enabling of bearer rejected, failed to enable media [ 357.740736][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 357.875480][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 357.922203][T17941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.934343][T17941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.948327][T17941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.989182][T17941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.009285][T18136] netlink: 'syz.3.3167': attribute type 11 has an invalid length. [ 358.024233][T18136] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3167'. [ 358.077252][T18136] netem: change failed [ 358.085617][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 358.200151][ T5836] Bluetooth: hci3: command tx timeout [ 358.325398][T18160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3172'. [ 358.619163][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.658521][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.706945][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.714187][T10199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.748730][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.755984][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.802738][T18167] syzkaller0: entered promiscuous mode [ 358.808435][T18167] syzkaller0: entered allmulticast mode [ 358.932111][T18177] netlink: 'syz.4.3176': attribute type 1 has an invalid length. [ 359.670802][T18195] veth1_macvtap: left promiscuous mode [ 359.678290][T18195] macsec0: entered promiscuous mode [ 359.684735][T18195] macsec0: entered allmulticast mode [ 360.032632][T18214] bond3: option fail_over_mac: invalid value (16) [ 360.051444][T18219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3185'. [ 360.069881][T18224] delete_channel: no stack [ 360.076049][T18214] bond3 (unregistering): Released all slaves [ 360.187378][T18219] bond16: option resend_igmp: invalid value (32767) [ 360.194414][T18219] bond16: option resend_igmp: allowed values 0 - 255 [ 360.208372][T18219] bond16 (unregistering): Released all slaves [ 360.279903][ T5836] Bluetooth: hci3: command tx timeout [ 360.285920][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.537701][T17941] veth0_vlan: entered promiscuous mode [ 360.553058][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 360.581912][T17941] veth1_vlan: entered promiscuous mode [ 360.673522][T17941] veth0_macvtap: entered promiscuous mode [ 360.704062][T17941] veth1_macvtap: entered promiscuous mode [ 360.778242][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.808971][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.846706][T10205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.873164][T10205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.888822][T10205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.909573][T10199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.064562][T10199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.088124][T10199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.173260][T10199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.181770][T10199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.220196][T10199] net_ratelimit: 14 callbacks suppressed [ 361.220229][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 361.255318][T18255] siw: device registration error -23 [ 361.261389][T18255] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 361.269162][T18255] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3193'. [ 361.300947][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 361.367030][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 361.393600][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3124'. [ 361.532981][T18264] 8021q: VLANs not supported on gre0 [ 361.666816][T18269] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3197'. [ 361.748723][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 361.797366][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.808810][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.825055][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.835605][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.844977][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.869579][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 361.997823][T18272] lo speed is unknown, defaulting to 1000 [ 362.020064][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 362.069805][T18286] netlink: 'syz.3.3202': attribute type 58 has an invalid length. [ 362.150613][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 362.290181][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 362.409746][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 362.523131][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 362.537136][T18272] wg1 speed is unknown, defaulting to 1000 [ 362.581057][T18309] netlink: 'syz.3.3211': attribute type 13 has an invalid length. [ 362.711092][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 362.808497][T18318] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 362.835880][T18320] __nla_validate_parse: 1 callbacks suppressed [ 362.835900][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3216'. [ 362.937380][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3215'. [ 362.952226][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3215'. [ 362.966265][T18272] chnl_net:caif_netlink_parms(): no params data found [ 363.050401][T18330] netlink: 'syz.4.3214': attribute type 4 has an invalid length. [ 363.100445][T18333] netlink: 'syz.4.3214': attribute type 4 has an invalid length. [ 363.303769][T18339] netlink: 'syz.3.3219': attribute type 21 has an invalid length. [ 363.312169][T18339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3219'. [ 363.351788][T18339] netlink: 'syz.3.3219': attribute type 4 has an invalid length. [ 363.361054][T18339] netlink: 'syz.3.3219': attribute type 5 has an invalid length. [ 363.362718][T18343] netlink: 'syz.3.3219': attribute type 21 has an invalid length. [ 363.376940][T18339] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3219'. [ 363.391005][T18272] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.398161][T18272] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.412729][T18272] bridge_slave_0: entered allmulticast mode [ 363.421421][T18272] bridge_slave_0: entered promiscuous mode [ 363.428420][T18343] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3219'. [ 363.440031][T18272] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.447183][T18272] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.454789][T18272] bridge_slave_1: entered allmulticast mode [ 363.462839][T18272] bridge_slave_1: entered promiscuous mode [ 363.471560][T18343] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3219'. [ 363.564502][T18272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.578667][T18272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.706122][T18272] team0: Port device team_slave_0 added [ 363.785332][T18353] veth3: entered allmulticast mode [ 363.794472][T18272] team0: Port device team_slave_1 added [ 363.871894][T18272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.889185][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.951932][T18272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.965685][ T51] Bluetooth: hci4: command tx timeout [ 363.990652][T18272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.010230][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.040483][T18272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.044709][T18364] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3226'. [ 364.126406][T18272] hsr_slave_0: entered promiscuous mode [ 364.140202][T18272] hsr_slave_1: entered promiscuous mode [ 364.146912][T18272] debugfs: 'hsr0' already exists in 'hsr' [ 364.153548][T18272] Cannot create hsr debugfs directory [ 364.303704][T18371] bridge_slave_0: invalid flags given to default FDB implementation [ 364.471509][T18272] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.482820][T18272] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.492617][T18272] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.549579][T18272] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.562317][T18272] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.593440][T18272] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.637933][T18379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.681267][T18379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.748255][T18380] sit0: entered promiscuous mode [ 364.765320][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 364.785174][T18272] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.795344][T18272] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.808948][T18272] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.883698][T18272] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.908804][T18272] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 364.926642][T18272] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.058558][T18396] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 365.381728][T18272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.412843][T18272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.490111][T18272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.568094][T18424] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3244'. [ 365.598168][T18272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.766132][T18430] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 365.942657][T18272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.016639][T18272] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.049660][ T51] Bluetooth: hci4: command tx timeout [ 366.071930][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.079160][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.153405][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.160652][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.329076][ T325] net_ratelimit: 13 callbacks suppressed [ 366.329101][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 366.492342][T18491] Unknown options in mask b7f2 [ 366.498095][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 366.650040][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 366.687280][T18501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.793120][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 366.930376][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 366.985535][T18272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.064363][T18272] veth0_vlan: entered promiscuous mode [ 367.080927][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 367.101881][T18272] veth1_vlan: entered promiscuous mode [ 367.148098][T18272] veth0_macvtap: entered promiscuous mode [ 367.164983][T18272] veth1_macvtap: entered promiscuous mode [ 367.194656][T18272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.214715][T18272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.233345][T10205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.245227][T10205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.255514][T10205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.266391][T10205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.291546][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 