last executing test programs: 2m39.296197854s ago: executing program 0 (id=7260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x12a0}}], 0x2, 0x4000041) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2m39.24932979s ago: executing program 0 (id=7261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x24000004) 2m39.132391076s ago: executing program 0 (id=7263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) 2m39.115823013s ago: executing program 0 (id=7264): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xfffffffb, 0x5, 0x7, 0x3b, 0x1, 0x1, '\x00', r2, r4, 0x2, 0x1, 0x2, 0xe}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) unshare(0x22020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, 0x0, 0x4}, 0x20) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x3, 0x100) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x66}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @void, @mpls={[{0x9}, {0xd79a}, {0x8cf4}, {0xc2}, {0xa}], @ipv6=@tcp={0x8, 0x6, "b7b8d1", 0x150, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, {[@routing={0x6c, 0xe, 0xc8f31d8550f1c839, 0xa4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @remote, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @broadcast}]}], {{0x4e22, 0x4e20, r7, r8, 0x0, 0x0, 0x12, 0x40, 0x3, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x2}, @eol, @exp_fastopen={0xfe, 0x13, 0xf989, "74e135fd60d0f8424a0caa22efa518"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xe, [0xffffffff, 0x8, 0x8]}]}}, {"c1a6935414e45535ff70c8191bd45a3607e015f45a69fa5db97ee716a7614e9d9ea5ceba19fdb4158dfd091bcfcfa63d70a7e8fea63ca7c7113575cc2aaa5dea1e5464fab48f3454679bf6f996e1a0ddbba914a5e596b2cdbc8f1682275625e10980a013aa41a53d773b82d59fff6e06a4dc9f6578ece85688b4557e402a55acd2aa8554c3987e9f69114764c22ac256"}}}}}}, 0x18c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000e218110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2m38.084016004s ago: executing program 0 (id=7281): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000740)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x1, {0x0, 0x1}}, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5058156}, 0xc, &(0x7f0000000b80)={&(0x7f0000000780)={0x3c4, 0x33, 0x800, 0x70bd26, 0x25dfdbfb, {0x1f}, [@nested={0x8, 0x53, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0xcc, 0x5f, 0x0, 0x1, [@typed={0xc7, 0xfd, 0x0, 0x0, @binary="c89f07a7528b3e35fae7422b9ed7f07e044bf67f60b47101685385499535106b8e64234cab78d930d1f44b53155a9be685a7c52615cc0fee1946a69aa7af43480d84784a99fe5e1d92fa803f2f9655f1a770bded845d42882056482daf61946f0864daffad3d37ae133e81d3da700fdd345a59de11aa63a0c0d9956cafcc4e65adacc0938a19a00c96032a4c4aadc1fac888510e4dbdd1e2aa05215ecb8cbdb11b2ab34ef0b92bed1dffd1ad713fee024d04eb17015b877e5e7f866d9dd99fbc77b3c3"}]}, @generic="ae006d3bf17c0191676cbff9c4dfea5a71ae1092e785785343bb5a782508a353c3076c5f2c258c7cb81ec57a421001e36d38f1c6309af1dad3e91a87b9d07a05ae18711160428f0bea1ae65bfdd39cbb59a6bb4caf789b0d4c112a6368c7988caff13c4e5ee4c8f88effe9740c65994009b92f41daa4b730d6f1083a963cb73cf4314affac3dc03eb762c964908ca8ee6c7dc3c5cb36b110d5d8af8f82b7336d3d9192ef135b46325ce2a5ead55ffb40f7747bce8b4eb81c4fec5f2e64c2", @nested={0x8e, 0x1e, 0x0, 0x1, [@nested={0x4, 0xc2}, @typed={0xc, 0x22, 0x0, 0x0, @u64}, @generic="c627c846d3315d7295ba189f897ca7a1066cdded2e46beb8165f5908dfffc6d12a5b8452d093706f282b922ea73dd3f1be3940ba95e7f6a2c5f5d9f5521b927f9f2318b0c7f13e5ae39719a97770e2dc6de5d34921af10dcbc5323106d57ec7462edd500cfac", @typed={0x4, 0x8a}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x102}, @nested={0x4, 0x1e}]}, @nested={0x18a, 0xe9, 0x0, 0x1, [@generic="c714ba1fca36c105c7f5129eb4e412c9f697c44bd3b747c55cfbc710c1b612c446da17e20701c8a34dfd205337a8f1aa351276df21b3119a925b00755175cee95edb78740b5d72b4319e6b07d6d799a8cc6fbf92541f2f0f850cbcc3d5f7da17ed55b511cbc99d8d8eeda9cba02776840adf70b0168ef210985adcfb5f4bee9791e77e92accb09d52e64747eeaef0f6b719f07735278dcdb68379b7a10488d7767caa0a7e754a4810fcdaea95271096af3de5c59b4458be8667330e058fdd4a5a92e6f5b43c1c1e90c", @typed={0x4, 0xda}, @generic="c4501de11309d730d6bdd17f857d4ffd81", @typed={0x8, 0xd9, 0x0, 0x0, @u32=0x2}, @typed={0x9a, 0x24, 0x0, 0x0, @binary="c3442ec3dff8f97ce98dcdbde44ecd8a99cfe5da77d855552ebfcf2db0529597e88f11ed80a9ab40acce0224eeaa42df7b93b1b9df9b5b051c2f36f193aa1fdc7861bdcac9d436a52d814cc0f19971b52c4751a4fe304aa8c8148ffc7130004c3b438bacd24ad7f374e6ccb3c67cd76d4539062e1f7e010511d383582af5b5d0ac5785678b67e62ab47b9adaf7bf4b415db1b85f32b1"}, @nested={0x4, 0x12e}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0xc810}, 0x40000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x44, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080) 2m34.843470304s ago: executing program 0 (id=7297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x3f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m27.036271819s ago: executing program 3 (id=7388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x5c}}, 0x4000) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) 2m26.782025694s ago: executing program 3 (id=7392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) r2 = socket(0x2b, 0x2, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4881) ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000000116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000e5ffffffffffffff0000000000feffffff00000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000ffffefff00000000000000660000000000000000000000000000000000000000fb280694000000000000000000000000fcffffff00000000"]}, 0x108) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="0800040036ee", @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2m26.476392033s ago: executing program 3 (id=7398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000f287a0060f060800451400303a6b"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) close(r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd25, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000040) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070026bd7000fddbdf2505000001180001801400020071797a5f74756e000000000000000000050002000a0000000800050010270000"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001f77e2c2f7d6ad26fa013091796266bd0000000000000018005a1dfce2f3ee2b5b0d12", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 2m26.339065893s ago: executing program 3 (id=7400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x0) 2m26.085634941s ago: executing program 3 (id=7402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m25.832690165s ago: executing program 3 (id=7406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2m18.755423898s ago: executing program 32 (id=7297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x3f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m10.656847425s ago: executing program 33 (id=7406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 6.461997356s ago: executing program 1 (id=8477): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) 6.375877175s ago: executing program 1 (id=8481): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getaddr={0x64, 0x16, 0x200, 0x70bd2d, 0x25dfdbfe, {0x2, 0x10, 0x50, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8}, @IFA_BROADCAST={0xffffffffffffff23, 0x4, @remote}, @IFA_TARGET_NETNSID, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LABEL={0x14, 0x3, 'geneve0\x00'}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x4e800) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), 0x4) 6.361963232s ago: executing program 4 (id=8482): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000001000018000000010000000a0000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8948, &(0x7f0000000580)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @multicast1}, {0x306, @local}, 0x2, {0x2, 0x4e23, @empty}, 'pimreg\x00'}) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 6.175752331s ago: executing program 1 (id=8484): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) listen(r1, 0xda8c) accept4(r1, &(0x7f0000000340)=@nfc, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet_sctp(r5, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x8000) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072", @ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5.974735956s ago: executing program 4 (id=8486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = socket$inet6(0xa, 0x3, 0x80) getsockopt$sock_buf(r8, 0x1, 0x2b, 0x0, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pread64(r7, 0x0, 0x0, 0x100008) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) socket$inet6(0xa, 0x3, 0x80) (async) getsockopt$sock_buf(r8, 0x1, 0x2b, 0x0, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) (async) pread64(r7, 0x0, 0x0, 0x100008) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 5.896548376s ago: executing program 2 (id=8487): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 5.889832033s ago: executing program 1 (id=8488): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 5.671494586s ago: executing program 2 (id=8490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x8, 0x0, 0x7f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r3, r0, 0x4, 0x2000, r0, @value=r4, @void, @void, @void, r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x5c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x5c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x0, 0xf, {{0x31, 0x4, 0x2, 0x33, 0xc4, 0x66, 0x0, 0xb, 0x2b, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x17, 0x29, [@local, @empty, @loopback, @remote, @multicast2]}, @ssrr={0x89, 0x1b, 0x5e, [@multicast2, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @initdev={0xac, 0x1e, 0xff, 0x0}]}, @generic={0x86, 0x10, "3ea0195270611ad984c72b061115"}, @timestamp_addr={0x44, 0x4, 0xb1, 0x1, 0x7}, @cipso={0x86, 0x52, 0x3, [{0x6, 0x11, "afb3c623cada8080950760a31afe64"}, {0x5, 0xd, "b15243ec550554db4b4377"}, {0x5, 0xb, "b07250ae953a456e02"}, {0x6, 0x11, "77f3cbc55f6b7f503acf87ea0bdd7e"}, {0x1, 0x12, "b5608ff27b8b25d208b58eca4ab05223"}]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x0, [{@multicast2, 0x4}, {@loopback, 0x6}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000000200000900000046000400", @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYRES32=r13, @ANYRES32, @ANYBLOB="050000000200000a01000000011c00"/28], 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) 5.670603527s ago: executing program 1 (id=8491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x1284}, {r1, 0x4200}], 0x2, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6(0xa, 0x0, 0xe256e000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="a1e0afd9525b"}) write$tun(r2, &(0x7f0000000980)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d588dc050391"}]}}, {"afa291467dfb807cc0347630f9677d68f9af4f18a29fadc6f22c864cd82fdece51ab078792d531cc82074e036cb18781a7536ea61b5dae"}}}}}, 0x85) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf251c0000000e0001006e657464657673696d00006e657464657673696d30000008000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x10a, &(0x7f0000000740)={@multicast, @empty, @void, {@x25={0x805, {0x2, 0xfc, 0xff, "577558b639cc64aa8efa5fc9a2a050be50410a3f1d3d70cba7064882b3db9b259b6a24cf57cdca13b2f36e89244cac821d950d59e1850877cdcaffbe60f29daa6024e896c90f35558aff1513b41f21325a73db8c11e8c74f1f3b2cccf0542852b7507d60e1b0d7e3272d01bd73d270d47080fd5ed924175a426010f28525b9aae1944a1f6f6535be727021dec3a2ed985147cd99b4f2dabddeb5ac14685d06e66cd847dd46aae0a0d4a16fec4a63f29b42cd79406556c6634ab419ef8f9d4a47aa62097e160c8e550e42c3cd618a3cf4da1a7d89d8894a084c223fc2e44c078a9d8ed75ef043319400f210648514e3174e333e0b4bfc2e9e35"}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000000000064010100070300070300443c00030a01212f000000000200ac1414aa000000000000000000000000ac141400"/116], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) r10 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0), 0x4) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="010000004008000000000000000000005f18ad39434071fea1a942b7d7719c5d520cbf29c0e49cb9d40c30cfdaa38370e1edb5d5f038c90f14bd9129ad2909a687685c3b3c6272f35f10518d77329fa044752cd0f2bd368823cc08e39267868bacf60bfcc94b6c760c24d37569fc65a677d5c4b36d2ad22ba4965f649e6d4de59c05222e5053d5e0505726157c1b8ec80d76144c28eddafab40d2381798879543dabe3a2ca877c9700e368aa50d8484feb9b681ec06d9c17", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000500)={@mcast2, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d00)={0xd4, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x444}, 0x0) 2.024959146s ago: executing program 2 (id=8494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa10000f1b9f7f284dfffdb3f59360000000007010000f87cffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRESHEX=r5, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRESOCT=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x200, 0x42}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x19af7f58d24b3d6d}, 0x8000) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r14 = accept4$alg(r13, 0x0, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r14, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r16, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r15, 0x400448c8, &(0x7f0000000180)={r16, r16, 0x7, 0x1, &(0x7f0000000240)='l', 0x7, 0x4, 0xc45, 0x7, 0x3, 0x3, 0x2, 'syz1\x00'}) 1.990553162s ago: executing program 6 (id=8495): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfff7}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) (async) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000300)={r7, 0x9}) (async) sendmsg$AUDIT_USER(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbff, "7e83fa9c4f69b3bc664122241c86717411976d2076", [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004020}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8e43abdf3a054df0}, 0x20000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) shutdown(r7, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000700)={&(0x7f00000006c0)=""/17, 0x11}) (async, rerun: 32) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=0xffffffffffffffff, 0x4) (rerun: 32) pread64(r11, &(0x7f0000000780)=""/213, 0xd5, 0x8) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r12, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x240004c0}, 0x4044050) (async) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r13, 0x89e0, &(0x7f00000009c0)=0x6) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, &(0x7f0000000a00)) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r5, 0x501, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x11c, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x144}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffaa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xdb3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffa}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4022}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1a000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc35f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x700}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa6d0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xccf4}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008834) 1.87045498s ago: executing program 6 (id=8497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}}, 0x0) listen(r4, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.721104136s ago: executing program 6 (id=8499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000002c00)={@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, {&(0x7f0000001bc0)=""/4096, 0x1000}, &(0x7f0000002bc0), 0x43}, 0xa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.640635351s ago: executing program 5 (id=8500): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000001780), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 1.566506711s ago: executing program 6 (id=8501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x180000) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000020900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000038000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xc0}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 1.463552257s ago: executing program 4 (id=8502): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x11, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0xd, 0xfffffff6, 0x0, 0xffffffffffffc148}}]}}}]}, 0x78}}, 0x20000040) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', r9, 0x7, 0x40, 0x1, 0x5, {{0x15, 0x4, 0x3, 0x2d, 0x54, 0x64, 0x0, 0x10, 0x4, 0x0, @private=0x2, @dev={0xac, 0x14, 0x14, 0x1f}, {[@end, @timestamp_prespec={0x44, 0x3c, 0x31, 0x3, 0xd, [{@local, 0x3}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x1}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @dev}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0x1c, 0x2, 0x5, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x20, 0x2, 0x2fbe}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000080)=""/137, 0x28, 0x89, 0x1, 0xa6f, 0x10000}, 0x28) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0x1, 0x6, 0x10002, r0, 0x1c0, '\x00', 0x0, r13, 0x3, 0x5, 0x2, 0x1, @void, @value, @value=r14}, 0x50) 1.349751364s ago: executing program 5 (id=8503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.278240019s ago: executing program 6 (id=8504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r5, 0x0, 0x3ffffffffffffa) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x400, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x401, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x33, 0x0, &(0x7f0000000080)) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa0100ff}, 0x10, &(0x7f0000000480)}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="0a11b1b9aa536aea34e06ba6d75b0ccebe184ff3a10eb7e7b9616649de22fa413b731fda55caa65534ae62581d4e2e4eadfbc8ac631128fa33d3c2bc0a87e97717dad7d265ad233a8e464ba81a21e72e5d90967aa46de2be16a3899090f8511b8f45d7b4b570fa47ddbc29d9883a5da63dd915827983be8fb09b602c2caa8b08953490aa70c968f277e080a0fb7a5fe9dabbe3a5c92a6a611eea90176f9d5343de04", 0xa2}, {&(0x7f0000000180)="fbaad5a7a7277e7db4f9996136e7b630a3bfc02afd350e420f250801d3d9cd9a163d2eddd41e1bad6a1446b21b84d6a93dbc074d345dd0e1f26f200b60956dcfad95d9ed2534490b8c885fe9310684abb27edf187e06317ec6bca1a00550fc3e0cfae73c696fd1e8c23736149970676962bf9c3616db7833bade1ba3dea1124f54b5a88089954c338f70864634f320bb1adea8e7ac75af6d7b16c1fdbf0e8e9fb7ad00042a73769c505076b425ff0321ea1bac4a55c7c0398e776db56cd582e2ff7d7196b3c0", 0xc6}, {&(0x7f0000000280)="2b333ac7840a97e13c57e335c48b7f0cdcbdbabd5f1446e98f61cea695934f81f9000ea171903e5518dd48a4f28e1851fceb42be14e61f052f230574d46be04c3077f08ae21b1c7a1a2a98a44765c82a4f8e8a21d5a764f804f613a24503fa8c7a3d53a1ba883e57b09f205c923d099a8b5688d194e3c96c38203a27383997669208d0fa94327e30eca1967c3f7a05f0accaa16842a94c6f93ea8b0dcba60e757dd1ef2dea6d8c9f37e0aed3a366a86e7ff984687b45ab06ad8c22aceb48ebb3", 0xc0}, {&(0x7f0000000340)="52726f0695d3a7a1d7e3f9907b7624ca566813b0531f27cf57dc48e95ad937f7993d5ff2b2d23c733e09e9b81bf25b8765dfaa578bd54f8db5fc9e1c465c3686056076909ae637d3fcfc9f18b50266a659a2dad43d367006458ee1daae5a8ab8836ac2266ee4c33490629f1b39f811dae574d63e6290a624944d0dafff805a7bd839b85401c346c68f0464643168bfbdc73f978b17c1f8e7c27dd0a025d08c67a0a34e2a2387b59174ce71ae86950f71e34b2a51a7492780a0fd8eb768836611", 