367.375565][T18522] syzkaller0: entered allmulticast mode [ 367.415099][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.424879][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.464546][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 367.521775][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.531170][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.590509][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 367.903708][T18533] syzkaller0: entered promiscuous mode [ 367.909394][T18533] syzkaller0: entered allmulticast mode [ 367.962728][T18545] __nla_validate_parse: 58 callbacks suppressed [ 367.962750][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 368.057015][T18550] Cannot find add_set index 0 as target [ 368.119893][ T51] Bluetooth: hci4: command tx timeout [ 368.959372][T18592] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 368.998248][T18600] bond0: Error: Cannot enslave bond to itself. [ 369.308709][T18615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3288'. [ 369.350629][T18615] validate_nla: 5 callbacks suppressed [ 369.350648][T18615] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 369.484943][ T5489] veth1_macvtap: left promiscuous mode [ 370.044721][T18653] netlink: 'syz.0.3296': attribute type 32 has an invalid length. [ 370.099253][T18653] netlink: 776 bytes leftover after parsing attributes in process `syz.0.3296'. [ 370.205157][ T51] Bluetooth: hci4: command tx timeout [ 370.270519][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3300'. [ 370.381562][T18678] netlink: 2740 bytes leftover after parsing attributes in process `syz.3.3300'. [ 371.194306][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 371.300916][T18706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3308'. [ 371.324401][T18702] syzkaller0: entered promiscuous mode [ 371.330064][T18702] syzkaller0: entered allmulticast mode [ 371.340278][T18702] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 371.355215][ T325] net_ratelimit: 32 callbacks suppressed [ 371.355236][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 371.371107][T18706] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 371.424698][T18711] netlink: 'syz.3.3309': attribute type 32 has an invalid length. [ 371.452772][T18711] netlink: 776 bytes leftover after parsing attributes in process `syz.3.3309'. [ 371.501655][T18713] bond1 (unregistering): Released all slaves [ 371.542011][T18717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3308'. [ 371.542868][T18707] macvlan2: entered promiscuous mode [ 371.575333][T18707] macvlan2: entered allmulticast mode [ 371.592707][T18719] netlink: 'syz.2.3311': attribute type 12 has an invalid length. [ 371.600949][T18707] bond1: entered promiscuous mode [ 371.602774][T18707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.607054][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 371.628673][T18707] bond1: left promiscuous mode [ 371.714786][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.761201][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.925145][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.945649][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.009906][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 372.160119][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 372.292628][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 372.429859][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 372.600687][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 372.640931][T18762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.860326][T18775] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 372.877202][T18781] netlink: 'syz.3.3327': attribute type 7 has an invalid length. [ 372.950008][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 373.060889][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 373.142215][T18790] __nla_validate_parse: 1 callbacks suppressed [ 373.142235][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3330'. [ 373.260118][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 373.528130][T18817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.649763][T18820] bridge2: entered promiscuous mode [ 373.655037][T18820] bridge2: entered allmulticast mode [ 373.677437][T18820] team0: Port device bridge2 added [ 373.691772][T18821] bridge0: port 3(team0) entered blocking state [ 373.704815][T18821] bridge0: port 3(team0) entered disabled state [ 373.712191][T18821] team0: entered allmulticast mode [ 373.717838][T18821] team_slave_0: entered allmulticast mode [ 373.726302][T18821] team_slave_1: entered allmulticast mode [ 373.740493][T18821] team0: entered promiscuous mode [ 373.745699][T18821] team_slave_0: entered promiscuous mode [ 373.752651][T18821] team_slave_1: entered promiscuous mode [ 373.759753][T18821] bridge0: port 3(team0) entered blocking state [ 373.766432][T18821] bridge0: port 3(team0) entered forwarding state [ 373.983813][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 373.998700][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3346'. [ 374.048817][T18846] sch_tbf: burst 12 is lower than device bridge3 mtu (1514) ! [ 374.069050][T18846] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 374.434016][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 374.536073][T18875] ip_vti0: entered promiscuous mode [ 374.583244][T18875] ip_vti0: entered allmulticast mode [ 374.654576][T18881] syzkaller1: entered promiscuous mode [ 374.660652][T18881] syzkaller1: entered allmulticast mode [ 374.669025][T10205] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.678108][T10205] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.689799][T15144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.740973][T15144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.810848][T15144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.031236][T18902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3365'. [ 375.040503][T18906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3366'. [ 375.175448][T18916] netlink: 'syz.2.3369': attribute type 62 has an invalid length. [ 375.192703][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3369'. [ 375.348392][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 375.396569][T18927] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 375.441666][T18927] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3372'. [ 375.565120][T18940] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.628766][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.637482][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.716818][T18940] bridge0: entered allmulticast mode [ 375.872064][T18959] netlink: 'syz.1.3383': attribute type 64 has an invalid length. [ 376.113445][T18979] syzkaller1: entered promiscuous mode [ 376.132604][T18979] syzkaller1: entered allmulticast mode [ 376.257525][T18991] netlink: 'syz.0.3391': attribute type 1 has an invalid length. [ 376.270967][T18991] nbd: illegal input index -2146435060 [ 376.364425][T18995] syzkaller0: entered promiscuous mode [ 376.371927][T18995] syzkaller0: entered allmulticast mode [ 376.455704][T18999] team0: Port device team_slave_0 removed [ 376.489667][T10197] net_ratelimit: 26 callbacks suppressed [ 376.489691][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 376.505447][ T107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.639604][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 376.771369][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 376.811138][T19019] syzkaller1: entered promiscuous mode [ 376.816679][T19019] syzkaller1: entered allmulticast mode [ 376.900113][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 377.089653][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 377.211352][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 377.230584][T19046] netlink: 'syz.1.3405': attribute type 5 has an invalid length. [ 377.243955][T19045] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 377.295171][T19045] bond2: entered promiscuous mode [ 377.300422][T19045] bond2: entered allmulticast mode [ 377.306149][T19045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.331794][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 377.459954][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 377.523481][T15124] IPVS: starting estimator thread 0... [ 377.569663][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 377.640743][T19064] IPVS: using max 30 ests per chain, 72000 per kthread [ 377.725724][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 377.860489][T19063] infiniband syz1: set active [ 377.865246][T19063] infiniband syz1: added bond_slave_0 [ 377.921756][T19063] RDS/IB: syz1: added [ 377.925897][T19063] smc: adding ib device syz1 with port count 1 [ 377.933683][T19063] smc: ib device syz1 port 1 has no pnetid [ 378.439802][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.640585][T19122] netlink: 'syz.4.3429': attribute type 1 has an invalid length. [ 378.785491][T19128] bond0: (slave bridge3): making interface the new active one [ 378.794561][T19128] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 380.205152][T19154] lo speed is unknown, defaulting to 1000 [ 380.359842][T19154] wg1 speed is unknown, defaulting to 1000 [ 381.569982][T10199] net_ratelimit: 32 callbacks suppressed [ 381.570007][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 381.689921][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 381.736554][T19131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.860664][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 381.975075][T19171] __nla_validate_parse: 17 callbacks suppressed [ 381.975098][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 382.014377][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 382.069597][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 382.176410][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3443'. [ 382.187563][T19183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3443'. [ 382.209607][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 382.339879][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 382.355216][T19192] xt_hashlimit: size too large, truncated to 1048576 [ 382.422048][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 382.453457][T19200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3447'. [ 382.491085][T19200] netlink: 'syz.3.3447': attribute type 7 has an invalid length. [ 382.519383][T19200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3447'. [ 382.542929][T10197] bond6: (slave bridge9): failed to get link speed/duplex [ 382.680740][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 382.815661][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 382.863341][T19217] nbd: couldn't find device at index 1073741824 [ 382.869799][T19218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3448'. [ 382.940612][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3451'. [ 382.964567][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 383.034273][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3451'. [ 383.104174][T19222] tipc: Failed to remove unknown binding: 66,0,0/0:2079743901/2079743902 [ 383.131194][T19222] tipc: Failed to remove unknown binding: 66,0,0/0:2079743901/2079743902 [ 383.200558][T19229] dvmrp0: entered allmulticast mode [ 383.288471][T19238] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 383.369300][T19238] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 383.696893][T19268] syzkaller1: entered promiscuous mode [ 383.708814][T19268] syzkaller1: entered allmulticast mode [ 383.743995][T19270] syzkaller0: entered promiscuous mode [ 383.750022][T19270] syzkaller0: entered allmulticast mode [ 384.343695][T19312] netlink: 'syz.0.3469': attribute type 11 has an invalid length. [ 384.372454][T19312] netlink: 'syz.0.3469': attribute type 11 has an invalid length. [ 384.889395][T19344] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 384.937038][T19344] bond3 (unregistering): Released all slaves [ 385.005748][T19348] bond1: invalid ARP target 0.0.0.0 specified for addition [ 385.018171][T19348] bond1: option arp_ip_target: invalid value (0) [ 385.061141][T19348] bond1 (unregistering): Released all slaves [ 385.205825][T19349] bond1: invalid ARP target 0.0.0.0 specified for addition [ 385.223005][T19349] bond1: option arp_ip_target: invalid value (0) [ 385.253582][T19349] bond1 (unregistering): Released all slaves [ 385.424790][T19377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 386.199975][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.731839][T19460] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 386.750187][T10205] net_ratelimit: 29 callbacks suppressed [ 386.750210][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 386.904329][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 387.029817][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 387.160128][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 387.311025][T19486] tipc: Started in network mode [ 387.315986][T19486] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 387.362427][T19486] tipc: Enabling of bearer rejected, failed to enable media [ 387.405922][T19494] __nla_validate_parse: 11 callbacks suppressed [ 387.405946][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 387.519590][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 387.661636][T19499] syzkaller0: entered promiscuous mode [ 387.674742][T19499] syzkaller0: entered allmulticast mode [ 387.690012][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 387.735460][T19508] vlan0: entered allmulticast mode [ 387.748334][T19508] hsr0: entered allmulticast mode [ 387.767855][T19508] hsr_slave_0: entered allmulticast mode [ 387.788194][T19508] hsr_slave_1: entered allmulticast mode [ 388.113879][T19516] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3521'. [ 388.210271][T19538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3525'. [ 388.240162][T19540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3525'. [ 388.603756][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 390.132920][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 390.260614][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 390.389646][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 390.408111][T19572] bridge0: port 4(veth0_to_bridge) entered blocking state [ 390.430901][T19572] bridge0: port 4(veth0_to_bridge) entered disabled state [ 390.438381][T19572] veth0_to_bridge: entered allmulticast mode [ 390.441264][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 390.462269][T19572] veth0_to_bridge: entered promiscuous mode [ 390.468454][T19572] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.492808][T19572] bridge0: port 4(veth0_to_bridge) entered blocking state [ 390.500134][T19572] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 390.508788][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3532'. [ 390.540742][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 390.547937][T19585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3534'. [ 390.639502][T19574] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3532'. [ 390.672004][T19574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3532'. [ 391.789637][ T12] net_ratelimit: 6 callbacks suppressed [ 391.789661][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 391.909608][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 392.019594][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 392.130248][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 392.239557][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 392.349593][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 392.459863][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 392.589771][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 392.699739][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 392.811838][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 393.935419][T19609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.243873][T19663] __nla_validate_parse: 3 callbacks suppressed [ 394.243896][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 394.386508][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 394.583861][T19680] x_tables: duplicate underflow at hook 1 [ 394.813576][T19693] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3558'. [ 394.959195][T19700] tipc: Enabling of bearer rejected, failed to enable media [ 394.974745][T19701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3562'. [ 395.124793][T19706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3564'. [ 395.225122][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3568'. [ 395.257845][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3568'. [ 395.283977][T19711] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3568'. [ 395.358992][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3570'. [ 395.402088][T19717] bridge_slave_1: left allmulticast mode [ 395.407794][T19717] bridge_slave_1: left promiscuous mode [ 395.417640][T19717] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.467948][T19717] bridge_slave_0: left allmulticast mode [ 395.498345][T19717] bridge_slave_0: left promiscuous mode [ 395.517944][T19717] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.586619][T19724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3572'. [ 395.764009][T19740] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.844718][ T12] net_ratelimit: 33 callbacks suppressed [ 396.844740][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 397.073146][T19824] netlink: 'syz.3.3605': attribute type 10 has an invalid length. [ 397.132524][T19824] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.179532][T19824] syzkaller1: entered promiscuous mode [ 397.185066][T19824] syzkaller1: entered allmulticast mode [ 397.270218][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 397.390787][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 397.501634][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 397.652146][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 397.671798][T19855] netlink: 'syz.4.3615': attribute type 10 has an invalid length. [ 397.688385][T19855] veth0_macvtap: left promiscuous mode [ 397.780261][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 397.910739][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 398.023743][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 398.139546][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 398.319648][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 398.466355][T19898] syzkaller0: entered promiscuous mode [ 398.473813][T19898] syzkaller0: entered allmulticast mode [ 398.868737][T19925] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 399.010858][T19939] syzkaller1: entered promiscuous mode [ 399.016454][T19939] syzkaller1: entered allmulticast mode [ 399.168893][T19946] vlan2: entered promiscuous mode [ 399.174754][T19946] vlan2: entered allmulticast mode [ 399.189185][T19946] hsr_slave_1: entered allmulticast mode [ 399.280516][T19951] veth0: entered promiscuous mode [ 399.304836][T19950] veth0: left promiscuous mode [ 399.438056][T19964] xt_hashlimit: size too large, truncated to 1048576 [ 399.623203][T19976] __nla_validate_parse: 11 callbacks suppressed [ 399.623228][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'. [ 399.694700][T19981] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 399.702825][T19979] bridge_slave_0: invalid flags given to default FDB implementation [ 399.739360][T19981] bond1: entered promiscuous mode [ 399.758564][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3654'. [ 399.762322][T19981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.798441][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3654'. [ 399.890205][T19989] netlink: 'syz.4.3655': attribute type 21 has an invalid length. [ 399.932664][T19981] bond1: (slave bridge2): making interface the new active one [ 399.941766][T19981] bridge2: entered promiscuous mode [ 399.955002][T19981] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 399.991373][T19989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3655'. [ 400.222581][T20002] erspan0: entered allmulticast mode [ 400.251908][T20007] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.272154][T20008] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 400.280680][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'. [ 400.338095][T20007] bond1: (slave lo): Enslaving as an active interface with an up link [ 400.660855][T20026] netlink: 'syz.4.3665': attribute type 2 has an invalid length. [ 400.686133][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3668'. [ 400.788543][T20037] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 400.788657][T20037] sctp: [Deprecated]: syz.0.3669 (pid 20037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.788657][T20037] Use struct sctp_sack_info instead [ 400.919643][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.063013][T20053] sctp: [Deprecated]: syz.1.3673 (pid 20053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.063013][T20053] Use struct sctp_sack_info instead [ 401.326516][T20079] xt_cgroup: xt_cgroup: no path or classid specified [ 401.659812][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 401.694171][T20103] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 401.745718][T20103] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3685'. [ 401.798947][T20111] netlink: 'syz.3.3688': attribute type 21 has an invalid length. [ 401.878239][T20111] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 401.911455][T20111] bond3 (unregistering): Released all slaves [ 402.070655][T20122] macvtap1: entered allmulticast mode [ 402.079315][T20122] veth0_macvtap: entered allmulticast mode [ 402.121327][T10199] net_ratelimit: 26 callbacks suppressed [ 402.121351][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 402.370956][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 402.481202][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 402.609566][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 402.622687][T20164] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3701'. [ 402.722726][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 402.805871][T20176] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3706'. [ 