0xc0}, {&(0x7f0000000480)="0e33cd560acb3ea7d6eaaa700d168d5b2e29059349bdfbbc2efe8a0e01881f734d0b2fbee7c11c0db6337d7ea4c9fb8583cacd15b5ccee50d1bcb53114093f2582670efbc1807dcc3a5bd36c9056bf421c9b6ec0cdd621ef8618da5f56d1", 0x5e}], 0x5, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4da}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xee}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_retopts={{0x13c, 0x0, 0x7, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0xb, "152817b0cb464266c0"}, {0x6, 0x4, "9b9a"}, {0x1, 0x5, "7bf5fc"}, {0x0, 0xd, "097ad36ee8eda707fff06c"}, {0x2, 0xa, "5a0edafceb55879b"}, {0x7, 0xb, "b8d1735af98784bf25"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x6, [{@empty, 0x10000000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x73, 0x0, [{0x4, 0x10, "54c525265396633e57d3cbde361f"}, {0x2, 0x9, "aad549549e3890"}, {0x2, 0x11, "d630836b520143612cc5179a3071d1"}, {0x6, 0x10, "ee714809f8eb5d123d03a8ed0891"}, {0x2, 0x5, "33cd64"}, {0x1, 0xa, "3d053d0c5026e032"}, {0x6, 0x7, "591abe4572"}, {0x2, 0x10, "26b6221ca3ce47e24a49b8602be9"}, {0x1, 0x6, "a34bb851"}, {0x7, 0x7, "88981d459e"}]}, @timestamp_addr={0x44, 0x3c, 0x7a, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x6c}, {@broadcast, 0x2}, {@empty, 0x7}, {@loopback, 0x81}, {@remote, 0x2}, {@broadcast, 0x81}, {@dev, 0x8}]}, @timestamp_prespec={0x44, 0x2c, 0xb2, 0x3, 0x4, [{@multicast2, 0x5}, {@multicast1, 0x6a2b}, {@rand_addr=0x64010101, 0x6}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}]}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@cipso={0x86, 0x3a, 0x2, [{0x7, 0x4, "61c4"}, {0x1, 0x3, 'Z'}, {0x5, 0x4, "739d"}, {0x5, 0x4, "e126"}, {0x2, 0x3, 'o'}, {0x7, 0x12, "5f12931461a18fffdd3d71baf47fb767"}, {0x5, 0x10, "256a40e404e70bc832b118017f61"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x6, "1b75165d"}, @end, @timestamp={0x44, 0x8, 0xab, 0x0, 0x6, [0x940]}, @end, @timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0x2, [{@remote, 0x8}, {@local, 0x8}, {@local, 0x3}, {@loopback, 0x1}]}, @lsrr={0x83, 0x13, 0x67, [@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x14, 0xa6, 0x0, 0x1, [0x3217, 0x8, 0xe, 0x6]}, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x5, [0x8]}]}}}], 0x258}}, {{&(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f00000009c0)="a4e78f692ab4fe4e6033100085303c6ee7afb23d41cb4255bc69bc5d152b4863babf4e911b23d4f2c42af6190e66b8285dbc84b776b534904bfc116b399333dd724a80959761783862eb9e5400bb15d517e7fdaffdb37e70bb356b771a34f4792e44781a643c1e2a7b06dd886e57d82acc1dca8678885360a6cdb6267c69", 0x7e}, {&(0x7f0000000a40)="844b51b9d95b8fde02503dbef7b99bc70a86731bd403cc9b52a198cc74a192f20a942360fd3d588c66a92035c09c3f000ef14a699945582b6d59ae4afb945961b5d90b9e96544afcb4701d311fdc446d1179d3fad2b7109653a2372533af", 0x5e}, {&(0x7f0000000ac0)="bf0e20438281d988267a51c0a82c63f1aed99a5740ab05bfb4dc0eb7977b051dec6e136375d0fde9e531368253d875cb83049121c0fb777cd923afbda5272b74d95d754867510a4645157993e32f2281e2a77dd4845e187ddde31a1f0fde41dd9a99178486d3482aa4aa92beb196adb5e4d1f15e80da72e9a860ec41f7768b78abe66608a83343e18f126921c7aba9cdb7164ba51ed39504aabfaeca426699a3df2bf53cacfddbadc9f3868efcba3900144a2ff6", 0xb4}, {&(0x7f0000000b80)="5ebab7b55c7d7dd48f8aacdd5cb908b3a71ad44ae47620f3723d5f706b1af2fc38a0960aee44b0119b296660c6972506c02e3a0cff6060907fa14fc2c650ce5cc6692ad190da96a300fa6a5afed58e8aadc6fc1b72b43c3fa3874561d1a93209dd1a18cfae776d644c2f5e478313708c64500c26afc79c3a2e01589f0bd79123d57c17", 0x83}, {&(0x7f0000000c40)="02789c20a8b501b36572fe8d331d7c139507e35ef3780599c972c84af5db7eff431ee03872af16c4c0d1d4f6ebdf042ca35ae2f9a01bac5aa8ccc4c21db6133c567d3c1f0e86f0ace00e82", 0x4b}, {&(0x7f0000000cc0)="28b0de263eb6ecb2a95e649c003ea43db285826af85fd33a1f97e3fe8b0eb82666f29f221d5a55e12926f8faed180386ba6c6e05ba95abaca72ead0022b3ba73cb319464d13f875f5ccc743d1e1e34083e5da5656c8da29b8f9695f9dac10eeee21811cedb22a1eeb3263df3bce7aaa4b3d7bfe4dbd05a281d552fd1ad0427218b2ca1a12a74163f5dca71e12c469370", 0x90}, {&(0x7f0000000d80)="46d4c7e8439f2a3698b3fd50d96bee787c559699f78ddb3fdee5139b07bb09285113399feef456d34694f2ae36077fb914f1701b7a6c124ab91436b367cdbe6349c7f27e37fa87725198429cb584aa6235ccbad2c9f0c2c97f86b004a2768032c146510c03907d5891b1f6f89f0aecb2210141b02f46eb245de8a699eb364fdb52ff9b2b3419fa68abe215b83821e2a8034d9fdca7bf7db060db6f28d73545337dbdb771da67fd", 0xa7}, {&(0x7f0000000e40)="97abc138501924ea8b86092c81a197a8839ffc6a42bd0c0fb8a690078f1055cc318856cfea07721d82d847ba632c9aa3996fd83048b2b4ad0617de9bb102ebbdaf6e38a16e10bff82600517432d98e8b65b9849f0800312bd65172f8667e19fb009078e6def81a843337545d91266f384a073e1e1cff14a6bcf65f8eb3e1000c201f9a681b99a8f362fb663fc2b39aafbfc43e119d23b90f5ccb1a50fb9c", 0x9e}, {&(0x7f0000000f00)="51251b09fe06d10d544fe12c90506cb112", 0x11}], 0x9, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @broadcast}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@rr={0x7, 0x23, 0xe, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @empty, @loopback, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x4c, 0xa0, 0x3, 0x8, [{@rand_addr=0x64010102, 0x5}, {@multicast1, 0x40}, {@empty, 0x6}, {@broadcast, 0x3ff}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x8}, {@loopback, 0x8}, {@local, 0x2}, {@empty, 0x1000}]}, @ssrr={0x89, 0x7, 0xed, [@remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x110, 0x0, 0x7, {[@cipso={0x86, 0x51, 0x2, [{0x6, 0x4, 'Sr'}, {0x0, 0x5, "180d1f"}, {0x5, 0x6, "0f1c320e"}, {0x7, 0x12, "90da98b639b1908895194ba88b457bcc"}, {0x2, 0x8, "75c1ae0e588c"}, {0x7, 0x11, "2c3c2ca76e964c28f3043966147eb4"}, {0x2, 0x11, "601f8b4e0c84b997308c6ba8b79605"}]}, @cipso={0x86, 0x13, 0x0, [{0x6, 0x5, "30bc75"}, {0x6, 0x8, "529074cbf6b3"}]}, @lsrr={0x83, 0x13, 0x9f, [@local, @multicast1, @remote, @private=0xa010101]}, @cipso={0x86, 0x19, 0x1, [{0x2, 0x3, "b7"}, {0x6, 0xc, "e7d7e1d513785883cf25"}, {0x6, 0x4, "00f3"}]}, @lsrr={0x83, 0xb, 0x4c, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0x3, [{@rand_addr=0x64010101, 0x2}, {@remote, 0x1f2}, {@private=0xa010100, 0x10000}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0xb}, {@multicast2, 0xb515}]}, @end, @lsrr={0x83, 0x1b, 0x18, [@local, @dev={0xac, 0x14, 0x14, 0xa}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback]}, @timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0x6, [{@local, 0x1}, {@broadcast, 0xa}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x1e8}}], 0x3, 0x8001) 1.119936632s ago: executing program 1 (id=8505): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'geneve0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff11125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 1.119213872s ago: executing program 5 (id=8506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 1.092135779s ago: executing program 4 (id=8507): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101fdffffffffdbdf252b00000008000300", @ANYRES32=r1, @ANYBLOB="04004600050034006e000000"], 0x34}}, 0x20004800) 1.037919494s ago: executing program 2 (id=8508): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341d13d244359718ac3dad595712a4051bb6cf826ab757193fc093b8b3353fbbb278d19000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c230f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280dac7fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d8fc9a28c6b8e00250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02c0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1e88f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae65e9f2cc9a5129e385b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de817394eb580240d556d0f0b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c3b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea643a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d68ae194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543bf74fd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b1366c71420b339ec1295f79b1516723b6b80a7e99e5aa6536982c02275fc53fa3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0bf14a8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e56283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b577bbc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000000000e4965fcb6c2749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a96bf47f7085e7eecdfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b380add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c17ef537fba43aad323f552c01e17514d5db387e4bf9341ccf5931fc75350f8dcef3ed3e74d674865249b879466f0e3cf0dc9e3d8720ea261e6996b844501e374a0e9878c1d02fd3d6e2ae5d7677892d7a5cdf4b7fa8f315b41552d07495f034e1fa0a2c9a34b7f66638e775dacb33e9b5cd3f4193bdebb7e86090dd265ee2b3ca9bd32d19ef229a050e910263d916670d8006067f5c0a1d8219b4a74b6092656f3b96f060000005ca3eca5d6295a1c11be907fad3bf9ccdf9898a084bbcc0a3714691c6c28fc34c44f9a46d6caf3b93d5d9ad8e3a25d34da57b203af917f5359952468fcddbf43d8fd1add972fd5d361c5be3e8b3280bbfa97e9826163537c99ff461123a1d9f93880feb5f953217f1e633bfb221a7822513278c36abcb6a4009e5037b3f56f9172bd70331817862c5e129d830d4f13e9793dad49b6bf286d2a539d089393d481931735a544f4e86b51a91106ce86d278a0712eab917d843ecc7d031e99d230689210e5afbcbb0a6cff33b40e7b637a8171d7b28fcaee54bb0fb7e2dd92c6cf2130f9fa4482512ae356c5907533108113a9a98b0508e4041df8e99b4136a66f58a6e91e2017dc7e095e8e4776d396797e089e9b42fdee33e76c28a636893510ed71166086bb4c1f3363dfd0abf0b2ea8ceba68c7d9a22a8342059862985d987083d80761bd699c3ee77473263a77ea65eac8a4c3b6b87f399575a15a2db143f6aac363644fd45372d6f43baebc7c3547780d1d079e225962733e0c0d3f364cbe9bcec7caaa8d372da63b213d4554e9ced54c2d59a97b814f1d700"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c0002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f000000000014"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4(r6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 871.832866ms ago: executing program 4 (id=8509): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) 830.68736ms ago: executing program 5 (id=8510): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c001900"], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) write$nbd(r3, &(0x7f0000000400)=ANY=[], 0xb4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x4, 0x70bd2b, 0x25dfdbfd, {0x7, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x46c80) 581.317912ms ago: executing program 4 (id=8511): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="e99f5b3429d5b159976814a531e236c6d9d772b384225435f73ec1e69d5cc5844b9267fff858b232bf0766334aac3834dc3838990df7518d446d8af9e6e8d2611e4c33f7c8adf808ffbdae794c4821b406366caf3a949d4c817198"], 0x50}}, 0x0) 504.567104ms ago: executing program 5 (id=8512): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) 314.980506ms ago: executing program 2 (id=8513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x7742, 0x6, 0x3, 0x20010, 0xffffffffffffffff, 0xf7eb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) socket(0x2, 0x80805, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast2, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(r4) 293.71409ms ago: executing program 5 (id=8514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0x5}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0x5}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170928bd7000ffdbdf25010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r9, @ANYBLOB="4047e013d51675abbb374967f6f62c17d9866c0b44c148e338820186b6ab21ca8dcb408beddb3d142421302d2d6e30c8e39a74e6c2de2d25572352a86a47d6e3f60fe8dcfa5e2fdf0551f75e32d012493288a27add5921d7ec1426e7be122ac4f975"], 0x3c}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170928bd7000ffdbdf25010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r9, @ANYBLOB="4047e013d51675abbb374967f6f62c17d9866c0b44c148e338820186b6ab21ca8dcb408beddb3d142421302d2d6e30c8e39a74e6c2de2d25572352a86a47d6e3f60fe8dcfa5e2fdf0551f75e32d012493288a27add5921d7ec1426e7be122ac4f975"], 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x44}}, 0x26044804) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r12, 0x11, 0x66, 0x0, &(0x7f0000000b80)) (async) getsockopt$inet6_udp_int(r12, 0x11, 0x66, 0x0, &(0x7f0000000b80)) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 552.986µs ago: executing program 6 (id=8515): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 2 (id=8516): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) kernel console output (not intermixed with test programs): it in 0 ms [ 934.888371][ T9540] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 934.910555][ T1094] __nla_validate_parse: 3 callbacks suppressed [ 934.910574][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7337'. [ 934.931508][ T1094] netlink: 'syz.4.7337': attribute type 1 has an invalid length. [ 935.019625][ T1099] Cannot find del_set index 4 as target [ 935.028834][ T1099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7339'. [ 935.098349][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 935.114267][ T1094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.121952][ T1068] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7334'. [ 935.148910][ T1102] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 935.512005][ T1115] veth1_macvtap: left promiscuous mode [ 935.517555][ T1115] macsec0: entered promiscuous mode [ 935.522795][ T1115] macsec0: entered allmulticast mode [ 935.532031][ T1115] veth1_macvtap: entered promiscuous mode [ 935.537808][ T1115] veth1_macvtap: entered allmulticast mode [ 935.561926][ T1115] macsec0: left promiscuous mode [ 935.568053][ T1115] macsec0: left allmulticast mode [ 935.574260][ T1115] veth1_macvtap: left allmulticast mode [ 935.601592][ T1118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7347'. [ 935.712701][ T1123] gre2: entered promiscuous mode [ 935.825916][ T1131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7350'. [ 936.089279][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7354'. [ 936.248371][ T1157] lo: entered allmulticast mode [ 936.268060][ T1161] syzkaller1: entered promiscuous mode [ 936.276024][ T1161] syzkaller1: entered allmulticast mode [ 936.301162][ T1154] lo: left allmulticast mode [ 936.530626][ T1173] xt_ecn: cannot match TCP bits for non-tcp packets [ 936.582150][ T1011] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 936.753190][ T1182] geneve3: entered promiscuous mode [ 936.759641][ T1182] geneve3: entered allmulticast mode [ 937.242450][ T1166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.390151][ T1232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7379'. [ 938.634236][ T1248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7384'. [ 938.702242][ T1249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7385'. [ 938.711682][ T1249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7385'. [ 938.971217][ T1264] netlink: 'syz.3.7388': attribute type 21 has an invalid length. [ 939.323078][ T1282] xt_l2tp: invalid flags combination: 0 [ 939.388931][ T8522] net_ratelimit: 64 callbacks suppressed [ 939.388954][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.438793][ T8522] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 939.574803][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.606019][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.668011][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.695263][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.734686][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.759946][ T1011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 939.894696][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.915698][ T1011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 940.025453][ T1329] __nla_validate_parse: 55 callbacks suppressed [ 940.025477][ T1329] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7404'. [ 940.389374][ T1344] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7409'. [ 940.416808][ T1347] netlink: 'syz.4.7410': attribute type 1 has an invalid length. [ 940.425655][ T1347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7410'. [ 940.453278][ T1348] netlink: 'syz.4.7410': attribute type 1 has an invalid length. [ 940.464934][ T1348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7410'. [ 940.580331][ T1353] syzkaller0: entered promiscuous mode [ 940.592891][ T1353] syzkaller0: entered allmulticast mode [ 940.795791][ T1362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7414'. [ 940.821728][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 940.832409][ T1356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7411'. [ 940.938743][ T1368] netlink: 'syz.4.7415': attribute type 8 has an invalid length. [ 941.117928][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7417'. [ 941.128000][ T1373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7417'. [ 941.324587][ T1379] syzkaller0: entered promiscuous mode [ 941.336237][ T1379] syzkaller0: entered allmulticast mode [ 941.443480][ T1381] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 941.745705][ T1388] netlink: 'syz.1.7422': attribute type 10 has an invalid length. [ 941.754542][ T1388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7422'. [ 941.829775][ T1388] team0: Port device geneve1 added [ 941.985237][ T1400] syzkaller0: entered promiscuous mode [ 941.990779][ T1400] syzkaller0: entered allmulticast mode [ 942.335072][ T1409] bond2 (unregistering): Released all slaves [ 942.389144][ T1411] IPVS: length: 24 != 12312 [ 942.669294][ T1417] syzkaller0: entered promiscuous mode [ 942.675901][ T1417] syzkaller0: entered allmulticast mode [ 942.861685][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888054c08000: rx timeout, send abort [ 943.031345][ T1011] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 943.182630][ T1432] syzkaller0: entered promiscuous mode [ 943.189386][ T1432] syzkaller0: entered allmulticast mode [ 943.435739][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888054c08000: abort rx timeout. Force session deactivation [ 943.531205][ T1437] syzkaller0: entered promiscuous mode [ 943.538186][ T1437] syzkaller0: entered allmulticast mode [ 944.405807][ T9541] net_ratelimit: 79 callbacks suppressed [ 944.405831][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.509076][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.542309][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.572568][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.595244][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.635065][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.752047][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.865952][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.978321][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.114213][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.935718][ T1425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 947.397972][ T4943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.421622][ T4943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.467111][ T4943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.477172][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.486547][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 