402.865711][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 403.009622][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 403.120149][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 403.184200][T20200] block nbd3: not configured, cannot reconfigure [ 403.230301][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 403.360242][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 403.526040][T20213] bond2: entered promiscuous mode [ 403.538664][T20213] bond2: entered allmulticast mode [ 403.545087][T20213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.655383][ T29] audit: type=1800 audit(1772707581.146:6): pid=20220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3718" name="memory.events" dev="tmpfs" ino=763 res=0 errno=0 [ 403.682608][T20221] netlink: 'syz.1.3719': attribute type 3 has an invalid length. [ 403.729921][T20221] netlink: 'syz.1.3719': attribute type 3 has an invalid length. [ 403.807882][T20218] syz.1.3719 (20218) used obsolete PPPIOCDETACH ioctl [ 403.819853][ T29] audit: type=1804 audit(1772707581.316:7): pid=20220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3718" name="/newroot/146/memory.events" dev="tmpfs" ino=763 res=1 errno=0 [ 403.912699][ T51] block nbd3: Receive control failed (result -32) [ 405.069767][T20282] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.220362][T10205] net_ratelimit: 31 callbacks suppressed [ 407.220388][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 407.338448][T20242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.351182][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 407.496345][T20295] __nla_validate_parse: 8 callbacks suppressed [ 407.496368][T20295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3740'. [ 407.526995][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 407.530524][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.586812][T20295] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20000 [ 407.640220][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 407.750151][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 407.758341][T20316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3746'. [ 407.838828][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'. [ 407.861006][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 407.979834][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 408.089596][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 408.200263][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 408.211762][T15145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.469783][T20304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.726636][T20344] xt_hashlimit: overflow, rate too high: 0 [ 408.950936][T20354] syzkaller0: entered promiscuous mode [ 408.986123][T20354] syzkaller0: entered allmulticast mode [ 409.228313][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 409.287256][T20373] syzkaller0: entered promiscuous mode [ 409.293275][T20373] syzkaller0: entered allmulticast mode [ 409.468827][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'. [ 409.496109][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'. [ 409.505631][T20385] netlink: 'syz.4.3767': attribute type 3 has an invalid length. [ 409.535925][T20390] syzkaller0: entered allmulticast mode [ 409.549977][T20392] netlink: 'syz.1.3770': attribute type 10 has an invalid length. [ 409.582406][T20392] bridge0: left allmulticast mode [ 409.589384][T20392] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.596701][T20392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.604359][T20392] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.611580][T20392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.626223][T20392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 410.102058][T20418] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3777'. [ 410.136643][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'. [ 410.151015][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3777'. [ 410.369138][T20434] ip6gre1: entered promiscuous mode [ 410.383485][T20436] netlink: 'syz.0.3782': attribute type 9 has an invalid length. [ 410.727102][T20405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.211910][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 411.463878][T20484] bridge0: port 4(veth0_to_bridge) entered disabled state [ 411.471427][T20484] bridge0: port 3(team0) entered disabled state [ 411.478105][T20484] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.485838][T20484] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.676112][T20484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.693552][T20484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.985066][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.994757][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.090267][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.121105][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.362211][ T12] net_ratelimit: 53 callbacks suppressed [ 412.362233][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 412.516486][T20538] IPVS: Scheduler module ip_vs_sip not found [ 412.522884][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 412.704453][T20553] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 412.815614][T20553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.849759][T20550] __nla_validate_parse: 3 callbacks suppressed [ 412.849779][T20550] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3814'. [ 412.899866][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 412.908829][T20566] netlink: 'syz.1.3817': attribute type 21 has an invalid length. [ 412.917019][T20566] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3817'. [ 412.937904][T20558] vlan2: entered promiscuous mode [ 412.973465][T20558] bond3: entered promiscuous mode [ 412.978737][T20558] vlan2: entered allmulticast mode [ 412.986172][T20558] bond3: entered allmulticast mode [ 413.045001][T20562] bond3: (slave bridge4): making interface the new active one [ 413.069710][T20562] bridge4: entered promiscuous mode [ 413.075432][T20562] bridge4: entered allmulticast mode [ 413.086027][T20562] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 413.095301][T20566] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3817'. [ 413.120309][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 413.140488][T20573] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3819'. [ 413.281959][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 413.309104][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 413.409325][T20590] ¾x9: renamed from bridge_slave_0 [ 413.449581][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 413.493277][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3828'. [ 413.591449][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 413.658495][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 413.668054][T20605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3831'. [ 413.693273][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 413.702630][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 413.722342][T20605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3831'. [ 413.783396][T20605] syzkaller1: entered promiscuous mode [ 413.789096][T20605] syzkaller1: entered allmulticast mode [ 413.920664][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 413.955938][T20620] syzkaller0: entered promiscuous mode [ 413.962120][T20620] syzkaller0: entered allmulticast mode [ 414.089576][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 414.117173][T20629] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 414.141728][T20631] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 414.302050][T20644] netlink: 'syz.3.3841': attribute type 21 has an invalid length. [ 414.503808][T20652] gre1: entered promiscuous mode [ 414.519082][T20652] gre1: entered allmulticast mode [ 414.776741][T20674] netlink: 'syz.4.3852': attribute type 3 has an invalid length. [ 417.449895][ T325] net_ratelimit: 49 callbacks suppressed [ 417.449920][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 417.569662][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 417.679831][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 417.790108][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 417.909695][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 418.019620][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 418.069925][T20698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.152540][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 418.259771][T20750] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 418.267591][T20750] __nla_validate_parse: 22 callbacks suppressed [ 418.267611][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 418.286301][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 418.295404][T20747] openvswitch: netlink: Flow key attr not present in new flow. [ 418.307596][T20752] sctp: [Deprecated]: syz.2.3876 (pid 20752) Use of int in max_burst socket option. [ 418.307596][T20752] Use struct sctp_assoc_value instead [ 418.355964][T20756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3874'. [ 418.402195][T20756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3874'. [ 418.429684][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 418.513585][T20764] veth5: entered allmulticast mode [ 418.654712][T20769] xt_hashlimit: size too large, truncated to 1048576 [ 418.694820][T20780] netlink: 'syz.1.3880': attribute type 5 has an invalid length. [ 418.767518][T20784] netlink: 'syz.3.3885': attribute type 12 has an invalid length. [ 419.089379][T20802] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 419.604583][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 419.923620][T20850] SET target dimension over the limit! [ 419.941746][T20851] netlink: 'syz.1.3905': attribute type 3 has an invalid length. [ 419.954837][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 420.051736][T20857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3908'. [ 420.120777][T20861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 420.313180][T20872] netlink: 'syz.1.3909': attribute type 2 has an invalid length. [ 420.404825][T20866] udevd[20866]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 420.427601][T20876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3911'. [ 420.462953][T20866] udevd[20866]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 420.764723][T20906] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 420.793119][T20906] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 420.827020][T20906] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3918'. [ 420.854055][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 420.857490][T20904] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 420.876307][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'. [ 420.895454][T20904] bond4 (unregistering): Released all slaves [ 420.954949][T20917] geneve2: entered promiscuous mode [ 420.960347][T20917] geneve2: entered allmulticast mode [ 421.346694][T20943] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20002 [ 421.569341][T20963] netlink: 'syz.0.3935': attribute type 2 has an invalid length. [ 421.722091][ T51] Bluetooth: hci0: command tx timeout [ 421.935361][T20969] syzkaller0: entered promiscuous mode [ 421.941077][T20969] syzkaller0: entered allmulticast mode [ 421.991355][T20971] netlink: 'syz.3.3938': attribute type 1 has an invalid length. [ 423.869739][T10205] net_ratelimit: 30 callbacks suppressed [ 423.869761][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 424.011467][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 424.144705][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 424.238252][T21022] __nla_validate_parse: 4 callbacks suppressed [ 424.238273][T21022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 424.330725][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 424.470482][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 424.579620][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 424.701215][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 424.762707][T21056] delete_channel: no stack [ 424.781528][T21056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3955'. [ 424.850805][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 425.009904][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 425.120576][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 425.453763][T21102] pim6reg1: entered promiscuous mode [ 425.476980][T21102] pim6reg1: entered allmulticast mode [ 425.486305][T21103] netlink: 'syz.3.3967': attribute type 10 has an invalid length. [ 425.526739][T21103] vxcan1: entered promiscuous mode [ 425.545844][T21103] vxcan1: entered allmulticast mode [ 425.570958][T21103] team0: Device vxcan1 is of different type [ 425.611077][T21109] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3968'. [ 425.626340][T21107] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3968'. [ 426.137180][T21140] netem: unknown loss type 0 [ 426.157741][T21140] netem: change failed [ 426.527224][T21148] lo speed is unknown, defaulting to 1000 [ 426.828644][T21162] netlink: 'syz.3.3983': attribute type 58 has an invalid length. [ 426.846230][T21162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3983'. [ 426.863482][T21164] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 426.962492][T21148] wg1 speed is unknown, defaulting to 1000 [ 427.112079][T21173] netlink: 'syz.0.3989': attribute type 1 has an invalid length. [ 427.127434][T21177] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 427.163481][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 427.294323][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3991'. [ 427.360812][T21181] veth2: entered promiscuous mode [ 427.426181][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3991'. [ 427.471505][T21181] veth4: entered promiscuous mode [ 427.548443][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3991'. [ 427.578509][T21181] veth6: entered promiscuous mode [ 427.605114][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3991'. [ 427.650122][T21181] veth8: entered promiscuous mode [ 427.691265][T21181] veth10: entered promiscuous mode [ 427.732480][T21203] : entered promiscuous mode [ 427.748348][T21181] veth12: entered promiscuous mode [ 427.818201][T21181] veth14: entered promiscuous mode [ 427.920813][T21181] veth16: entered promiscuous mode [ 427.973920][T21181] veth18: entered promiscuous mode [ 428.078085][T21181] veth20: entered promiscuous mode [ 428.330261][T21221] nbd4: detected capacity change from 0 to 127 [ 428.340079][ T51] block nbd4: Receive control failed (result -32) [ 428.354580][T20866] block nbd4: Dead connection, failed to find a fallback [ 428.384870][T20866] block nbd4: shutting down sockets [ 428.414982][T20866] blk_print_req_error: 24 callbacks suppressed [ 428.415003][T20866] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.466345][T20866] buffer_io_error: 23 callbacks suppressed [ 428.466365][T20866] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.508606][T20866] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.530405][T20866] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.538259][T20866] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.581241][T21234] netlink: 'syz.0.4007': attribute type 3 has an invalid length. [ 428.589128][T20866] Buffer I/O error on dev nbd4, logical block 2, async page read [ 428.607677][T21234] netlink: 'syz.0.4007': attribute type 2 has an invalid length. [ 428.617213][T20866] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.641342][T20866] Buffer I/O error on dev nbd4, logical block 3, async page read [ 428.670083][T20866] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.696649][T20866] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.735687][T20866] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.746235][T20866] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.754232][T20866] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.764583][T20866] Buffer I/O error on dev nbd4, logical block 2, async page read [ 428.773095][T20866] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.783500][T20866] Buffer I/O error on dev nbd4, logical block 3, async page read [ 428.861097][T20866] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.890500][T20866] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.925071][T20866] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 428.959532][T20866] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.988557][T20866] ldm_validate_partition_table(): Disk read failed. [ 429.000569][ T12] net_ratelimit: 30 callbacks suppressed [ 429.000589][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 429.013837][T20866] Dev nbd4: unable to read RDB block 0 [ 429.015551][T20866] nbd4: unable to read partition table [ 429.081683][T20866] ldm_validate_partition_table(): Disk read failed. [ 429.094428][T20866] Dev nbd4: unable to read RDB block 0 [ 429.101418][T20866] nbd4: unable to read partition table [ 429.183784][T21261] syzkaller1: entered promiscuous mode [ 429.189319][T21261] syzkaller1: entered allmulticast mode [ 429.205425][T21259] syzkaller0: entered promiscuous mode [ 429.211088][T21259] syzkaller0: entered allmulticast mode [ 429.232396][T21259] netlink: 'syz.1.4016': attribute type 2 has an invalid length. [ 429.320665][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 429.461903][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 429.473104][T21276] __nla_validate_parse: 15 callbacks suppressed [ 429.473133][T21276] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4022'. [ 429.513932][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 429.532763][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 429.611540][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 429.720259][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 429.772398][T21292] syzkaller0: entered promiscuous mode [ 429.777935][T21292] syzkaller0: entered allmulticast mode [ 429.792239][T21292] 0: reclassify loop, rule prio 0, protocol 800 [ 429.939808][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 430.062780][T21313] erspan0: entered promiscuous mode [ 430.069194][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 430.105170][T21313] erspan0: left promiscuous mode [ 430.159725][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 430.219195][T21321] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.4035'. [ 430.270335][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 430.294622][T21325] netlink: 'syz.2.4036': attribute type 1 has an invalid length. [ 430.359736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.406530][T21325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.440671][T21334] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 430.545673][T21324] bond2: (slave veth23): Enslaving as an active interface with a down link [ 430.565774][T21345] xt_connbytes: Forcing CT accounting to be enabled [ 430.571638][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 430.637472][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4042'. [ 430.684399][T21356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4044'. [ 430.848962][T21362] netlink: 'syz.2.4046': attribute type 58 has an invalid length. [ 430.879869][T21362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4046'. [ 430.981085][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'. [ 431.117747][T21369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.200257][T21378] netlink: 'syz.0.4054': attribute type 4 has an invalid length. [ 431.302095][T21375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4053'. [ 431.339245][T21387] lo speed is unknown, defaulting to 1000 [ 431.346898][T15145] IPVS: starting estimator thread 0... [ 431.484109][T21390] IPVS: using max 25 ests per chain, 60000 per kthread [ 431.655249][T21403] vlan2: entered promiscuous mode [ 431.671333][T21403] vlan2: entered allmulticast mode [ 431.683661][T21403] hsr_slave_1: entered allmulticast mode [ 431.880557][T21418] netlink: 'syz.2.4063': attribute type 21 has an invalid length. [ 431.940176][T21387] wg1 speed is unknown, defaulting to 1000 [ 432.241804][T21431] netlink: 'syz.0.4066': attribute type 11 has an invalid length. [ 432.328479][T21435] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 432.570175][T21448] sctp: [Deprecated]: syz.2.4070 (pid 21448) Use of int in maxseg socket option. [ 432.570175][T21448] Use struct sctp_assoc_value instead [ 432.646993][T21450] tipc: Started in network mode [ 432.660427][T21450] tipc: Node identity , cluster identity 4711 [ 432.666739][T21450] tipc: Failed to obtain node identity [ 432.673007][T21450] tipc: Enabling of bearer rejected, failed to enable media [ 432.685265][T21455] sctp: [Deprecated]: syz.2.4070 (pid 21455) Use of int in maxseg socket option. [ 432.685265][T21455] Use struct sctp_assoc_value instead [ 432.881784][T21461] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 433.301089][T21480] netlink: 'syz.2.4082': attribute type 10 has an invalid length. [ 433.333053][T21483] netlink: 'syz.4.4081': attribute type 4 has an invalid length. [ 433.430418][T21480] batman_adv: batadv0: Adding interface: netdevsim0 [ 433.437347][T21480] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.474948][T21480] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 433.688715][T21488] tipc: Can't bind to reserved service type 1 [ 433.959856][T21509] netlink: 'syz.1.4090': attribute type 5 has an invalid length. [ 434.030770][ T322] net_ratelimit: 48 callbacks suppressed [ 434.030794][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 434.150479][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 434.200727][T15144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.260496][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 434.384434][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 434.444570][T21537] dvmrp6: entered allmulticast mode [ 434.520265][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 434.640185][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 434.877254][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 435.019813][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 435.068880][T21577] can: request_module (can-proto-5) failed. [ 435.149955][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 435.256341][T21591] __nla_validate_parse: 8 callbacks suppressed [ 