947.707251][ T1479] __nla_validate_parse: 5 callbacks suppressed [ 947.707274][ T1479] netlink: 388 bytes leftover after parsing attributes in process `syz.1.7447'. [ 947.725261][ T1479] netlink: 'syz.1.7447': attribute type 11 has an invalid length. [ 948.199963][ T1494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7450'. [ 948.339496][ T1496] pim6reg: entered allmulticast mode [ 948.414412][ T1501] syzkaller0: entered promiscuous mode [ 948.420120][ T1501] syzkaller0: entered allmulticast mode [ 948.570015][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7456'. [ 948.876856][ T1518] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7458'. [ 948.890668][ T1518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7458'. [ 948.968752][ T1523] syzkaller0: entered promiscuous mode [ 948.992943][ T1523] syzkaller0: entered allmulticast mode [ 949.412983][ T1541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7466'. [ 949.469887][ T1541] geneve0: entered promiscuous mode [ 949.478022][ T8522] net_ratelimit: 88 callbacks suppressed [ 949.478044][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.526845][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.545592][ T4943] Bluetooth: hci1: command tx timeout [ 949.558774][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.584893][ T9539] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.604713][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.625030][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.642084][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.646167][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.649678][ T1469] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.664308][ T1469] bridge_slave_0: entered allmulticast mode [ 949.672422][ T1469] bridge_slave_0: entered promiscuous mode [ 949.703429][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.704940][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.718469][ T1469] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.725806][ T1469] bridge_slave_1: entered allmulticast mode [ 949.733856][ T1469] bridge_slave_1: entered promiscuous mode [ 949.755620][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.783293][ T1469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.796384][ T1469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.825965][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.949575][ T1469] team0: Port device team_slave_0 added [ 949.958725][ T1469] team0: Port device team_slave_1 added [ 949.994625][ T1469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.001645][ T1469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.027573][ T1469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.078869][ T1469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.113576][ T1469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.174866][ T1469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.283381][ T1575] netlink: 'syz.4.7474': attribute type 29 has an invalid length. [ 950.293341][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 950.310782][ T1469] hsr_slave_0: entered promiscuous mode [ 950.319955][ T1469] hsr_slave_1: entered promiscuous mode [ 950.352685][ T1575] netlink: 'syz.4.7474': attribute type 29 has an invalid length. [ 950.360576][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 950.467204][ T1589] netlink: 4984 bytes leftover after parsing attributes in process `syz.4.7474'. [ 950.537066][ T1582] syzkaller0: entered promiscuous mode [ 950.542606][ T1582] syzkaller0: entered allmulticast mode [ 950.856138][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7480'. [ 951.625024][ T4943] Bluetooth: hci1: command tx timeout [ 953.705397][ T4943] Bluetooth: hci1: command tx timeout [ 954.115586][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 954.290226][ T1469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 954.319950][ T1469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.328162][ T1469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 954.362509][ T1469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.370981][ T1469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 954.381482][ T1469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.397219][ T1469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 954.409188][ T1469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.504549][ T9541] net_ratelimit: 132 callbacks suppressed [ 954.504573][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 954.547453][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 954.637473][ T1639] veth0: entered promiscuous mode [ 954.668651][ T1469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.682428][ T1638] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7488'. [ 954.734999][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 954.744842][ T1639] veth0: left promiscuous mode [ 954.758676][ T1469] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.777191][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.784390][ T9544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.800990][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.808244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.834592][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 954.846102][ T12] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 954.956305][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 954.966573][ T1011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 955.004087][ T1648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7492'. [ 955.085874][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.098033][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 955.224646][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.468586][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 955.521601][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 955.548549][ T1664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'. [ 955.636615][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 955.660151][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 955.672990][ T4943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.683042][ T4943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.742430][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7496'. [ 955.787992][T20799] Bluetooth: hci1: command tx timeout [ 956.349158][ T1469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.070414][ T1469] veth0_vlan: entered promiscuous mode [ 957.127738][ T1469] veth1_vlan: entered promiscuous mode [ 957.287175][ T1469] veth0_macvtap: entered promiscuous mode [ 957.308308][ T1469] veth1_macvtap: entered promiscuous mode [ 957.349644][ T1469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.397293][ T1469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.437706][ T9539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.462506][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.476978][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.493220][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.814550][ T9539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.822436][ T9539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.864061][T30732] Bluetooth: hci6: command tx timeout [ 957.983270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.992723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.191489][ T1747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7514'. [ 958.593078][ T1666] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.600379][ T1666] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.607743][ T1666] bridge_slave_0: entered allmulticast mode [ 958.615913][ T1666] bridge_slave_0: entered promiscuous mode [ 958.627092][ T1773] netlink: 808 bytes leftover after parsing attributes in process `syz.5.7517'. [ 958.659617][ T1666] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.666917][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.674269][ T1666] bridge_slave_1: entered allmulticast mode [ 958.682374][ T1666] bridge_slave_1: entered promiscuous mode [ 958.796830][ T1666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.815943][ T1666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.901987][ T1666] team0: Port device team_slave_0 added [ 958.910567][ T1666] team0: Port device team_slave_1 added [ 958.941340][ T1666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.948338][ T1666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.974272][ T1666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.070119][ T1666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.077144][ T1666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.146540][ T1666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.232518][ T1787] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 959.360285][ T1794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7524'. [ 959.399351][ T1781] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7519'. [ 959.402018][ T1666] hsr_slave_0: entered promiscuous mode [ 959.415469][ T1666] hsr_slave_1: entered promiscuous mode [ 959.421969][ T1666] debugfs: 'hsr0' already exists in 'hsr' [ 959.427740][ T1666] Cannot create hsr debugfs directory [ 959.448408][ T1790] syzkaller0: entered promiscuous mode [ 959.455042][ T1790] syzkaller0: entered allmulticast mode [ 959.612770][ T8522] net_ratelimit: 101 callbacks suppressed [ 959.612793][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.653945][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.668995][ T1801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7526'. [ 959.694503][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.724680][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.745029][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.758479][ T1804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.786269][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.825120][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 959.841833][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 959.924530][ T1805] ip6gre1: entered promiscuous mode [ 959.931562][ T1805] ip6gre1: entered allmulticast mode [ 959.980979][T30732] Bluetooth: hci6: command tx timeout [ 959.986006][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.172981][ T1666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 960.233134][ T1666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.241324][ T1666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 960.299248][ T1666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.315055][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7530'. [ 960.375241][ T1812] netlink: 'syz.4.7532': attribute type 1 has an invalid length. [ 960.386655][ T1666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 960.418991][ T1666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.503623][ T1666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 960.525855][ T1666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.598586][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7535'. [ 960.635241][ T1823] bond2: (slave gretap1): making interface the new active one [ 960.647903][ T1823] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 960.851983][ T1846] netlink: 'syz.5.7537': attribute type 2 has an invalid length. [ 960.888110][ T1666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.906154][ T1849] netlink: 'syz.5.7537': attribute type 2 has an invalid length. [ 960.959354][ T1666] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.000222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.007469][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.108405][ T1666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 961.118822][ T1666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.216670][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.223868][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.258389][ T1866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.319660][ T1858] syzkaller0: entered promiscuous mode [ 961.335958][ T1866] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7541'. [ 961.346700][ T1858] syzkaller0: entered allmulticast mode [ 961.697070][ T1878] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 962.128532][T30732] Bluetooth: hci6: command tx timeout [ 962.264701][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 962.309090][ T1909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7549'. [ 962.671437][ T1666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.166149][ T1935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7555'. [ 963.261863][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7554'. [ 963.361400][ T1942] syzkaller0: entered promiscuous mode [ 963.368356][ T1942] syzkaller0: entered allmulticast mode [ 963.462480][ T1945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7557'. [ 963.528685][ T1666] veth0_vlan: entered promiscuous mode [ 963.542801][ T1666] veth1_vlan: entered promiscuous mode [ 963.600211][ T1666] veth0_macvtap: entered promiscuous mode [ 963.610925][ T1666] veth1_macvtap: entered promiscuous mode [ 963.630540][ T1666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.644372][ T1666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.683120][ T8522] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.691996][ T8522] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.700861][ T8522] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.709640][ T8522] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.019681][ T1955] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 964.042006][ T1955] batman_adv: batadv0: Adding interface: wlan0 [ 964.059259][ T1955] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.107896][ T1955] batman_adv: batadv0: Interface activated: wlan0 [ 964.122525][ T9542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.142700][ T9542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.224444][ T9542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.235362][ T9542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.300201][T30732] Bluetooth: hci6: command tx timeout [ 964.366398][ T1967] tipc: Enabled bearer , priority 10 [ 964.419698][ T1969] netlink: 83 bytes leftover after parsing attributes in process `syz.2.7563'. [ 964.450115][ T1968] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 964.492851][ T1968] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 964.643693][ T8522] net_ratelimit: 89 callbacks suppressed [ 964.643716][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 964.657169][ T8522] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 964.742594][ T1985] syzkaller0: entered promiscuous mode [ 964.764692][ T1985] syzkaller0: entered allmulticast mode [ 964.875987][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 964.965771][ T1992] netlink: 'syz.4.7569': attribute type 4 has an invalid length. [ 964.992203][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.005688][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 965.115663][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.138739][ T1011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 965.266333][ T1996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7570'. [ 965.296235][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.325047][ T1011] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.333039][ T1011] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 965.548063][ T2013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7576'. [ 965.601885][ T2013] bond3: Invalid ad_actor_system MAC address. [ 965.608033][ T2013] bond3: option ad_actor_system: invalid value (1) [ 965.617038][ T2013] bond3 (unregistering): Released all slaves [ 965.936992][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7578'. [ 965.946015][ T2023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7578'. [ 966.091839][ T2025] netlink: 'syz.2.7578': attribute type 2 has an invalid length. [ 967.201485][ T2047] netlink: 'syz.4.7582': attribute type 1 has an invalid length. [ 967.468545][ T9542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 969.672718][ T2022] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 969.725470][ T8522] net_ratelimit: 113 callbacks suppressed [ 969.725496][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 969.747290][ T8522] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 969.958901][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7587'. [ 969.976332][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 969.984129][ T8522] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 969.991097][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7587'. [ 970.198950][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.317253][ T8522] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 970.458453][ T2082] syzkaller1: entered promiscuous mode [ 970.459699][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.467156][ T2082] syzkaller1: entered allmulticast mode [ 970.551101][ T2082] syzkaller0: entered promiscuous mode [ 970.570437][ T9539] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.580303][ T2087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7593'. [ 970.593166][ T2082] syzkaller0: entered allmulticast mode [ 970.606204][ T2082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'. [ 970.616057][ T9539] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 970.634602][ T2082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7592'. [ 970.731287][ T9539] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.105459][ T2122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7601'. [ 972.710016][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7603'. [ 972.911167][ T2136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7606'. [ 973.016808][ T2141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7608'. [ 973.167380][ T2149] Cannot find add_set index 2 as target [ 973.380949][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7614'. [ 973.784664][ T2178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7622'. [ 973.840997][ T2178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 973.855022][ T2178] netlink: 'syz.2.7622': attribute type 19 has an invalid length. [ 973.866469][ T2178] netlink: 'syz.2.7622': attribute type 2 has an invalid length. [ 974.149134][ T2186] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7624'. [ 974.460347][ T2195] netlink: 'syz.2.7628': attribute type 9 has an invalid length. [ 974.710774][ T2205] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 974.716826][ T2205] syzkaller1: Refused to change device type [ 974.802764][ T2211] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.810788][ T2211] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.820378][ T12] net_ratelimit: 78 callbacks suppressed [ 974.820398][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.854551][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.856215][ T2211] bond0: (slave bond_slave_1): Releasing backup interface [ 974.875953][ T8522] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.906459][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.934376][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.964172][ T12] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 974.992519][ T2211] bond_slave_1: left promiscuous mode [ 975.006272][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.035673][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.094775][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.136659][ T9540] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.792084][ T2246] __nla_validate_parse: 6 callbacks suppressed [ 975.792105][ T2246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7643'. [ 975.806837][ T2247] netlink: 'syz.4.7642': attribute type 8 has an invalid length. [ 975.809743][ T2246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7643'. [ 975.826498][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7642'. [ 976.127543][ T2262] block nbd4: Unsupported socket: should be TCP or UNIX. [ 976.355291][ T2270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7652'. [ 976.365856][ T2270] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7652'. [ 976.472172][ T2270] veth3: entered promiscuous mode [ 976.868370][ T2295] tipc: Bearer : already 2 bearers with priority 10 [ 976.878593][ T2296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7658'. [ 976.891208][ T2295] tipc: Bearer : trying with adjusted priority [ 976.891314][ T2295] tipc: Enabling of bearer rejected, failed to enable media [ 976.932165][ T2296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7658'. [ 976.941673][ T2296] veth0_vlan: left promiscuous mode [ 976.948590][ T2296] vlan0: entered promiscuous mode [ 976.953789][ T2296] veth0_vlan: entered promiscuous mode [ 977.091013][ T2300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.098290][ T2300] IPv6: NLM_F_CREATE should be set when creating new route [ 977.105545][ T2300] IPv6: NLM_F_CREATE should be set when creating new route [ 977.114005][ T2300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.931426][ T2339] bridge_slave_1: left allmulticast mode [ 977.949379][ T2339] bridge_slave_1: left promiscuous mode [ 977.962430][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.007294][ T2339] bridge_slave_0: left allmulticast mode [ 978.013025][ T2339] bridge_slave_0: left promiscuous mode [ 978.043082][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.113672][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7673'. [ 978.164752][ T2341] pimreg: entered allmulticast mode [ 978.192580][ T2350] lo speed is unknown, defaulting to 1000 [ 978.198438][ T2350] lo speed is unknown, defaulting to 1000 [ 978.239779][ T2350] lo speed is unknown, defaulting to 1000 [ 978.246739][ T2350] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 978.261010][ T2350] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 978.278170][ T2350] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 978.302738][ T2350] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 978.397932][ T2350] lo speed is unknown, defaulting to 1000 [ 978.426992][ T2350] lo speed is unknown, defaulting to 1000 [ 978.436820][ T2350] lo speed is unknown, defaulting to 1000 [ 978.450081][ T2350] lo speed is unknown, defaulting to 1000 [ 978.486748][ T2350] lo speed is unknown, defaulting to 1000 [ 978.505923][ T2350] lo speed is unknown, defaulting to 1000 [ 978.558134][ T2350] lo speed is unknown, defaulting to 1000 [ 978.593589][ T2350] lo speed is unknown, defaulting to 1000 [ 978.625602][ T2350] lo speed is unknown, defaulting to 1000 [ 978.661809][ T2350] lo speed is unknown, defaulting to 1000 [ 978.731715][ T2350] lo speed is unknown, defaulting to 1000 [ 978.773725][ T2350] lo speed is unknown, defaulting to 1000 [ 978.781306][ T2350] lo speed is unknown, defaulting to 1000 [ 979.041576][ T2381] xt_NFQUEUE: number of total queues is 0 [ 979.313048][ T2396] netlink: 'syz.2.7687': attribute type 1 has an invalid length. [ 979.460213][ T2414] netlink: 'syz.2.7687': attribute type 10 has an invalid length. [ 979.492900][ T2414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7687'. [ 979.754255][ T2431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7697'. [ 979.879755][ T2442] gretap1: entered promiscuous mode [ 979.889401][ T2442] batman_adv: batadv0: Adding interface: gretap1 [ 979.897247][ T2442] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.927313][ T2442] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 979.943449][ T9542] net_ratelimit: 77 callbacks suppressed [ 979.943471][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 979.970470][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 980.142380][ T2455] bridge_slave_0: left allmulticast mode [ 980.148131][ T2455] bridge_slave_0: left promiscuous mode [ 980.153959][ T2455] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.195339][ T2455] bridge_slave_1: left allmulticast mode [ 980.201062][ T2455] bridge_slave_1: left promiscuous mode [ 980.206932][ T2455] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.226395][ T2455] bond0: (slave bond_slave_0): Releasing backup interface [ 980.237624][ T2455] bond_slave_0: left promiscuous mode [ 980.270781][ T2464] FAULT_INJECTION: forcing a failure. [ 980.270781][ T2464] name failslab, interval 1, probability 0, space 0, times 0 [ 980.285703][ T2455] team0: Port device team_slave_0 removed [ 980.301878][ T9122] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.352667][ T2464] CPU: 1 UID: 0 PID: 2464 Comm: syz.5.7704 Not tainted syzkaller #0 PREEMPT(full) [ 980.352696][ T2464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 980.352711][ T2464] Call Trace: [ 980.352720][ T2464] [ 980.352729][ T2464] dump_stack_lvl+0xe8/0x150 [ 980.352783][ T2464] should_fail_ex+0x40c/0x560 [ 980.352813][ T2464] should_failslab+0xa8/0x100 [ 980.352845][ T2464] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 980.352881][ T2464] ? skb_clone+0x212/0x3a0 [ 980.352901][ T2464] ? skb_clone+0x212/0x3a0 [ 980.352931][ T2464] skb_clone+0x212/0x3a0 [ 980.352957][ T2464] __netlink_deliver_tap+0x413/0x860 [ 980.352993][ T2464] ? netlink_deliver_tap+0x2e/0x1b0 [ 980.353017][ T2464] netlink_deliver_tap+0x19c/0x1b0 [ 980.353040][ T2464] netlink_unicast+0x77f/0x940 [ 980.353084][ T2464] netlink_sendmsg+0x813/0xb40 [ 980.353117][ T2464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.353150][ T2464] ? aa_sock_msg_perm+0xf1/0x1b0 [ 980.353196][ T2464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.353219][ T2464] sock_sendmsg_nosec+0x13a/0x180 [ 980.353249][ T2464] ____sys_sendmsg+0x54e/0x850 [ 980.353274][ T2464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.353311][ T2464] ? import_iovec+0x73/0xa0 [ 980.353346][ T2464] ___sys_sendmsg+0x2a5/0x360 [ 980.353366][ T2464] ? __lock_acquire+0x683/0x2cf0 [ 980.353401][ T2464] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.353463][ T2464] ? __fget_files+0x2a/0x420 [ 980.353490][ T2464] ? __fget_files+0x3a2/0x420 [ 980.353530][ T2464] __x64_sys_sendmsg+0x1b1/0x290 [ 980.353556][ T2464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.353600][ T2464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.353625][ T2464] do_syscall_64+0x174/0x580 [ 980.353645][ T2464] ? trace_irq_disable+0x3b/0x140 [ 980.353673][ T2464] ? clear_bhb_loop+0x40/0x90 [ 980.353701][ T2464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.353724][ T2464] RIP: 0033:0x7f6dd7f9de99 [ 980.353744][ T2464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.353764][ T2464] RSP: 002b:00007f6dd8d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.353787][ T2464] RAX: ffffffffffffffda RBX: 00007f6dd8225fa0 RCX: 00007f6dd7f9de99 [ 980.353804][ T2464] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 980.353818][ T2464] RBP: 00007f6dd8d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 980.353832][ T2464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.353846][ T2464] R13: 00007f6dd8226038 R14: 00007f6dd8225fa0 R15: 00007fff1c2d9be8 [ 980.353892][ T2464] [ 980.362566][ T2455] team0: Port device team_slave_1 removed [ 980.643918][ T9122] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.675665][ T2455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.683087][ T2455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.750750][ T9122] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.763220][ T2455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 980.845715][ T2496] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.874378][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.882278][ T2502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 981.018513][ T2514] __nla_validate_parse: 2 callbacks suppressed [ 981.018534][ T2514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7707'. [ 981.090298][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 981.115773][ T2521] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7710'. [ 981.289617][ T2527] vlan2: entered promiscuous mode [ 981.338672][ T2530] FAULT_INJECTION: forcing a failure. [ 981.338672][ T2530] name failslab, interval 1, probability 0, space 0, times 0 [ 981.351429][ T2530] CPU: 1 UID: 0 PID: 2530 Comm: syz.4.7715 Not tainted syzkaller #0 PREEMPT(full) [ 981.351458][ T2530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 981.351472][ T2530] Call Trace: [ 981.351480][ T2530] [ 981.351490][ T2530] dump_stack_lvl+0xe8/0x150 [ 981.351527][ T2530] should_fail_ex+0x40c/0x560 [ 981.351559][ T2530] should_failslab+0xa8/0x100 [ 981.351593][ T2530] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 981.351621][ T2530] ? skb_clone+0x212/0x3a0 [ 981.351641][ T2530] ? skb_clone+0x212/0x3a0 [ 981.351669][ T2530] skb_clone+0x212/0x3a0 [ 981.351696][ T2530] __netlink_deliver_tap+0x413/0x860 [ 981.351734][ T2530] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.351757][ T2530] netlink_deliver_tap+0x19c/0x1b0 [ 981.351781][ T2530] netlink_unicast+0x77f/0x940 [ 981.351826][ T2530] netlink_sendmsg+0x813/0xb40 [ 981.351861][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.351890][ T2530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 981.351920][ T2530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.351941][ T2530] sock_sendmsg_nosec+0x13a/0x180 [ 981.351972][ T2530] ____sys_sendmsg+0x54e/0x850 [ 981.352003][ T2530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.352036][ T2530] ? import_iovec+0x73/0xa0 [ 981.352074][ T2530] ___sys_sendmsg+0x2a5/0x360 [ 981.352095][ T2530] ? __lock_acquire+0x683/0x2cf0 [ 981.352131][ T2530] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.352195][ T2530] ? __fget_files+0x2a/0x420 [ 981.352224][ T2530] ? __fget_files+0x3a2/0x420 [ 981.352266][ T2530] __x64_sys_sendmsg+0x1b1/0x290 [ 981.352293][ T2530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.352350][ T2530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.352377][ T2530] do_syscall_64+0x174/0x580 [ 981.352398][ T2530] ? trace_irq_disable+0x3b/0x140 [ 981.352428][ T2530] ? clear_bhb_loop+0x40/0x90 [ 981.352456][ T2530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.352480][ T2530] RIP: 0033:0x7ff080d9de99 [ 981.352502][ T2530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.352520][ T2530] RSP: 002b:00007ff081cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.352543][ T2530] RAX: ffffffffffffffda RBX: 00007ff081025fa0 RCX: 00007ff080d9de99 [ 981.352561][ T2530] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 981.352575][ T2530] RBP: 00007ff081cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 981.352590][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.352603][ T2530] R13: 00007ff081026038 R14: 00007ff081025fa0 R15: 00007ffe254c4528 [ 981.352641][ T2530] [ 981.422958][ T2537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7717'. [ 981.541785][ T2539] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7717'. [ 982.609280][ T2593] syzkaller0: entered promiscuous mode [ 982.627555][ T2593] syzkaller0: entered allmulticast mode [ 982.694793][ T2603] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7732'. [ 982.906482][ T2607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7731'. [ 983.035426][ T2601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7731'. [ 983.080255][ T2608] syzkaller0: entered promiscuous mode [ 983.121071][ T2608] syzkaller0: entered allmulticast mode [ 983.381701][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7739'. [ 983.780234][ T2656] syzkaller1: entered promiscuous mode [ 983.802547][ T2656] syzkaller1: entered allmulticast mode [ 983.813573][ T2655] netlink: 'syz.1.7744': attribute type 5 has an invalid length. [ 983.940127][ T2663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7746'. [ 984.141182][ T2673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7750'. [ 984.965513][ T2720] pim6reg: left allmulticast mode [ 985.046658][ T2458] net_ratelimit: 76 callbacks suppressed [ 985.046678][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.115387][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.152470][ T2458] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 985.380874][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.425767][ T8502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 985.530164][ T2750] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.537900][ T2750] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.564895][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.578311][ T2450] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 985.593212][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.619795][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.627327][ T2750] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.634535][ T2750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.683967][ T2750] bridge0: entered promiscuous mode [ 985.689318][ T2750] bridge0: entered allmulticast mode [ 985.716068][ T8498] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.744682][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.804076][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.889656][ T2752] syzkaller0: entered promiscuous mode [ 985.900562][ T2752] syzkaller0: entered allmulticast mode [ 985.910069][ T2704] lo speed is unknown, defaulting to 1000 [ 986.050608][ T2775] netlink: 'syz.4.7772': attribute type 17 has an invalid length. [ 989.201512][ T2775] erspan0: left promiscuous mode [ 989.206504][ T2775] erspan0: left allmulticast mode [ 989.263383][ T2775] vlan0: left promiscuous mode [ 989.268217][ T2775] veth0_vlan: left promiscuous mode [ 989.280097][ T2775] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 989.289574][ T2775] vlan2: left promiscuous mode [ 989.294370][ T2775] bridge0: left promiscuous mode [ 989.302366][ T2775] ip6gre1: left promiscuous mode [ 989.307348][ T2775] ip6gre1: left allmulticast mode [ 989.314260][ T2775] veth3: left promiscuous mode [ 989.450363][ T9111] lo speed is unknown, defaulting to 1000 [ 989.685163][ T2821] __nla_validate_parse: 4 callbacks suppressed [ 989.685177][ T2821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7778'. [ 989.768801][ T2822] netlink: 'syz.5.7776': attribute type 1 has an invalid length. [ 989.776939][ T2822] netlink: 'syz.5.7776': attribute type 1 has an invalid length. [ 989.926368][ T2822] syzkaller0: entered promiscuous mode [ 989.931912][ T2822] syzkaller0: entered allmulticast mode [ 990.108463][ T2458] net_ratelimit: 122 callbacks suppressed [ 990.108486][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.165351][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.195745][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.237178][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.285080][ T8498] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.367615][ T8498] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.471865][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.599677][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.624426][ T2851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 990.700244][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.724932][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.927325][ T2853] netlink: 'syz.2.7785': attribute type 32 has an invalid length. [ 990.942800][ T2853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7785'. [ 993.358032][ T2853] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 993.921648][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7790'. [ 994.109049][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'. [ 994.598481][ T2930] netlink: 'syz.4.7798': attribute type 11 has an invalid length. [ 995.012821][ T2948] syzkaller0: entered promiscuous mode [ 995.063455][ T2948] syzkaller0: entered allmulticast mode [ 995.124740][ T8502] net_ratelimit: 131 callbacks suppressed [ 995.124761][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.145378][T30732] Bluetooth: hci4: command 0x0406 tx timeout [ 995.184441][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.229486][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.255341][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.295344][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.336207][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.347628][ T8502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 995.424339][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7808'. [ 995.518477][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.524004][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.546619][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 995.554405][ T8502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 995.754158][ T2978] syzkaller0: entered promiscuous mode [ 995.762532][ T2978] syzkaller0: entered allmulticast mode [ 996.260141][ T2998] syzkaller0: entered promiscuous mode [ 996.265672][ T2998] syzkaller0: entered allmulticast mode [ 996.381068][ T3006] netlink: 'syz.1.7819': attribute type 33 has an invalid length. [ 996.421982][ T3006] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 996.479574][ T3006] bond5 (unregistering): Released all slaves [ 996.611275][ T3016] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7820'. [ 997.169321][ T3032] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 997.475237][ T3043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7829'. [ 997.738634][ T3049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.799923][ T3054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.046404][ T3065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7835'. [ 998.421183][ T3081] bond0: Error: CAN devices cannot be enslaved [ 998.461152][ T3086] netlink: 'syz.1.7842': attribute type 32 has an invalid length. [ 998.470769][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7842'. [ 998.570764][ T3086] bond5: Setting coupled_control to off (0) [ 998.871672][ T3093] netlink: 'syz.4.7844': attribute type 4 has an invalid length. [ 998.923756][ T5754] lo speed is unknown, defaulting to 1000 [ 998.929552][ T5754] sy2: Port: 1 Link DOWN [ 998.959506][ T3093] netlink: 'syz.4.7844': attribute type 4 has an invalid length. [ 998.971271][ T5754] lo speed is unknown, defaulting to 1000 [ 998.977065][ T5754] sy2: Port: 1 Link ACTIVE [ 999.146275][ T3111] xt_limit: Overflow, try lower: 271964/0 [ 999.386461][ T8502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 999.437088][ T3120] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7852'. [ 999.449318][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7852'. [ 999.475479][ T3120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7852'. [ 999.729677][ T3093] tipc: Resetting bearer [ 999.793299][ T3124] sctp: [Deprecated]: syz.2.7851 (pid 3124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.793299][ T3124] Use struct sctp_sack_info instead [ 1000.149565][ T2458] net_ratelimit: 91 callbacks suppressed [ 1000.149586][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.251683][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.275392][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.380094][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.495729][ T8498] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.612930][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.645101][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.664564][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.694405][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1000.728173][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1001.233253][ T5754] lo speed is unknown, defaulting to 1000 [ 1001.239051][ T5754] sy2: Port: 1 Link DOWN [ 1001.264613][ T3111] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1001.278805][ T3111] bond1 (unregistering): Released all slaves [ 1001.332550][ T3125] gretap1: entered promiscuous mode [ 1001.341103][ T3125] batman_adv: batadv0: Adding interface: gretap1 [ 1001.351584][ T3125] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1001.373127][ T3125] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1001.440467][ T3129] lo: left promiscuous mode [ 1001.573046][ T3129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.586741][ T3129] bond0: left allmulticast mode [ 1001.591661][ T3129] bond_slave_0: left allmulticast mode [ 1001.597195][ T3129] bond_slave_1: left allmulticast mode [ 1001.638856][ T3159] netlink: 4416 bytes leftover after parsing attributes in process `syz.6.7854'. [ 1001.713688][ T3129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.729994][ T3129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.829561][ T3163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1001.844033][ T3129] ipvlan0: left promiscuous mode [ 1001.849050][ T3129] ipvlan0: left allmulticast mode [ 1001.854153][ T3129] veth0_vlan: left allmulticast mode [ 1001.878334][ T3129] batman_adv: batadv0: Interface deactivated: wlan0 [ 1001.919460][ T3129] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 1001.947907][ T3129] geneve3: left promiscuous mode [ 1001.952934][ T3129] geneve3: left allmulticast mode [ 1001.984520][ T8498] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.003282][ T8498] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.031298][ T8498] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.055927][ T8498] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.108103][ T3169] netlink: 'syz.6.7856': attribute type 1 has an invalid length. [ 1002.156197][ T8498] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.166963][ T3171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1002.195267][ T8498] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1002.235434][ T8498] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1002.246795][ T8498] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.258404][ T8498] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1002.269972][ T8498] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1002.279336][ T8498] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.297758][ T8498] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1002.314660][ T29] audit: type=1800 audit(1784713185.581:11): pid=3179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7860" name="memory.events" dev="tmpfs" ino=334 res=0 errno=0 [ 1002.342820][ T8498] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1002.378003][ T29] audit: type=1804 audit(1784713185.581:12): pid=3179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7860" name="/newroot/62/memory.events" dev="tmpfs" ino=334 res=1 errno=0 [ 1002.556975][ T8498] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.591656][ T8498] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1002.616083][ T3195] netlink: 'syz.2.7863': attribute type 18 has an invalid length. [ 1002.630423][ T8498] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1002.672171][ T8498] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.718713][ T3186] ip6gre1: entered promiscuous mode [ 1002.723996][ T3186] ip6gre1: entered allmulticast mode [ 1002.739427][ T8498] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.769690][ T8498] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.818906][ T8498] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.289583][ T3240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1003.305956][ T3240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7871'. [ 1003.378409][ T3244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1003.398553][ T3244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1003.449866][ T3246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1003.658007][ T3254] netlink: 'syz.4.7878': attribute type 19 has an invalid length. [ 1003.892813][ T3267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7882'. [ 1003.909704][ T3267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7882'. [ 1004.234946][ T3286] tipc: Enabling of bearer rejected, failed to enable media [ 1004.270228][ T3288] syzkaller0: entered promiscuous mode [ 1004.276793][ T3288] syzkaller0: entered allmulticast mode [ 1004.348379][ T3288] sit0: entered promiscuous mode [ 1004.359529][ T3288] netlink: 'syz.2.7887': attribute type 1 has an invalid length. [ 1004.562799][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1004.611209][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1004.618118][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1004.625234][ T3301] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1004.640827][ T3301] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1004.722953][ T3301] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1004.777033][ T3301] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1005.012739][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.076215][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.133392][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.158247][ T8502] net_ratelimit: 81 callbacks suppressed [ 1005.158271][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.163650][ T9115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.181468][T22346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.196855][ T8502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1005.237778][ T3321] nft_compat: unsupported protocol 0 [ 1005.253448][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.264757][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.273185][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.283390][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.292697][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.306472][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.315968][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.317657][ T3323] netlink: 'syz.4.7895': attribute type 1 has an invalid length. [ 1005.350180][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.358907][ T3323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1005.367043][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.381355][ T3323] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1005.424085][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.440004][ T3323] tipc: Resetting bearer [ 1005.456390][ T3323] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1005.470886][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.483589][ T3301] xfrm0 speed is unknown, defaulting to 1000 [ 1005.537957][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.545771][ T9543] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1005.785803][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1005.814793][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1005.948361][ T3337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1006.164859][ T3368] netlink: 'syz.5.7907': attribute type 2 has an invalid length. [ 1006.215067][ T3368] netlink: 'syz.5.7907': attribute type 2 has an invalid length. [ 1006.599000][ T3388] geneve3: entered promiscuous mode [ 1006.772513][ T3397] __nla_validate_parse: 5 callbacks suppressed [ 1006.772549][ T3397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7916'. [ 1006.811496][ T3397] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7916'. [ 1006.969279][ T3408] nbd: must specify an index to disconnect [ 1007.202639][ T3413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7920'. [ 1007.267499][ T3428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7918'. [ 1007.454362][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7918'. [ 1007.463333][ T3437] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7918'. [ 1007.472449][ T3437] netlink: 'syz.1.7918': attribute type 5 has an invalid length. [ 1007.490316][ T3439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7923'. [ 1007.647091][ T3439] bond1: option xmit_hash_policy: invalid value (64) [ 1007.690163][ T3450] netlink: 'syz.2.7926': attribute type 1 has an invalid length. [ 1007.717683][ T3439] bond1 (unregistering): Released all slaves [ 1007.765404][ T3447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7927'. [ 1007.872206][ T3456] tipc: Enabling of bearer rejected, failed to enable media [ 1008.089680][ T3468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1008.380162][ T3484] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1009.881214][ T3536] syzkaller0: entered promiscuous mode [ 1009.886764][ T3536] syzkaller0: entered allmulticast mode [ 1010.267460][ T2450] net_ratelimit: 85 callbacks suppressed [ 1010.267484][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.303281][ T2450] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1010.403096][ T3550] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1010.410473][ T3550] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1010.417958][ T3550] veth1_to_bridge: entered allmulticast mode [ 1010.435978][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.454043][ T3550] veth1_to_bridge: entered promiscuous mode [ 1010.515534][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.523347][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1010.750921][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1010.776491][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1010.948307][ T3575] syzkaller0: entered promiscuous mode [ 1010.955616][ T3575] syzkaller0: entered allmulticast mode [ 1010.998248][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1011.008612][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1011.125049][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1011.510685][ T3599] netlink: 'syz.2.7972': attribute type 12 has an invalid length. [ 1011.863381][ T3611] bridge1: entered promiscuous mode [ 1011.876033][ T3615] __nla_validate_parse: 7 callbacks suppressed [ 1011.876052][ T3615] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7976'. [ 1011.904939][ T3615] veth0_to_bond: default FDB implementation only supports local addresses [ 1012.021953][ T3626] netlink: 124 bytes leftover after parsing attributes in process `syz.5.7978'. [ 1012.093345][ T3629] netlink: 'syz.2.7979': attribute type 1 has an invalid length. [ 1012.137761][ T3629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7979'. [ 1012.698336][ T3646] syzkaller0: entered promiscuous mode [ 1012.703891][ T3646] syzkaller0: entered allmulticast mode [ 1012.778148][ T3656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1012.829058][ T3663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1012.840481][ T3663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1013.172315][ T3675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 1013.393038][ T3683] xt_CT: No such helper "snmp_trap" [ 1013.501566][ T3694] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1013.529166][ T3698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1013.562366][ T3698] netlink: 'syz.2.8000': attribute type 3 has an invalid length. [ 1013.570831][ T3698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1013.613133][ T3698] netlink: 'syz.2.8000': attribute type 3 has an invalid length. [ 1013.749097][ T3710] syzkaller0: entered promiscuous mode [ 1013.765649][ T3710] syzkaller0: entered allmulticast mode [ 1013.860125][ T3715] bridge5: entered promiscuous mode [ 1013.880104][ T3715] bridge6: entered promiscuous mode [ 1013.937187][ T3719] vlan2: entered allmulticast mode [ 1014.015515][ T3719] bond0: entered allmulticast mode [ 1014.236559][ T3727] batman_adv: batadv0: Interface activated: gretap1 [ 1014.244228][ T3727] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1014.251476][ T3727] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 1014.262870][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1014.278236][ T3736] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1014.295041][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 1014.363353][ T3734] tipc: Enabling of bearer rejected, failed to enable media [ 1014.395937][ T3725] syzkaller0: entered promiscuous mode [ 1014.405811][ T3725] syzkaller0: entered allmulticast mode [ 1014.690099][ T3748] netlink: 'syz.6.8013': attribute type 1 has an invalid length. [ 1014.723552][ T3748] netlink: 'syz.6.8013': attribute type 2 has an invalid length. [ 1015.216255][ T3762] veth0: entered promiscuous mode [ 1015.246664][ T3772] bond_slave_1: entered promiscuous mode [ 1015.252565][ T3772] bond_slave_1: entered allmulticast mode [ 1015.298448][ T9544] net_ratelimit: 89 callbacks suppressed [ 1015.298471][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.398426][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.412634][ T2450] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1015.483749][ T3781] syzkaller0: entered promiscuous mode [ 1015.489290][ T3781] syzkaller0: entered allmulticast mode [ 1015.524977][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.631059][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.640624][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1015.760415][ T3765] veth0: left promiscuous mode [ 1015.867185][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1015.879399][ T9543] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1015.995046][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1016.002881][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1016.146615][ T3794] syzkaller0: entered promiscuous mode [ 1016.152162][ T3794] syzkaller0: entered allmulticast mode [ 1016.261452][ T3796] bond6: (slave ip_vti0): Device is not bonding slave [ 1016.268365][ T3796] bond6: option active_slave: invalid value (ip_vti0) [ 1016.278655][ T3796] bond6 (unregistering): Released all slaves [ 1016.385827][ T3804] netlink: 'syz.4.8030': attribute type 3 has an invalid length. [ 1016.393626][ T3804] netlink: 'syz.4.8030': attribute type 1 has an invalid length. [ 1016.585109][ T3807] netlink: 'syz.6.8032': attribute type 1 has an invalid length. [ 1016.856097][ T3822] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1016.858321][ T3819] netlink: 'syz.2.8031': attribute type 10 has an invalid length. [ 1016.908989][ T3819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.963334][ T3827] netlink: 'syz.6.8037': attribute type 1 has an invalid length. [ 1016.973854][ T3829] __nla_validate_parse: 8 callbacks suppressed [ 1016.973874][ T3829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1016.990255][ T3819] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1017.059812][ T3829] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1017.068836][ T3829] netlink: 'syz.2.8031': attribute type 5 has an invalid length. [ 1017.076602][ T3829] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1017.113220][ T3827] bond1: entered promiscuous mode [ 1017.118918][ T3827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.136339][ T3834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8039'. [ 1017.176872][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1017.203021][ T3819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.243460][ T3819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.255573][ T3819] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1017.304310][ T3819] bond0 (unregistering): Released all slaves [ 1017.872172][ T3861] FAULT_INJECTION: forcing a failure. [ 1017.872172][ T3861] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.912921][ T3861] CPU: 0 UID: 0 PID: 3861 Comm: syz.1.8045 Not tainted syzkaller #0 PREEMPT(full) [ 1017.912951][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1017.912976][ T3861] Call Trace: [ 1017.912985][ T3861] [ 1017.912996][ T3861] dump_stack_lvl+0xe8/0x150 [ 1017.913033][ T3861] should_fail_ex+0x40c/0x560 [ 1017.913064][ T3861] should_failslab+0xa8/0x100 [ 1017.913100][ T3861] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1017.913126][ T3861] ? local_lock_release+0x9c/0x160 [ 1017.913158][ T3861] ? __alloc_skb+0x1d7/0x7a0 [ 1017.913184][ T3861] ? __alloc_skb+0x1d7/0x7a0 [ 1017.913221][ T3861] __alloc_skb+0x1d7/0x7a0 [ 1017.913255][ T3861] netlink_ack+0x136/0xb30 [ 1017.913274][ T3861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1017.913301][ T3861] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1017.913335][ T3861] ? __pfx_ref_tracker_free+0x10/0x10 [ 1017.913374][ T3861] netlink_rcv_skb+0x2a4/0x4a0 [ 1017.913397][ T3861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1017.913426][ T3861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1017.913464][ T3861] ? down_read+0x2be/0x330 [ 1017.913492][ T3861] genl_rcv+0x28/0x40 [ 1017.913516][ T3861] netlink_unicast+0x7bb/0x940 [ 1017.913559][ T3861] netlink_sendmsg+0x813/0xb40 [ 1017.913592][ T3861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.913619][ T3861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1017.913648][ T3861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.913668][ T3861] sock_sendmsg_nosec+0x13a/0x180 [ 1017.913699][ T3861] ____sys_sendmsg+0x54e/0x850 [ 1017.913726][ T3861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.913757][ T3861] ? import_iovec+0x73/0xa0 [ 1017.913792][ T3861] ___sys_sendmsg+0x2a5/0x360 [ 1017.913812][ T3861] ? __lock_acquire+0x683/0x2cf0 [ 1017.913846][ T3861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.913907][ T3861] ? __fget_files+0x2a/0x420 [ 1017.913934][ T3861] ? __fget_files+0x3a2/0x420 [ 1017.913972][ T3861] __x64_sys_sendmsg+0x1b1/0x290 [ 1017.913997][ T3861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1017.914057][ T3861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.914082][ T3861] do_syscall_64+0x174/0x580 [ 1017.914101][ T3861] ? trace_irq_disable+0x3b/0x140 [ 1017.914129][ T3861] ? clear_bhb_loop+0x40/0x90 [ 1017.914157][ T3861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.914180][ T3861] RIP: 0033:0x7f245d59de99 [ 1017.914200][ T3861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.914219][ T3861] RSP: 002b:00007f245e440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.914243][ T3861] RAX: ffffffffffffffda RBX: 00007f245d825fa0 RCX: 00007f245d59de99 [ 1017.914258][ T3861] RDX: 0000000020040000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1017.914273][ T3861] RBP: 00007f245e440090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.914286][ T3861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.914300][ T3861] R13: 00007f245d826038 R14: 00007f245d825fa0 R15: 00007ffdec9fa0c8 [ 1017.914341][ T3861] [ 1018.656445][ T3876] netlink: 'syz.1.8050': attribute type 3 has an invalid length. [ 1018.736347][ T9543] gretap0: left allmulticast mode [ 1018.741468][ T9543] gretap0: left promiscuous mode [ 1018.749615][ T9543] bridge0: port 1(gretap0) entered disabled state [ 1018.764029][ T9543] pimreg: left allmulticast mode [ 1018.769166][ T9543] pimreg3: left allmulticast mode [ 1018.906921][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 1019.231177][ T9543] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1019.325872][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8056'. [ 1019.362569][ T9543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.377747][ T9543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.425364][ T9543] bond0 (unregistering): Released all slaves [ 1019.439429][ T9543] bond1 (unregistering): Released all slaves [ 1019.459311][ T9543] bond2 (unregistering): Released all slaves [ 1019.479159][ T9543] bond3 (unregistering): Released all slaves [ 1019.499789][ T9543] bond4 (unregistering): Released all slaves [ 1019.558672][ T3881] bridge_slave_0: entered allmulticast mode [ 1019.578202][ T3887] gretap2: entered promiscuous mode [ 1019.584380][ T3887] batman_adv: batadv0: Adding interface: gretap2 [ 1019.590754][ T3887] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1019.610781][ T3887] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1019.827861][ T3905] netlink: 'syz.5.8058': attribute type 1 has an invalid length. [ 1019.879832][ T9543] : left promiscuous mode [ 1019.992595][ T3905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.017768][ T3919] xt_hashlimit: max too large, truncated to 1048576 [ 1020.024593][ T3919] No such timeout policy "syz1" [ 1020.032323][ T3910] FAULT_INJECTION: forcing a failure. [ 1020.032323][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.060160][ T3918] bond1: (slave veth0_to_bond): making interface the new active one [ 1020.069945][ T3918] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1020.099781][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.6.8059 Not tainted syzkaller #0 PREEMPT(full) [ 1020.099813][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1020.099827][ T3910] Call Trace: [ 1020.099836][ T3910] [ 1020.099845][ T3910] dump_stack_lvl+0xe8/0x150 [ 1020.099883][ T3910] should_fail_ex+0x40c/0x560 [ 1020.099915][ T3910] should_failslab+0xa8/0x100 [ 1020.099949][ T3910] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1020.099975][ T3910] ? local_lock_release+0x9c/0x160 [ 1020.100025][ T3910] ? __alloc_skb+0x1d7/0x7a0 [ 1020.100052][ T3910] ? __alloc_skb+0x1d7/0x7a0 [ 1020.100088][ T3910] __alloc_skb+0x1d7/0x7a0 [ 1020.100120][ T3910] netlink_ack+0x136/0xb30 [ 1020.100139][ T3910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1020.100168][ T3910] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1020.100196][ T3910] ? __pfx_ref_tracker_free+0x10/0x10 [ 1020.100233][ T3910] netlink_rcv_skb+0x2a4/0x4a0 [ 1020.100255][ T3910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1020.100284][ T3910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1020.100321][ T3910] ? down_read+0x2be/0x330 [ 1020.100366][ T3910] genl_rcv+0x28/0x40 [ 1020.100391][ T3910] netlink_unicast+0x7bb/0x940 [ 1020.100436][ T3910] netlink_sendmsg+0x813/0xb40 [ 1020.100470][ T3910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.100498][ T3910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1020.100527][ T3910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.100548][ T3910] sock_sendmsg_nosec+0x13a/0x180 [ 1020.100580][ T3910] ____sys_sendmsg+0x54e/0x850 [ 1020.100607][ T3910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1020.100641][ T3910] ? import_iovec+0x73/0xa0 [ 1020.100677][ T3910] ___sys_sendmsg+0x2a5/0x360 [ 1020.100697][ T3910] ? __lock_acquire+0x683/0x2cf0 [ 1020.100731][ T3910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.100795][ T3910] ? __fget_files+0x2a/0x420 [ 1020.100823][ T3910] ? __fget_files+0x3a2/0x420 [ 1020.100863][ T3910] __x64_sys_sendmsg+0x1b1/0x290 [ 1020.100888][ T3910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1020.100933][ T3910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.100957][ T3910] do_syscall_64+0x174/0x580 [ 1020.100977][ T3910] ? trace_irq_disable+0x3b/0x140 [ 1020.101048][ T3910] ? clear_bhb_loop+0x40/0x90 [ 1020.101076][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.101098][ T3910] RIP: 0033:0x7fcb1c99de99 [ 1020.101119][ T3910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.101138][ T3910] RSP: 002b:00007fcb1d880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.101160][ T3910] RAX: ffffffffffffffda RBX: 00007fcb1cc25fa0 RCX: 00007fcb1c99de99 [ 1020.101176][ T3910] RDX: 0000000020040000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1020.101191][ T3910] RBP: 00007fcb1d880090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.101205][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.101218][ T3910] R13: 00007fcb1cc26038 R14: 00007fcb1cc25fa0 R15: 00007ffccdb92e68 [ 1020.101255][ T3910] [ 1020.447313][ T9544] net_ratelimit: 86 callbacks suppressed [ 1020.447335][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.462244][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1020.491486][ T3912] syzkaller0: entered promiscuous mode [ 1020.568881][ T3912] syzkaller0: entered allmulticast mode [ 1020.581656][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.625933][ T9543] tipc: Left network mode [ 1020.685511][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.729955][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.772442][ T3905] bond1: entered promiscuous mode [ 1020.789062][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.836880][ T3905] veth0_to_bond: entered promiscuous mode [ 1020.860493][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.912669][ T3905] bond1: entered allmulticast mode [ 1020.929526][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.942265][ T9543] IPVS: stopping backup sync thread 19797 ... [ 1020.957708][ T3905] veth0_to_bond: entered allmulticast mode [ 1020.967066][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1021.167795][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1021.721843][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8071'. [ 1021.741055][ T3970] syzkaller0: entered promiscuous mode [ 1021.746670][ T3970] syzkaller0: entered allmulticast mode [ 1021.851743][ T3974] vlan2: entered allmulticast mode [ 1021.856941][ T3974] bridge1: entered allmulticast mode [ 1021.938258][ T3976] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8069'. [ 1021.948135][ T3966] bridge1: port 1(erspan0) entered blocking state [ 1021.954722][ T3966] bridge1: port 1(erspan0) entered disabled state [ 1021.976074][ T3966] erspan0: entered allmulticast mode [ 1021.983378][ T3966] erspan0: entered promiscuous mode [ 1021.989566][ T3966] bridge1: port 1(erspan0) entered blocking state [ 1022.011978][ T3966] bridge1: port 1(erspan0) entered forwarding state [ 1022.098701][ T3980] bond5: invalid ARP target 0.0.0.0 specified for addition [ 1022.107961][ T3980] bond5: option arp_ip_target: invalid value (0) [ 1022.137571][ T3980] bond5 (unregistering): Released all slaves [ 1022.290407][ T3966] macvlan0: entered promiscuous mode [ 1022.993109][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1023.026204][ T3996] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1023.078741][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8079'. [ 1023.337462][ T3998] syzkaller0: entered promiscuous mode [ 1023.342999][ T3998] syzkaller0: entered allmulticast mode [ 1023.770750][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1023.808506][ T4027] netlink: 'syz.5.8091': attribute type 1 has an invalid length. [ 1024.010089][ T4035] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8092'. [ 1024.047918][ T4028] netlink: 'syz.4.8089': attribute type 3 has an invalid length. [ 1024.061051][ T4027] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1024.281474][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8094'. [ 1024.313168][ T4037] gtp1: entered promiscuous mode [ 1024.320348][ T4037] gtp1: entered allmulticast mode [ 1024.636289][ T4048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.454977][ T8498] net_ratelimit: 106 callbacks suppressed [ 1025.455010][ T8498] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.581131][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.592047][ T4074] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8102'. [ 1025.691723][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.811007][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.875663][ T4070] netlink: 232 bytes leftover after parsing attributes in process `syz.5.8102'. [ 1025.900248][ T4078] syzkaller0: entered promiscuous mode [ 1025.907555][ T4078] syzkaller0: entered allmulticast mode [ 1025.929552][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1025.939118][ T8502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1026.055408][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1026.105808][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1026.167333][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1026.195120][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1026.309562][ T9543] hsr_slave_0: left promiscuous mode [ 1026.318418][ T9543] hsr_slave_1: left promiscuous mode [ 1026.339587][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.370247][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.427482][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.436961][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.491970][ T9543] veth1_macvtap: left promiscuous mode [ 1026.499300][ T9543] veth0_macvtap: left promiscuous mode [ 1026.513400][ T9543] veth1_vlan: left promiscuous mode [ 1027.256092][ T9543] team0 (unregistering): Port device team_slave_1 removed [ 1027.289699][ T9543] team0 (unregistering): Port device team_slave_0 removed [ 1027.509981][ T4089] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8105'. [ 1028.250055][ T4139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1028.419419][ T4147] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8119'. [ 1028.604882][ T4154] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1028.661566][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8122'. [ 1028.759165][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8122'. [ 1028.862681][ T4163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8123'. [ 1028.958470][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8125'. [ 1029.133373][ T4173] FAULT_INJECTION: forcing a failure. [ 1029.133373][ T4173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.146671][ T4173] CPU: 1 UID: 0 PID: 4173 Comm: syz.2.8128 Not tainted syzkaller #0 PREEMPT(full) [ 1029.146702][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1029.146717][ T4173] Call Trace: [ 1029.146727][ T4173] [ 1029.146737][ T4173] dump_stack_lvl+0xe8/0x150 [ 1029.146776][ T4173] should_fail_ex+0x40c/0x560 [ 1029.146821][ T4173] _copy_from_user+0x2d/0xb0 [ 1029.146856][ T4173] ___sys_sendmsg+0x1c6/0x360 [ 1029.146878][ T4173] ? __lock_acquire+0x683/0x2cf0 [ 1029.146913][ T4173] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.146977][ T4173] ? __fget_files+0x2a/0x420 [ 1029.147006][ T4173] ? __fget_files+0x3a2/0x420 [ 1029.147047][ T4173] __x64_sys_sendmsg+0x1b1/0x290 [ 1029.147074][ T4173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.147117][ T4173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.147142][ T4173] do_syscall_64+0x174/0x580 [ 1029.147163][ T4173] ? trace_irq_disable+0x3b/0x140 [ 1029.147190][ T4173] ? clear_bhb_loop+0x40/0x90 [ 1029.147218][ T4173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.147241][ T4173] RIP: 0033:0x7fcd4cd9de99 [ 1029.147262][ T4173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.147281][ T4173] RSP: 002b:00007fcd4dc44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.147305][ T4173] RAX: ffffffffffffffda RBX: 00007fcd4d025fa0 RCX: 00007fcd4cd9de99 [ 1029.147321][ T4173] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1029.147335][ T4173] RBP: 00007fcd4dc44090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.147349][ T4173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.147363][ T4173] R13: 00007fcd4d026038 R14: 00007fcd4d025fa0 R15: 00007fff48923938 [ 1029.147399][ T4173] [ 1029.671622][ T4178] netlink: 'syz.4.8129': attribute type 1 has an invalid length. [ 1029.832172][ T4189] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 1029.869591][ T4189] syzkaller0: entered promiscuous mode [ 1029.875126][ T4189] syzkaller0: entered allmulticast mode [ 1029.901519][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8134'. [ 1029.931887][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8134'. [ 1030.031741][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1030.156301][ T4207] netlink: 'syz.4.8141': attribute type 9 has an invalid length. [ 1030.326654][ T4213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8144'. [ 1030.466726][ T2450] net_ratelimit: 84 callbacks suppressed [ 1030.466748][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.486406][ T2450] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1030.605730][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.626276][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1030.640339][ T4220] netlink: 'syz.6.8146': attribute type 4 has an invalid length. [ 1030.675967][ T4220] .`: renamed from bond0 (while UP) [ 1030.755935][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.795613][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.828483][ T9543] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1030.965772][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1030.988673][ T9543] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1031.020073][ T4232] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1031.135203][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1031.608012][ T4267] syzkaller0: entered promiscuous mode [ 1031.613598][ T4267] syzkaller0: entered allmulticast mode [ 1031.631107][ T4269] syzkaller0: entered promiscuous mode [ 1031.636631][ T4269] syzkaller0: entered allmulticast mode [ 1031.813450][ T4279] FAULT_INJECTION: forcing a failure. [ 1031.813450][ T4279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.842758][ T4279] CPU: 1 UID: 0 PID: 4279 Comm: syz.1.8165 Not tainted syzkaller #0 PREEMPT(full) [ 1031.842789][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1031.842803][ T4279] Call Trace: [ 1031.842811][ T4279] [ 1031.842821][ T4279] dump_stack_lvl+0xe8/0x150 [ 1031.842860][ T4279] should_fail_ex+0x40c/0x560 [ 1031.842892][ T4279] _copy_from_iter+0x1d3/0x1660 [ 1031.842921][ T4279] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1031.842950][ T4279] ? rcu_is_watching+0x15/0xb0 [ 1031.842985][ T4279] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1031.843012][ T4279] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1031.843051][ T4279] ? __pfx__copy_from_iter+0x10/0x10 [ 1031.843079][ T4279] ? __alloc_skb+0x276/0x7a0 [ 1031.843108][ T4279] ? __alloc_skb+0x276/0x7a0 [ 1031.843145][ T4279] ? netlink_sendmsg+0x650/0xb40 [ 1031.843167][ T4279] ? skb_put+0x112/0x210 [ 1031.843203][ T4279] netlink_sendmsg+0x6c0/0xb40 [ 1031.843238][ T4279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.843267][ T4279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1031.843296][ T4279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.843318][ T4279] sock_sendmsg_nosec+0x13a/0x180 [ 1031.843351][ T4279] ____sys_sendmsg+0x54e/0x850 [ 1031.843381][ T4279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.843415][ T4279] ? import_iovec+0x73/0xa0 [ 1031.843451][ T4279] ___sys_sendmsg+0x2a5/0x360 [ 1031.843473][ T4279] ? __lock_acquire+0x683/0x2cf0 [ 1031.843508][ T4279] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.843571][ T4279] ? __fget_files+0x2a/0x420 [ 1031.843600][ T4279] ? __fget_files+0x3a2/0x420 [ 1031.843638][ T4279] __x64_sys_sendmsg+0x1b1/0x290 [ 1031.843665][ T4279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.843708][ T4279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.843734][ T4279] do_syscall_64+0x174/0x580 [ 1031.843755][ T4279] ? trace_irq_disable+0x3b/0x140 [ 1031.843783][ T4279] ? clear_bhb_loop+0x40/0x90 [ 1031.843811][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.843833][ T4279] RIP: 0033:0x7f245d59de99 [ 1031.843854][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.843873][ T4279] RSP: 002b:00007f245e440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.843897][ T4279] RAX: ffffffffffffffda RBX: 00007f245d825fa0 RCX: 00007f245d59de99 [ 1031.843914][ T4279] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1031.843929][ T4279] RBP: 00007f245e440090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.843943][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.843956][ T4279] R13: 00007f245d826038 R14: 00007f245d825fa0 R15: 00007ffdec9fa0c8 [ 1031.844005][ T4279] [ 1035.507951][ T4285] net_ratelimit: 110 callbacks suppressed [ 1035.507967][ T4285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.542929][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.595037][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.634997][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.694478][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.745968][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.789567][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.836255][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.874651][ T8502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1035.907387][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1036.123183][ T4310] syzkaller0: entered promiscuous mode [ 1036.130601][ T4310] syzkaller0: entered allmulticast mode [ 1036.141428][ T4310] netlink: 'syz.2.8173': attribute type 63 has an invalid length. [ 1036.151595][ T4310] netlink: 'syz.2.8173': attribute type 63 has an invalid length. [ 1036.218094][ T4316] __nla_validate_parse: 2 callbacks suppressed [ 1036.218109][ T4316] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8174'. [ 1036.700756][ T4324] FAULT_INJECTION: forcing a failure. [ 1036.700756][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.763773][ T4324] CPU: 1 UID: 0 PID: 4324 Comm: syz.6.8177 Not