435.256362][T21591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4113'. [ 435.783818][T21622] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4121'. [ 435.815107][T21625] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 435.903367][T21625] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 436.502404][T21663] xt_TCPMSS: Only works on TCP SYN packets [ 436.533812][T21666] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 436.598090][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4125'. [ 436.900739][T21684] netlink: 'syz.2.4133': attribute type 1 has an invalid length. [ 436.910622][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4133'. [ 436.923831][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 436.939007][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4133'. [ 437.027867][T21693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4136'. [ 437.093977][T21695] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4138'. [ 437.141962][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4137'. [ 437.160772][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4137'. [ 437.201369][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 437.540650][T21725] xt_hashlimit: size too large, truncated to 1048576 [ 437.697314][T21734] netlink: 'syz.1.4149': attribute type 5 has an invalid length. [ 437.867526][T21739] lo speed is unknown, defaulting to 1000 [ 437.932264][T21742] netlink: 'syz.4.4151': attribute type 15 has an invalid length. [ 438.269305][T21761] veth0_virt_wifi: entered promiscuous mode [ 438.477290][T21771] Cannot find del_set index 4 as target [ 438.548169][T10205] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.577076][T21739] wg1 speed is unknown, defaulting to 1000 [ 439.090247][T10205] net_ratelimit: 33 callbacks suppressed [ 439.090269][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 439.145233][T21800] openvswitch: netlink: IP tunnel dst address not specified [ 439.280338][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 439.562981][T21816] batman_adv: batadv0: Adding interface: veth7 [ 439.585715][T21816] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.615298][T21816] batman_adv: batadv0: Not using interface veth7 (retrying later): interface not active [ 439.640638][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 439.750525][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 439.859777][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 440.013219][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 440.308192][T21861] __nla_validate_parse: 8 callbacks suppressed [ 440.308215][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 440.320965][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 440.390183][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4183'. [ 440.455570][T21873] netlink: 'syz.1.4184': attribute type 4 has an invalid length. [ 440.471738][T21873] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 440.491835][T21873] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4184'. [ 440.584139][T21878] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 440.593681][T21878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4187'. [ 440.636647][T10199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.646685][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 440.678097][T10199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.690161][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4183'. [ 440.744068][T21885] x_tables: duplicate underflow at hook 1 [ 440.753466][T21885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4188'. [ 440.762496][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 440.774089][T10199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.819562][T10199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.909566][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 442.142635][T21936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4204'. [ 442.220241][T21940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.443976][T21964] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4212'. [ 442.534749][T21971] xt_cluster: node mask cannot exceed total number of nodes [ 442.709318][T21977] syzkaller1: entered promiscuous mode [ 442.715349][T21977] syzkaller1: entered allmulticast mode [ 443.050537][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4215'. [ 443.063502][T21981] veth0_macvtap: left promiscuous mode [ 443.274949][T21988] veth3: entered allmulticast mode [ 443.307789][T21988] syzkaller0: entered promiscuous mode [ 443.315996][T21988] syzkaller0: entered allmulticast mode [ 444.110194][ T322] net_ratelimit: 34 callbacks suppressed [ 444.110218][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 444.230146][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 444.339654][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 444.444861][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.454218][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 444.599691][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 444.709598][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 444.820062][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 444.929880][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 445.040046][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 445.333502][T21955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.616505][T22022] netlink: 'syz.2.4225': attribute type 16 has an invalid length. [ 445.643432][T22018] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.666376][T22022] netlink: 'syz.2.4225': attribute type 17 has an invalid length. [ 445.700453][T22025] sctp: [Deprecated]: syz.1.4227 (pid 22025) Use of int in max_burst socket option deprecated. [ 445.700453][T22025] Use struct sctp_assoc_value instead [ 445.716881][T22026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.728028][T22018] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.762813][T22031] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4228'. [ 445.803825][T22034] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4229'. [ 446.081895][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.097201][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.151072][T22059] syzkaller1: entered promiscuous mode [ 446.156604][T22059] syzkaller1: entered allmulticast mode [ 446.184418][T22059] x_tables: duplicate entry at hook 1 [ 446.263332][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.272695][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.394289][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.411531][T22050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.555616][T22073] syzkaller0: entered promiscuous mode [ 446.576393][T22073] syzkaller0: entered allmulticast mode [ 447.013681][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4244'. [ 448.212838][T22081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 448.419063][T22102] can: request_module (can-proto-0) failed. [ 448.546536][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 448.561536][T22114] tipc: Trying to set illegal importance in message [ 448.581948][T22112] geneve3: entered promiscuous mode [ 448.620406][T22112] geneve3: entered allmulticast mode [ 448.763741][T22130] unsupported nla_type 33542 [ 449.158698][T22150] vlan3: entered allmulticast mode [ 449.189901][T10205] net_ratelimit: 18 callbacks suppressed [ 449.189923][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 449.350837][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 449.387767][T22165] netlink: 'syz.2.4264': attribute type 3 has an invalid length. [ 449.425016][T22168] netlink: 'syz.4.4267': attribute type 1 has an invalid length. [ 449.490506][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 449.551870][T22176] sock: sock_set_timeout: `syz.3.4268' (pid 22176) tries to set negative timeout [ 449.600113][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 449.608679][T22175] netlink: 'syz.1.4269': attribute type 10 has an invalid length. [ 449.636879][T22173] lo speed is unknown, defaulting to 1000 [ 449.720427][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 449.829640][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 449.942926][T22195] netlink: 'syz.2.4276': attribute type 1 has an invalid length. [ 449.961409][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 449.970412][T22195] netlink: 'syz.2.4276': attribute type 2 has an invalid length. [ 449.981438][T22195] netlink: 'syz.2.4276': attribute type 1 has an invalid length. [ 450.073763][T22173] wg1 speed is unknown, defaulting to 1000 [ 450.080232][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 450.191069][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 450.396453][T15144] IPVS: starting estimator thread 0... [ 450.490950][T22214] IPVS: using max 25 ests per chain, 60000 per kthread [ 451.004509][T22240] netlink: 'syz.1.4290': attribute type 11 has an invalid length. [ 451.337230][T22260] __nla_validate_parse: 17 callbacks suppressed [ 451.337251][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'. [ 451.391273][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4296'. [ 451.461763][T22255] lo speed is unknown, defaulting to 1000 [ 451.468292][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 451.840009][T22281] syzkaller1: entered promiscuous mode [ 451.845549][T22281] syzkaller1: entered allmulticast mode [ 451.947959][T22286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4303'. [ 452.128674][T22293] netlink: 'syz.4.4305': attribute type 1 has an invalid length. [ 452.148693][T22255] wg1 speed is unknown, defaulting to 1000 [ 452.224185][T22297] bond2: (slave gretap1): making interface the new active one [ 452.232795][T22297] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 452.351246][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4311'. [ 452.606620][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4315'. [ 452.624960][T22325] netlink: 'syz.3.4315': attribute type 7 has an invalid length. [ 452.646654][T22325] netlink: 'syz.3.4315': attribute type 8 has an invalid length. [ 452.660191][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4315'. [ 452.723655][T22312] siw: device registration error -23 [ 452.925352][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4319'. [ 452.955075][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4321'. [ 453.034188][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4319'. [ 453.413518][T22367] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 453.414226][T22358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.657428][T22379] delete_channel: no stack [ 453.737371][T22375] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 454.020681][T22398] syzkaller1: entered promiscuous mode [ 454.046654][T22398] syzkaller1: entered allmulticast mode [ 454.076572][T22405] nbd: couldn't find device at index 1073741824 [ 454.329990][ T325] net_ratelimit: 24 callbacks suppressed [ 454.330012][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 454.471561][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 454.533821][T22430] x_tables: duplicate entry at hook 2 [ 454.579523][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 454.684463][T22430] can: request_module (can-proto-0) failed. [ 454.845217][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 454.885166][T22439] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 454.902171][T22439] bond6 (unregistering): Released all slaves [ 455.051830][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 455.189945][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 455.303516][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 455.440422][T22458] bridge0: port 1(syz_tun) entered blocking state [ 455.478206][T22458] bridge0: port 1(syz_tun) entered disabled state [ 455.510532][T22458] syz_tun: entered allmulticast mode [ 455.518719][T22458] syz_tun: entered promiscuous mode [ 455.589535][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 455.699805][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 455.719799][T22465] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.791172][T22465] bond6: (slave lo): Enslaving as an active interface with an up link [ 455.847569][T22465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 456.146125][T22485] bond7: option fail_over_mac: invalid value (16) [ 456.157013][T22485] bond7 (unregistering): Released all slaves [ 457.046689][ T5836] block nbd5: Receive control failed (result -32) [ 457.272843][T22533] netlink: 'syz.0.4372': attribute type 10 has an invalid length. [ 457.341096][T22533] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.401992][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 457.448380][T22535] bond3 (unregistering): Released all slaves [ 457.743562][T22557] __nla_validate_parse: 12 callbacks suppressed [ 457.743584][T22557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4380'. [ 457.780116][T22557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4380'. [ 457.951750][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'. [ 458.122323][T22564] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4383'. [ 458.168951][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4384'. [ 458.178044][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4384'. [ 458.957389][T22603] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 459.005371][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 459.042403][T22599] netlink: 'syz.3.4393': attribute type 10 has an invalid length. [ 459.270861][T22614] netlink: 'syz.0.4397': attribute type 33 has an invalid length. [ 459.278734][T22614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4397'. [ 459.320705][T22615] netlink: 'syz.0.4397': attribute type 33 has an invalid length. [ 459.352712][T22615] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4397'. [ 459.380287][T22614] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4397'. [ 459.521316][ T325] net_ratelimit: 38 callbacks suppressed [ 459.521341][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 459.639843][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 460.400094][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 460.509618][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 460.620190][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 460.729757][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 460.851187][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 460.960824][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 461.070021][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 461.319510][ T1115] bond6: (slave bridge9): failed to get link speed/duplex [ 461.453302][T22671] bond3: option lp_interval: invalid value (0) [ 461.460368][T22671] bond3: option lp_interval: allowed values 1 - 2147483647 [ 461.495747][T22671] bond3 (unregistering): Released all slaves [ 461.523115][T22682] netlink: 'syz.1.4416': attribute type 1 has an invalid length. [ 462.240850][T22721] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 462.288972][T22721] bond7: (slave vcan2): Error -95 calling set_mac_address [ 462.519870][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 462.570928][T22732] syzkaller1: entered promiscuous mode [ 462.597716][T22732] syzkaller1: entered allmulticast mode [ 462.865695][T22751] FAULT_INJECTION: forcing a failure. [ 462.865695][T22751] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 462.915373][T22751] CPU: 0 UID: 0 PID: 22751 Comm: syz.2.4434 Not tainted syzkaller #0 PREEMPT(full) [ 462.915404][T22751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.915426][T22751] Call Trace: [ 462.915503][T22751] [ 462.915541][T22751] dump_stack_lvl+0xe8/0x150 [ 462.915678][T22751] should_fail_ex+0x412/0x560 [ 462.915774][T22751] _copy_from_user+0x2d/0xb0 [ 462.915857][T22751] ___sys_sendmsg+0x1c6/0x360 [ 462.915968][T22751] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.916070][T22751] ? __fget_files+0x2a/0x420 [ 462.916133][T22751] ? __fget_files+0x3a0/0x420 [ 462.916176][T22751] __x64_sys_sendmsg+0x1bd/0x2a0 [ 462.916214][T22751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.916273][T22751] ? __pfx_ksys_write+0x10/0x10 [ 462.916320][T22751] do_syscall_64+0x14d/0xf80 [ 462.916436][T22751] ? trace_irq_disable+0x3b/0x150 [ 462.916492][T22751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.916531][T22751] ? clear_bhb_loop+0x40/0x90 [ 462.916559][T22751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.916586][T22751] RIP: 0033:0x7f510919c799 [ 462.916634][T22751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.916653][T22751] RSP: 002b:00007f510a067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.916713][T22751] RAX: ffffffffffffffda RBX: 00007f5109415fa0 RCX: 00007f510919c799 [ 462.916730][T22751] RDX: 000000002000c000 RSI: 0000200000000100 RDI: 0000000000000003 [ 462.916744][T22751] RBP: 00007f510a067090 R08: 0000000000000000 R09: 0000000000000000 [ 462.916758][T22751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.916771][T22751] R13: 00007f5109416038 R14: 00007f5109415fa0 R15: 00007ffd399f6d18 [ 462.916806][T22751] [ 463.326616][T22761] netlink: 'syz.0.4435': attribute type 9 has an invalid length. [ 463.838454][T22772] __nla_validate_parse: 11 callbacks suppressed [ 463.838474][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4440'. [ 464.142191][T22790] Bluetooth: MGMT ver 1.23 [ 464.232551][T22796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4447'. [ 464.487109][T22806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4451'. [ 464.596774][T22808] bond3: Unable to set down delay as MII monitoring is disabled [ 464.648284][T22808] bond3 (unregistering): Released all slaves [ 464.721182][T22809] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 464.849528][ T49] net_ratelimit: 16 callbacks suppressed [ 464.849553][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 464.900679][T22806] syzkaller0: entered promiscuous mode [ 464.921351][T22806] syzkaller0: entered allmulticast mode [ 464.928646][T22827] netem: unknown loss type 0 [ 464.935135][T22827] netem: change failed [ 465.129639][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 465.166457][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'. [ 465.317491][T22837] netlink: 183120 bytes leftover after parsing attributes in process `syz.0.4457'. [ 465.327621][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 465.399874][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.439924][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 465.549910][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 465.569642][T22858] netlink: 'syz.3.4462': attribute type 9 has an invalid length. [ 465.669883][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 465.779612][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 465.828429][T22869] xt_hashlimit: size too large, truncated to 1048576 [ 466.079593][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 466.201406][ T107] bond6: (slave bridge9): failed to get link speed/duplex [ 466.315906][T22887] netlink: 'syz.4.4470': attribute type 15 has an invalid length. [ 466.523213][T22896] netlink: 'syz.3.4472': attribute type 9 has an invalid length. [ 466.592905][T22899] netlink: 'syz.4.4474': attribute type 11 has an invalid length. [ 466.717784][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4475'. [ 466.781215][T22905] netlink: 'syz.2.4476': attribute type 2 has an invalid length. [ 467.131990][T22922] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4481'. [ 467.432168][T22935] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4484'. [ 467.480478][T22935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4484'. [ 467.582725][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 467.708192][T22946] sch_fq: defrate 0 ignored. [ 467.773137][T22950] syzkaller0: entered promiscuous mode [ 467.778995][T22950] syzkaller0: entered allmulticast mode [ 468.153362][T22932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.347754][T22972] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 468.380215][T22973] netlink: 'syz.4.4497': attribute type 83 has an invalid length. [ 468.418035][T22972] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 468.602117][T22985] netlink: 'syz.1.4503': attribute type 10 has an invalid length. [ 468.617910][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.628626][T22985] bridge_slave_1: left allmulticast mode [ 468.635437][T22985] bridge_slave_1: left promiscuous mode [ 468.641838][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.721037][T22985] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 468.774293][T22998] veth0_to_bond: entered allmulticast mode [ 469.322736][T23024] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 469.377322][T23020] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 469.409616][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 469.575330][ T322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.804711][T23049] vlan1: entered allmulticast mode [ 469.813568][T23049] geneve1: entered allmulticast mode [ 469.932738][T23048] __nla_validate_parse: 35 callbacks suppressed [ 469.932762][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4523'. [ 469.957053][ T325] net_ratelimit: 37 callbacks suppressed [ 469.957075][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 470.100080][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 470.321152][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4525'. [ 470.398109][T23070] openvswitch: netlink: Missing valid actions attribute. [ 470.414385][T23070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.544074][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.567117][T23063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.600313][T15123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.769105][T23063] ip6gre1: left promiscuous mode [ 470.783840][T23063] gre1: left promiscuous mode [ 470.789005][T23063] gre1: left allmulticast mode [ 470.832993][T23063] veth2: left promiscuous mode [ 470.838418][T23063] veth4: left promiscuous mode [ 470.845558][T23063] veth6: left promiscuous mode [ 470.853705][T23063] veth8: left promiscuous mode [ 470.858941][T23063] veth10: left promiscuous mode [ 470.864776][T23063] veth12: left promiscuous mode [ 470.872328][T23063] veth14: left promiscuous mode [ 470.877736][T23063] veth16: left promiscuous mode [ 470.883524][T23063] veth18: left promiscuous mode [ 