tainted syzkaller #0 PREEMPT(full) [ 1036.763805][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1036.763819][ T4324] Call Trace: [ 1036.763829][ T4324] [ 1036.763838][ T4324] dump_stack_lvl+0xe8/0x150 [ 1036.763878][ T4324] should_fail_ex+0x40c/0x560 [ 1036.763911][ T4324] should_failslab+0xa8/0x100 [ 1036.763945][ T4324] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1036.763973][ T4324] ? skb_clone+0x212/0x3a0 [ 1036.763994][ T4324] ? skb_clone+0x212/0x3a0 [ 1036.764025][ T4324] skb_clone+0x212/0x3a0 [ 1036.764053][ T4324] __netlink_deliver_tap+0x413/0x860 [ 1036.764090][ T4324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.764115][ T4324] netlink_deliver_tap+0x19c/0x1b0 [ 1036.764140][ T4324] netlink_unicast+0x77f/0x940 [ 1036.764186][ T4324] netlink_sendmsg+0x813/0xb40 [ 1036.764221][ T4324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.764249][ T4324] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1036.764277][ T4324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.764317][ T4324] sock_sendmsg_nosec+0x13a/0x180 [ 1036.764348][ T4324] ____sys_sendmsg+0x54e/0x850 [ 1036.764377][ T4324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.764411][ T4324] ? import_iovec+0x73/0xa0 [ 1036.764447][ T4324] ___sys_sendmsg+0x2a5/0x360 [ 1036.764468][ T4324] ? __lock_acquire+0x683/0x2cf0 [ 1036.764503][ T4324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.764576][ T4324] ? __fget_files+0x2a/0x420 [ 1036.764610][ T4324] ? __fget_files+0x3a2/0x420 [ 1036.764651][ T4324] __x64_sys_sendmsg+0x1b1/0x290 [ 1036.764678][ T4324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1036.764720][ T4324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.764745][ T4324] do_syscall_64+0x174/0x580 [ 1036.764766][ T4324] ? trace_irq_disable+0x3b/0x140 [ 1036.764793][ T4324] ? clear_bhb_loop+0x40/0x90 [ 1036.764821][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.764844][ T4324] RIP: 0033:0x7fcb1c99de99 [ 1036.764865][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.764884][ T4324] RSP: 002b:00007fcb1d880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.764907][ T4324] RAX: ffffffffffffffda RBX: 00007fcb1cc25fa0 RCX: 00007fcb1c99de99 [ 1036.764923][ T4324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1036.764937][ T4324] RBP: 00007fcb1d880090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.764951][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.764964][ T4324] R13: 00007fcb1cc26038 R14: 00007fcb1cc25fa0 R15: 00007ffccdb92e68 [ 1036.765002][ T4324] [ 1037.120845][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8179'. [ 1037.169865][ T4330] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1037.211506][ T4330] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8179'. [ 1037.520356][ T4338] syzkaller0: entered promiscuous mode [ 1037.555387][ T4344] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1037.567651][ T4338] syzkaller0: entered allmulticast mode [ 1037.597116][ T4344] xt_recent: Unsupported userspace flags (000000b1) [ 1037.606015][ T4347] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1037.617369][ T4338] netlink: 512 bytes leftover after parsing attributes in process `syz.6.8182'. [ 1037.634742][ T4338] netlink: 512 bytes leftover after parsing attributes in process `syz.6.8182'. [ 1037.737143][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8182'. [ 1037.826107][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8182'. [ 1038.088716][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1038.171029][ T4367] netlink: 'syz.2.8189': attribute type 9 has an invalid length. [ 1038.625631][ T4384] geneve4: entered promiscuous mode [ 1038.650413][ T8502] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 46957 - 0 [ 1038.666965][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8193'. [ 1038.709372][ T8502] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 46957 - 0 [ 1038.719822][ T8502] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 46957 - 0 [ 1038.742245][ T8502] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 46957 - 0 [ 1039.047786][ T4396] netlink: 'syz.5.8197': attribute type 17 has an invalid length. [ 1039.082004][ T4388] bond5: option resend_igmp: invalid value (32767) [ 1039.115171][ T4388] bond5: option resend_igmp: allowed values 0 - 255 [ 1039.134942][ T4388] bond5 (unregistering): Released all slaves [ 1039.196200][ T4406] x_tables: duplicate underflow at hook 1 [ 1039.292161][ T4405] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8199'. [ 1040.384934][ T4451] bond7 (unregistering): Released all slaves [ 1040.535279][ T9544] net_ratelimit: 96 callbacks suppressed [ 1040.535301][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.578075][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.655359][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.769845][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.810882][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.845618][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1040.885252][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1041.009542][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1041.065603][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1041.078649][ T4461] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1041.104419][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1041.200772][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.219830][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.450565][ T4461] batman_adv: batadv0: Interface deactivated: gretap1 [ 1041.609517][ T3141] xfrm0 speed is unknown, defaulting to 1000 [ 1041.621222][ T4504] __nla_validate_parse: 6 callbacks suppressed [ 1041.621239][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8226'. [ 1041.655383][ T3141] syz2: Port: 1 Link DOWN [ 1041.711471][ T4487] syzkaller0: entered promiscuous mode [ 1041.751597][ T4487] syzkaller0: entered allmulticast mode [ 1041.773037][ T2502] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.911064][ T4519] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1042.028349][ T4521] netlink: 'syz.2.8230': attribute type 1 has an invalid length. [ 1045.503055][ T2502] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.512055][ T2502] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.527762][ T4521] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1045.565740][ T2502] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.619382][ T9541] net_ratelimit: 98 callbacks suppressed [ 1045.619410][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.737787][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.753077][ T2458] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1045.791800][ T4544] nbd: must specify a size in bytes for the device [ 1045.875076][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1045.888113][ T2458] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1046.019978][ T3152] IPVS: starting estimator thread 0... [ 1046.028235][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1046.037573][ T4553] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1046.048565][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1046.206755][ T4562] netlink: 'syz.6.8239': attribute type 1 has an invalid length. [ 1046.228102][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1046.264596][ T4564] xt_hashlimit: size too large, truncated to 1048576 [ 1046.275928][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1046.325783][ T4554] IPVS: using max 27 ests per chain, 64800 per kthread [ 1046.344135][ T4566] xt_hashlimit: size too large, truncated to 1048576 [ 1050.155859][ T4588] syzkaller0: entered promiscuous mode [ 1050.173069][ T4588] syzkaller0: entered allmulticast mode [ 1050.702760][ T2502] net_ratelimit: 89 callbacks suppressed [ 1050.702784][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.746349][ T4617] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8253'. [ 1050.820385][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.865522][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1050.873396][ T2502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1051.005089][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1051.013090][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1051.106941][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1051.117506][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1051.145147][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1051.167162][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1051.205206][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1051.213228][ T2502] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1051.933151][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8266'. [ 1051.942090][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8266'. [ 1052.245176][ T4684] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8269'. [ 1052.595742][ T4701] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8275'. [ 1052.689115][ T4690] syzkaller0: entered promiscuous mode [ 1052.708690][ T4690] syzkaller0: entered allmulticast mode [ 1052.969173][ T4713] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8277'. [ 1053.363436][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8280'. [ 1055.708101][ T9543] net_ratelimit: 138 callbacks suppressed [ 1055.708125][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.754144][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.801755][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.916138][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1055.951418][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.038976][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.073323][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.159102][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.192389][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.281816][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1056.944614][ T4723] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1056.955310][ T4723] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8280'. [ 1057.197246][ T4743] bond2: entered allmulticast mode [ 1057.286919][ T4743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1057.438675][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1057.681255][ T4780] netlink: 'syz.5.8295': attribute type 39 has an invalid length. [ 1057.745849][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8296'. [ 1057.777383][ T4781] netlink: 'syz.5.8295': attribute type 39 has an invalid length. [ 1057.836845][ T4783] netlink: 'syz.6.8296': attribute type 1 has an invalid length. [ 1057.958054][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8297'. [ 1058.020649][ T4796] team1: entered promiscuous mode [ 1058.025765][ T4796] team1: entered allmulticast mode [ 1058.205106][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8301'. [ 1058.216485][ T4805] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8301'. [ 1058.428546][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8301'. [ 1058.437498][ T4805] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8301'. [ 1058.490355][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8304'. [ 1059.466442][ T4850] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8315'. [ 1059.647317][ T4858] can: request_module (can-proto-0) failed. [ 1059.976646][ T4867] netlink: 'syz.4.8319': attribute type 1 has an invalid length. [ 1060.222779][ T29] audit: type=1107 audit(1784713243.471:13): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='anuAT®XoaJƵ&u&sa=ȣrJ+$de' [ 1060.260151][ T4867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1060.398931][ T4873] bond4: (slave veth0_to_bond): Releasing backup interface [ 1060.456134][ T4888] netlink: 'syz.5.8322': attribute type 1 has an invalid length. [ 1060.468157][ T4873] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1060.579809][ T4884] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1060.593507][ T4878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1060.613177][ T4878] bond6: (slave bond7): Enslaving as an active interface with a down link [ 1060.715449][ T9544] net_ratelimit: 164 callbacks suppressed [ 1060.715471][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1060.805977][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1060.855743][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1060.916150][ T4890] bond3: (slave bridge2): making interface the new active one [ 1060.939538][ T4890] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1061.019386][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.048450][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1061.205301][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.228074][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1061.372105][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.411340][ T4909] netlink: 'syz.5.8326': attribute type 1 has an invalid length. [ 1061.426715][ T4908] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 1061.434853][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1061.492185][ T4902] sctp: [Deprecated]: syz.1.8327 (pid 4902) Use of int in max_burst socket option deprecated. [ 1061.492185][ T4902] Use struct sctp_assoc_value instead [ 1061.555271][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1061.767596][ T4915] vlan3: entered allmulticast mode [ 1061.773290][ T4915] bond0: entered allmulticast mode [ 1061.781478][ T4919] netlink: 'syz.2.8330': attribute type 1 has an invalid length. [ 1061.792383][ T4919] netlink: 'syz.2.8330': attribute type 2 has an invalid length. [ 1062.010358][ T4933] netlink: 'syz.4.8336': attribute type 3 has an invalid length. [ 1062.112710][ T4904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.291134][ T4949] __nla_validate_parse: 4 callbacks suppressed [ 1062.291156][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8337'. [ 1062.492649][ T4949] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1062.521664][ T4949] bond5 (unregistering): Released all slaves [ 1062.631155][ T4961] netlink: 'syz.6.8339': attribute type 29 has an invalid length. [ 1062.656340][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8339'. [ 1062.856389][ T4960] netlink: 'syz.1.8340': attribute type 10 has an invalid length. [ 1062.864682][ T4960] veth1_macvtap: left promiscuous mode [ 1062.874707][ T4960] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1062.998785][ T4977] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1063.589892][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8351'. [ 1064.142874][ T5040] netlink: 'syz.4.8357': attribute type 5 has an invalid length. [ 1065.826102][ T2458] net_ratelimit: 88 callbacks suppressed [ 1065.826134][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.840934][ T2458] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1065.954657][ T2458] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1065.962530][ T2458] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1066.074689][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.082475][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1066.284815][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.292917][ T9541] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1066.404177][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1066.412019][ T9544] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1066.859048][ T5023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.868061][ T5028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.137255][ T5074] netlink: 'syz.4.8370': attribute type 13 has an invalid length. [ 1067.162776][ T5075] netlink: 'syz.4.8370': attribute type 13 has an invalid length. [ 1067.175564][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8370'. [ 1067.185359][ T5074] netlink: 'syz.4.8370': attribute type 13 has an invalid length. [ 1067.193221][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8370'. [ 1067.205837][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8370'. [ 1067.233003][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8370'. [ 1067.289851][ T5084] tunl0: left promiscuous mode [ 1067.327396][ T5084] erspan0: left promiscuous mode [ 1067.512781][ T5096] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8373'. [ 1067.523310][ T5096] Cannot find add_set index 4 as target [ 1067.557089][ T5101] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8375'. [ 1067.698746][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8377'. [ 1067.942683][ T5125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1067.988361][ T5125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1068.116552][ T5133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8383'. [ 1068.385226][ T5144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1068.749614][ T5167] netlink: 'syz.4.8395': attribute type 11 has an invalid length. [ 1068.881025][ T5173] netlink: 'syz.4.8397': attribute type 1 has an invalid length. [ 1068.993073][ T5173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1069.091071][ T5173] bond8: (slave geneve3): making interface the new active one [ 1069.100354][ T5173] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1069.109428][ T9544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.125720][ T9544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.163433][ T9544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.178159][ T9544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.545364][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.554329][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.562264][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.570194][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.594599][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.646427][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.658371][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.749748][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.759495][ T5196] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 1069.812338][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8408'. [ 1069.999198][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8409'. [ 1070.015705][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8409'. [ 1070.043558][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8409'. [ 1070.835187][ T9542] net_ratelimit: 92 callbacks suppressed [ 1070.835209][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1070.921755][ T9542] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 1071.048335][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.105188][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.171228][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.196614][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.204929][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.213840][ T5264] batadv0: entered promiscuous mode [ 1071.219347][ T5264] batadv0: entered allmulticast mode [ 1071.225805][ T5264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1071.299507][ T8511] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.325254][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.344544][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.375179][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1071.477307][ T5264] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1071.499872][ T5264] batadv0: left promiscuous mode [ 1071.557617][ T5264] batadv0: left allmulticast mode [ 1071.574655][ T5264] bond0 (unregistering): Released all slaves [ 1071.865317][T30732] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.140830][ T5307] syzkaller0: entered allmulticast mode [ 1072.561485][ T5329] x_tables: unsorted underflow at hook 4 [ 1073.326812][ T5375] syzkaller0: entered promiscuous mode [ 1073.332366][ T5375] syzkaller0: entered allmulticast mode [ 1073.538251][ T5391] __nla_validate_parse: 6 callbacks suppressed [ 1073.538273][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8452'. [ 1073.980637][ T5409] validate_nla: 8 callbacks suppressed [ 1073.980656][ T5409] netlink: 'syz.5.8458': attribute type 10 has an invalid length. [ 1074.007922][ T5407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8455'. [ 1074.026453][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.039249][ T5409] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1074.075744][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.139222][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.242483][ T5412] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1074.254509][ T5412] bond0 (unregistering): Released all slaves [ 1074.569666][ T5443] netlink: 'syz.1.8463': attribute type 14 has an invalid length. [ 1074.577554][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8463'. [ 1074.587611][ T5443] netlink: 'syz.1.8463': attribute type 14 has an invalid length. [ 1074.595492][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8463'. [ 1074.620893][ T5445] syzkaller0: entered promiscuous mode [ 1074.638062][ T5445] syzkaller0: entered allmulticast mode [ 1074.859749][ T5449] geneve2: entered promiscuous mode [ 1074.904684][ T5449] lo: entered allmulticast mode [ 1074.988042][ T5453] syzkaller0: entered promiscuous mode [ 1075.019980][ T5453] syzkaller0: entered allmulticast mode [ 1075.847978][ T9542] net_ratelimit: 79 callbacks suppressed [ 1075.848002][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1075.888435][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1075.966039][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.080983][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.198662][ T9541] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.225360][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.310775][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.341339][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.371677][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1076.427498][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1077.291760][ T5433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1077.489791][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1077.538915][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1077.547946][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1078.651766][ T5469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8470'. [ 1078.664049][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1078.672976][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1078.677411][ T9544] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.752676][ T9544] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.756887][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1078.782516][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8470'. [ 1078.791460][ T9544] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.877271][ T9544] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.910985][ T5475] IPv6: NLM_F_CREATE should be specified when creating new route [ 1079.196077][ T5486] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1079.208947][ T5486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1079.292785][ T5491] tipc: Started in network mode [ 1079.319349][ T5491] tipc: Node identity 2003, cluster identity 4711 [ 1079.358088][ T5491] tipc: Node number set to 8195 [ 1079.423237][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1079.533542][ T5499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8480'. [ 1079.595504][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8480'. [ 1079.619129][ T5499] netlink: 'syz.5.8480': attribute type 5 has an invalid length. [ 1079.757178][ T5501] syzkaller0: entered promiscuous mode [ 1079.762963][ T5501] syzkaller0: entered allmulticast mode [ 1079.780053][ T5499] geneve2: entered promiscuous mode [ 1079.838018][ T5499] geneve2: entered allmulticast mode [ 1079.852930][ T9544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1079.869450][ T9544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1080.875985][ T9542] net_ratelimit: 95 callbacks suppressed [ 1080.876009][ T9542] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1080.995402][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.035142][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.055766][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.087023][ T8511] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.115483][ T8511] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.235444][ T8511] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.356537][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.385278][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1081.407464][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.676613][ T9544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1083.685304][ T9544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1083.740239][ T5549] netlink: 'syz.1.8491': attribute type 9 has an invalid length. [ 1083.838073][ T5561] __nla_validate_parse: 2 callbacks suppressed [ 1083.838094][ T5561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8493'. [ 1083.892831][ T5560] netlink: 300 bytes leftover after parsing attributes in process `syz.5.8493'. [ 1084.152858][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8498'. [ 1084.165051][ T5577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8498'. [ 1084.285579][ T9094] hid-generic 0005:0C45:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1084.366174][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8501'. [ 1084.392193][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1084.405874][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1084.452229][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1084.471713][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1084.482890][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1084.875158][ T5598] syzkaller0: entered promiscuous mode [ 1084.880703][ T5598] syzkaller0: entered allmulticast mode [ 1085.477354][ T5628] sock: sock_timestamping_bind_phc: sock not bind to device [ 1085.688169][ T5633] netlink: 'syz.5.8514': attribute type 21 has an invalid length. [ 1085.696302][ T5633] IPv6: NLM_F_CREATE should be specified when creating new route [ 1085.728814][ T5631] netlink: 'syz.2.8513': attribute type 2 has an invalid length. [ 1085.755035][ T5631] netlink: 'syz.2.8513': attribute type 1 has an invalid length. [ 1085.905951][ T9544] net_ratelimit: 90 callbacks suppressed [ 1085.905976][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1085.930435][ T5638] netlink: 'syz.6.8515': attribute type 1 has an invalid length. [ 1086.006663][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.041153][ T9544] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.116895][ T5645] netlink: 'syz.6.8515': attribute type 10 has an invalid length. [ 1086.130809][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.252732][ T9543] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.277626][ T2502] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.376306][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.496045][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.534886][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1086.554552][ T2450] bond0: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1087.078200][ T30] INFO: task syz.3.7406:1335 blocked for more than 143 seconds. [ 1087.085884][ T30] Not tainted syzkaller #0 [ 1087.090853][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.099553][ T30] task:syz.3.7406 state:D stack:27288 pid:1335 tgid:1334 ppid:29518 task_flags:0x400140 flags:0x00080002 [ 1087.111529][ T30] Call Trace: [ 1087.114853][ T30] [ 1087.117827][ T30] __schedule+0x17d9/0x56c0 [ 1087.122478][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1087.127467][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1087.132496][ T30] ? __pfx___schedule+0x10/0x10 [ 1087.137406][ T30] ? schedule+0x90/0x2b0 [ 1087.142730][ T30] schedule+0x164/0x2b0 [ 1087.146955][ T30] schedule_preempt_disabled+0x13/0x30 [ 1087.152465][ T30] __mutex_lock+0x7bf/0x1550 [ 1087.157110][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1087.161921][ T30] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1087.167839][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1087.172926][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1087.195429][ T30] ? kern_path+0xd1/0x150 [ 1087.199807][ T30] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1087.205556][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1087.211825][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1087.218096][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1087.223813][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1087.229971][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1087.234699][ T30] ? security_capable+0x7e/0x2c0 [ 1087.239686][ T30] genl_rcv_msg+0x614/0x7a0 [ 1087.244231][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1087.249308][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1087.255606][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1087.260407][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1087.265456][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1087.270780][ T30] ? down_read+0x2be/0x330 [ 1087.275223][ T30] genl_rcv+0x28/0x40 [ 1087.279248][ T30] netlink_unicast+0x7bb/0x940 [ 1087.284061][ T30] netlink_sendmsg+0x813/0xb40 [ 1087.288887][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.311234][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1087.316225][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.321546][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1087.326658][ T30] ____sys_sendmsg+0x54e/0x850 [ 1087.331471][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.336813][ T30] ? import_iovec+0x73/0xa0 [ 1087.341373][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1087.346162][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1087.351158][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.356413][ T30] ? futex_wait+0x2a2/0x390 [ 1087.360988][ T30] ? __fget_files+0x2a/0x420 [ 1087.365631][ T30] ? __fget_files+0x3a2/0x420 [ 1087.370368][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1087.375365][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.380889][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.387012][ T30] do_syscall_64+0x174/0x580 [ 1087.391642][ T30] ? trace_irq_disable+0x3b/0x140 [ 1087.396714][ T30] ? clear_bhb_loop+0x40/0x90 [ 1087.401435][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.407368][ T30] RIP: 0033:0x7f706499de99 [ 1087.429194][ T30] RSP: 002b:00007f706590c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.437688][ T30] RAX: ffffffffffffffda RBX: 00007f7064c25fa0 RCX: 00007f706499de99 [ 1087.445735][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1087.453767][ T30] RBP: 00007f7064a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1087.461768][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.469762][ T30] R13: 00007f7064c26038 R14: 00007f7064c25fa0 R15: 00007ffeb1aaaf48 [ 1087.477843][ T30] [ 1087.481039][ T30] [ 1087.481039][ T30] Showing all locks held in the system: [ 1087.488788][ T30] 1 lock held by khungtaskd/30: [ 1087.493664][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1087.503592][ T30] 2 locks held by getty/5380: [ 1087.508303][ T30] #0: ffff88803601f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1087.518196][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1087.551157][ T30] 3 locks held by kworker/u8:19/8511: [ 1087.556609][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1087.568575][ T30] #1: ffffc900057efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1087.581642][ T30] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1087.592457][ T30] 3 locks held by kworker/u8:25/9541: [ 1087.598483][ T30] #0: ffff8880322bf140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1087.610874][ T30] #1: ffffc9001c5cfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1087.624584][ T30] #2: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1087.634263][ T30] 2 locks held by syz.0.7297/894: [ 1087.639309][ T30] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1087.665425][ T30] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1087.675703][ T30] 2 locks held by syz.3.7406/1335: [ 1087.680850][ T30] #0: ffffffff9009d608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1087.689097][ T30] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1087.700574][ T30] 2 locks held by syz.1.8505/5597: [ 1087.708595][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1087.719038][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1087.730050][ T30] 1 lock held by syz.4.8511/5626: [ 1087.735084][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1087.744292][ T30] 1 lock held by syz.5.8514/5633: [ 1087.749337][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1087.758762][ T30] 1 lock held by syz.5.8514/5634: [ 1087.787268][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1087.796775][ T30] 2 locks held by syz.6.8515/5638: [ 1087.801909][ T30] #0: ffffffff9057bfc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1087.811431][ T30] #1: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1087.820539][ T30] 2 locks held by syz.6.8515/5641: [ 1087.825671][ T30] #0: ffffffff8f799488 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1087.835262][ T30] #1: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1087.844405][ T30] 1 lock held by syz.6.8515/5644: [ 1087.849462][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1087.858599][ T30] 1 lock held by syz.6.8515/5645: [ 1087.863661][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x6a7/0xb20 [ 1087.872706][ T30] 2 locks held by syz.2.8516/5640: [ 1087.877842][ T30] #0: ffffffff9059a5a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1087.912283][ T30] #1: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1087.921394][ T30] 1 lock held by syz.2.8516/5643: [ 1087.926426][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1087.935392][ T30] 1 lock held by syz.2.8516/5646: [ 1087.940443][ T30] #0: ffffffff9002cd80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1087.951457][ T30] [ 1087.955564][ T30] ============================================= [ 1087.955564][ T30] [ 1087.966895][ T30] NMI backtrace for cpu 0 [ 1087.966914][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1087.966937][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1087.966950][ T30] Call Trace: [ 1087.966959][ T30] [ 1087.966969][ T30] dump_stack_lvl+0xe8/0x150 [ 1087.967007][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1087.967126][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1087.967160][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1087.967201][ T30] sys_info+0x135/0x170 [ 1087.967225][ T30] watchdog+0xfd7/0x1030 [ 1087.967260][ T30] ? watchdog+0x1c7/0x1030 [ 1087.967293][ T30] kthread+0x388/0x470 [ 1087.967324][ T30] ? __pfx_watchdog+0x10/0x10 [ 1087.967376][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.967408][ T30] ret_from_fork+0x514/0xb70 [ 1087.967443][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.967473][ T30] ? __switch_to+0xc89/0x1420 [ 1087.967502][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.967533][ T30] ret_from_fork_asm+0x1a/0x30 [ 1087.967571][ T30] [ 1087.967581][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1088.095177][ C1] NMI backtrace for cpu 1 [ 1088.095196][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1088.095217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1088.095229][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1088.095264][ C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 aa 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1088.095281][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 1088.095299][ C1] RAX: 0000000000d792ef RBX: ffffffff819ab450 RCX: 0000000080000001 [ 1088.095313][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba9f RDI: ffffffff8c4bda80 [ 1088.095338][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1088.095358][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1088.095378][ C1] R13: 1ffff11003c53000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1088.095395][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 1088.095417][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.095431][ C1] CR2: 0000558bb5b06168 CR3: 000000004b070000 CR4: 00000000003526f0 [ 1088.095448][ C1] Call Trace: [ 1088.095457][ C1] [ 1088.095465][ C1] default_idle+0x9/0x20 [ 1088.095484][ C1] default_idle_call+0x72/0xb0 [ 1088.095506][ C1] do_idle+0x2e0/0x540 [ 1088.095533][ C1] ? __pfx_do_idle+0x10/0x10 [ 1088.095560][ C1] ? do_idle+0x4d1/0x540 [ 1088.095585][ C1] cpu_startup_entry+0x43/0x60 [ 1088.095610][ C1] start_secondary+0x101/0x110 [ 1088.095636][ C1] common_startup_64+0x13e/0x157 [ 1088.095668][ C1] [ 1088.280102][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.286992][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1088.296137][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1088.306229][ T30] Call Trace: [ 1088.309540][ T30] [ 1088.312506][ T30] vpanic+0x56c/0xa60 [ 1088.316534][ T30] ? __pfx___schedule+0x10/0x10 [ 1088.321433][ T30] ? __pfx_vpanic+0x10/0x10 [ 1088.326001][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1088.332222][ T30] panic+0xc5/0xd0 [ 1088.336000][ T30] ? __pfx_panic+0x10/0x10 [ 1088.340452][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1088.346049][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1088.351468][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1088.357658][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1088.363864][ T30] watchdog+0x1030/0x1030 [ 1088.368251][ T30] ? watchdog+0x1c7/0x1030 [ 1088.372709][ T30] kthread+0x388/0x470 [ 1088.376822][ T30] ? __pfx_watchdog+0x10/0x10 [ 1088.381527][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.386154][ T30] ret_from_fork+0x514/0xb70 [ 1088.390785][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.395937][ T30] ? __switch_to+0xc89/0x1420 [ 1088.400651][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.405280][ T30] ret_from_fork_asm+0x1a/0x30 [ 1088.410093][ T30] [ 1088.413757][ T30] Kernel Offset: disabled [ 1088.418096][ T30] Rebooting in 86400 seconds..