470.888907][T23063] veth20: left promiscuous mode [ 470.928256][T23063] vlan2: left promiscuous mode [ 470.935038][T23063] vlan2: left allmulticast mode [ 470.940635][T23063] hsr_slave_1: left allmulticast mode [ 470.954592][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.966914][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.982306][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.993656][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.009358][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.011484][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.020516][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.046279][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.056076][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.070160][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 471.162530][T23078] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 471.180199][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 471.299580][ T49] bond6: (slave bridge9): failed to get link speed/duplex [ 471.410671][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 472.608136][T23040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.783658][T23088] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4532'. [ 472.822720][T23090] tipc: Enabled bearer , priority 14 [ 472.870651][T23090] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 472.944071][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'. [ 472.964117][T23101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4537'. [ 473.082437][T23107] netlink: 'syz.4.4539': attribute type 32 has an invalid length. [ 473.106401][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4539'. [ 473.157024][T23107] bond3: option coupled_control: invalid value (52) [ 473.167448][T23107] bond3 (unregistering): Released all slaves [ 473.213184][T23110] : entered promiscuous mode [ 473.511659][T23133] netlink: 'syz.1.4547': attribute type 5 has an invalid length. [ 473.706648][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'. [ 473.720570][T23142] vlan5: entered allmulticast mode [ 473.725965][T23142] geneve1: entered allmulticast mode [ 473.908010][T23160] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4553'. [ 474.012810][T15144] tipc: Node number set to 4269801492 [ 474.134316][T23160] syzkaller0: entered promiscuous mode [ 474.156150][T23160] syzkaller0: entered allmulticast mode [ 474.631194][T23204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4563'. [ 474.686290][T23206] netlink: 'syz.2.4562': attribute type 39 has an invalid length. [ 475.803688][ C0] net_ratelimit: 28 callbacks suppressed [ 475.803711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.820093][T15123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.281939][T23201] ¾x9ÿ: renamed from bridge_slave_0 [ 476.349527][ T12] bond6: (slave bridge9): failed to get link speed/duplex [ 476.440782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.460670][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 476.479047][T23219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 476.635588][T23229] syzkaller0: entered promiscuous mode [ 476.666094][T23229] syzkaller0: entered allmulticast mode [ 476.720544][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 476.736692][T23236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4569'. [ 476.840663][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.923885][T23250] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4570'. [ 477.081042][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.879779][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 477.886183][T15123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.579303][T23250] tc_dump_action: action bad kind [ 478.619837][ T322] bond6: (slave bridge9): failed to get link speed/duplex [ 478.643924][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 478.705637][T23271] syzkaller0: entered promiscuous mode [ 478.720218][T23271] syzkaller0: entered allmulticast mode [ 478.990271][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4581'. [ 479.114376][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 479.181552][T23307] netlink: 'syz.1.4586': attribute type 33 has an invalid length. [ 479.199787][T23307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4586'. [ 479.352289][T23308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4586'. [ 479.387895][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4590'. [ 479.572475][T23331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4591'. [ 479.593499][T23331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4591'. [ 479.641963][T23332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.653673][T23332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.662673][T23332] batman_adv: batadv0: Removing interface: veth7 [ 479.682318][T23331] netlink: 'syz.4.4591': attribute type 21 has an invalid length. [ 480.909884][T10199] net_ratelimit: 22 callbacks suppressed [ 480.909907][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 480.999968][T15128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.029674][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 481.139960][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 481.249850][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 481.359739][ T325] bond6: (slave bridge9): failed to get link speed/duplex [ 481.470113][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 481.580084][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 481.689568][T10205] bond6: (slave bridge9): failed to get link speed/duplex [ 481.799806][T10199] bond6: (slave bridge9): failed to get link speed/duplex [ 482.164662][T23307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.519118][T23358] syzkaller0: entered promiscuous mode [ 482.553959][T23358] syzkaller0: entered allmulticast mode [ 482.603252][T23362] __nla_validate_parse: 2 callbacks suppressed [ 482.603274][T23362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4598'. [ 482.715562][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 482.884798][T23379] erspan0: entered allmulticast mode [ 482.903229][T23384] xt_limit: Overflow, try lower: 271964/0 [ 482.996036][T23387] netlink: 'syz.3.4608': attribute type 1 has an invalid length. [ 483.024736][T23387] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4608'. [ 483.078248][T23387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4608'. [ 483.118323][T23393] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 483.130369][T23393] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 483.138824][T23393] CPU: 1 UID: 0 PID: 23393 Comm: syz.2.4610 Not tainted syzkaller #0 PREEMPT(full) [ 483.148227][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.158316][T23393] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 483.164179][T23393] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 c9 45 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 483.183841][T23393] RSP: 0018:ffffc90003097768 EFLAGS: 00010207 [ 483.189928][T23393] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8880687cbc80 [ 483.197938][T23393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d0a7280 [ 483.205950][T23393] RBP: ffff88807d0a7280 R08: ffff8880687cbc80 R09: 0000000000000008 [ 483.213960][T23393] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 483.221963][T23393] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000612f0c [ 483.229958][T23393] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 483.238909][T23393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.245507][T23393] CR2: 0000000000000000 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 483.253494][T23393] Call Trace: [ 483.256794][T23393] [ 483.259742][T23393] ? __alloc_skb+0x4e5/0x7d0 [ 483.264453][T23393] ? skb_put+0x11b/0x210 [ 483.268724][T23393] rose_write_internal+0x1256/0x1b60 [ 483.274038][T23393] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.279303][T23393] ? __pfx_rose_write_internal+0x10/0x10 [ 483.284961][T23393] ? timer_delete+0x245/0x340 [ 483.289698][T23393] rose_release+0x25b/0x510 [ 483.294233][T23393] sock_close+0xc3/0x240 [ 483.298489][T23393] ? __pfx_sock_close+0x10/0x10 [ 483.303357][T23393] __fput+0x44f/0xa70 [ 483.307403][T23393] task_work_run+0x1d9/0x270 [ 483.312038][T23393] ? __pfx_task_work_run+0x10/0x10 [ 483.317166][T23393] ? kmem_cache_free+0x187/0x630 [ 483.322150][T23393] ? do_exit+0x696/0x2320 [ 483.326510][T23393] do_exit+0x69b/0x2320 [ 483.330704][T23393] ? reacquire_held_locks+0x104/0x190 [ 483.336129][T23393] ? __pfx_do_exit+0x10/0x10 [ 483.340750][T23393] ? rose_connect+0xd38/0x1110 [ 483.345551][T23393] ? do_raw_spin_lock+0x12b/0x2f0 [ 483.350606][T23393] do_group_exit+0x21b/0x2d0 [ 483.355218][T23393] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.360499][T23393] get_signal+0x1284/0x1330 [ 483.365048][T23393] arch_do_signal_or_restart+0xbc/0x830 [ 483.370648][T23393] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.376844][T23393] exit_to_user_mode_loop+0x86/0x480 [ 483.382151][T23393] ? rcu_is_watching+0x15/0xb0 [ 483.386940][T23393] do_syscall_64+0x32d/0xf80 [ 483.391562][T23393] ? trace_irq_disable+0x3b/0x150 [ 483.396609][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.402695][T23393] ? clear_bhb_loop+0x40/0x90 [ 483.407400][T23393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.413311][T23393] RIP: 0033:0x7f510919c799 [ 483.417796][T23393] Code: Unable to access opcode bytes at 0x7f510919c76f. [ 483.424827][T23393] RSP: 002b:00007f510a067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 483.433262][T23393] RAX: 0000000000000000 RBX: 00007f5109415fa0 RCX: 00007f510919c799 [ 483.441257][T23393] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 483.449255][T23393] RBP: 00007f5109232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 483.457238][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.465228][T23393] R13: 00007f5109416038 R14: 00007f5109415fa0 R15: 00007ffd399f6d18 [ 483.473223][T23393] [ 483.476263][T23393] Modules linked in: [ 483.482387][T23393] ---[ end trace 0000000000000000 ]--- [ 483.504041][T23393] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 483.512400][T23393] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 c9 45 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 483.551753][T23393] RSP: 0018:ffffc90003097768 EFLAGS: 00010207 [ 483.558320][T23393] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8880687cbc80 [ 483.572578][T23393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d0a7280 [ 483.573508][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4609'. [ 483.581566][T23393] RBP: ffff88807d0a7280 R08: ffff8880687cbc80 R09: 0000000000000008 [ 483.600350][T23393] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 483.608640][T23393] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000612f0c [ 483.617234][T23393] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 483.649672][T23393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.656427][T23393] CR2: 00007ffefadb5000 CR3: 0000000076e2a000 CR4: 00000000003526f0 [ 483.665644][T23393] Kernel panic - not syncing: Fatal exception [ 483.672368][T23393] Kernel Offset: disabled [ 483.676701][T23393] Rebooting in 86400 seconds..